Create, edit, and delete custom admin roles

You must be signed in as a super administrator for this task.

If the pre-built administrator roles don't grant the privileges that you want to assign to a user, create a custom role that does. Each custom role can include one or more administrator privileges for specific management tasks in your Google Admin console. The privileges you select determine which Home page controls are in the user's Admin console and what settings the user can manage. Regardless of the privileges you select, a user with a custom admin role can never make changes to your or any other administrator account. 

You can create up to 750 custom roles for your entire organization. If your organization had more than 750 custom roles before the limit went into effect, we recommend adjusting your roles to bring them under the limit.

Create a custom role

Before you begin: Check if the role already exists. Go to pre-built administrator roles.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AccountAdmin roles.
3. Click Create new role.
4. Enter a name and, optionally, a description for the role and click Continue.
5. From the Privilege Name list, check boxes to select each privilege that you want users with this role to have.

   Learn about each privilege

6. Click Continue.
7. Review the privileges and click Create Role.
8. Follow the steps to assign the custom role.

Edit a custom role

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AccountAdmin roles.
3. Click the custom role that you want to edit.
4. Choose an action:
   • To edit the name or description of the role, click Edit Role Info and make the changes.
   • To edit the privileges associated with the role, click Privileges and check the boxes to select each privilege that you want users with this role to have.
5. Click Save.

Delete a custom role

Requirements: To delete a custom role, you can't be assigned to the role or remove yourself. Contact another super administrator to remove you from the role. Then, follow the steps below to delete the role.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AccountAdmin roles.
3. Click the custom role that you want to delete.
4. Click Admins assigned.
5. Check the Admin box to select all admins who are assigned the role.
6. Click Unassign roleUnassign Role.
7. Click Delete RoleDelete Role.

Related topic

Create an admin role for an organizational unit