About user and device policies

You can let some people in your organization use a feature or service in their managed Google account, but not others. For example, if you're a Google Workspace administrator, you might turn on Google Meet only for your support team, or you might let only the sales department share public calendars. You can also tailor settings for different Chrome devices. Just group users or devices that have specific requirements into organizational units. Then apply your desired settings to each of those units.

You can apply policies to:


Turn services on or off for different users

For example, if you're an admin, you can turn on Meet only for your support team by creating an organizational unit containing support users. You can then turn on Meet just for that organization.


Change service settings for different users

Most services have individual settings you can apply to organizational units. For example, if you're an admin, you can allow only your sales department to share calendars publicly by creating an organizational unit containing your sales team. You can then enable public sharing just for that organization in your Calendar settings.


Change settings for different Chrome devices

You can add Chrome devices to organizational units, too. For example, to let teachers use Incognito mode on their Chromebook but not students, create an organizational unit containing the teachers' Chromebooks. Then in your Devices settings, turn on Incognito mode for just that organization.

Next steps: Learn how the organizational structure works

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Clear search
Close search
Google apps
Main menu
Search Help Center