Organizational policies FAQ
Help me understandWhy define an organizational structure?
You should define an organizational structure only if you want to customize services access or settings for different users or devices. For details, see About user and device policies.
No. If you don't define an organizational structure, all settings you make in your Google Admin console apply equally for all users and devices.
No. A user's organizational unit determines which services and features are available to that user. A user's domain determines their account username and email address (if they're using Gmail). If you want to apply policies to users in a particular domain, you can place those users in their own organizational unit. But you don't have to. An organizational unit can include users from different domains. And users in a domain can be distributed across any number of organizational units.
No. An organizational unit determines which services and features are available to a set of users.
An access group turns on a service for users within an organizational unit. You can turn off a service for the organization, and then add specific users to an access group that has the service turned on.
No. The organizational structure in your Admin console only controls which services and features are available to users. You can build this structure to match your LDAP structure if you want to, but you don't have to.
How it worksHow do I add users to organizational units?
You can add a user to an organizational unit when you create their account. You can also later move a user to another organizational unit.
Not at this time. Settings for most paid services can be customized by organizational unit, but for some services, settings must apply the same for all users. Google recognizes the need to control other settings but this level of granularity is not yet available.
Yes. To customize service access for a single user, create an organizational unit containing just that user.
Yes. You can assign an administrator who has a User management role to perform actions only on users in specific organizational units. For details, see see Assign user management roles.
If a user has created Google Docs, Sheets, Slides, or Sites and subsequently does not have access to these services, their content remains in the system, still accessible by the administrator and any users the content was shared with.