Create, edit, and delete custom admin roles

You must be signed in as a super administrator for this task.

If the pre-built administrator roles don't grant the privileges that you want to assign to a user, create a custom role that does. Each custom role can include one or more administrator privileges for specific management tasks in your Google Admin console. The privileges you select determine which Home page controls are in the user's Admin console and what settings the user can manage.

Create a custom role

Before you begin: Check if the role already exists. Go to pre-built administrator roles.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. From the Admin console Home page, go to Admin roles.
3. Click Create new role.
4. Enter a name and, optionally, a description for the role and click Continue.
5. From the Privilege Name list, check boxes to select each privilege that you want users with this role to have.

   Learn about each privilege

6. Click Continue.
7. Review the privileges and click Create Role.
8. Follow the steps to assign the custom role.

Edit a custom role

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. From the Admin console Home page, go to Admin roles.
3. Click the custom role that you want to edit.
4. Choose an action:
   • To edit the name or description of the role, click Edit Role Info and make the changes.
   • To edit the privileges associated with the role, click Privileges and check the boxes to select each privilege that you want users with this role to have.
5. Click Save.

Delete a custom role

Requirements: To delete a custom role, you can't be assigned to the role or remove yourself. Contact another super administrator to remove you from the role. Then, follow the steps below to delete the role.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. From the Admin console Home page, go to Admin roles.
3. Click the custom role that you want to delete.
4. Click Admins assigned.
5. Check the Admin box to select all admins who are assigned the role.
6. Click Unassign roleUnassign Role.
7. Click Delete RoleDelete Role.

Related topic

Create an admin role for an organizational unit