About user and device policies
You can give some users in your organization access to different features or services than others. For example, you might turn on Google Hangouts only for your support team, or allow only the sales department to share public calendars. You can also tailor settings for different Chrome devices. Just group users or devices that have specific requirements into organizational units. Then apply your desired settings to each of those units.
When applying policies, you can:
For example, to turn on Hangouts only for your support team, create an organizational unit containing your support users. Then turn Hangouts On for just that organization.
Most services have individual settings you can apply to organizational units. To allow only your sales department to share calendars publicy, for example, create an organizational unit containing your sales team. Then in your Calendars settings, enable public sharing for just that organization.
You can add Chrome devices to organizational units, too. For example, to let teachers use Incognito mode on their Chromebook but not students, create an organizational unit containing the teachers' Chromebooks. Then in your Devices settings, enable Incognito mode for just that organization.
Next steps: Learn how the organizational structure works