Manage access to services that aren't controlled individually

If a service in your Admin console doesn't have its own ON/OFF control, you can't control it individually. Instead, you can turn all of these services either On or Off.  

Note that these services might be On by default for some customers.

Before you begin

For services that don't have their own ON/OFF control:

  • You turn all of these services On or Off at once. You can't set them individually.
  • You can manage access to these services for all users or just specific organizational units.
  • If you're not sure whether to turn off these services for your organization, you might try turning them off for only one or a few organizational units first. Then wait a few days to see if users can't access services they need.
  • If a service without an individual On or Off control later gets this control in the Admin console, it retains its current state of On or Off. 

Turn services on or off

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenAdditional Google services.
  3. At the top of the page, click Change next to the message, Access to additional services without individual control.
  4. (Optional) To turn services on or off for all users in your organization:
    1. In the left panel, make sure Settings for all organizational units is selected.
    2. Choose to turn services on or off for all users.
    3. Click Save.
  5. (Optional) To turn services on or off for users in a specific organizational unit:
    1. In the left panel, select the organizational unit.
    2. Choose to turn services on or off for users.
    3. Click Override to keep this setting the same, even if the parent setting changes.
    4. If the organizational unit's status is already Overridden, choose an option:
      • Inherit—Reverts to the same setting as its parent.
      • Save—Saves your new setting (even if the parent setting changes).

It can take up to 48 hours for the new setting to take effect.

Tip: If you turn off services, consider communicating your organization's policy to users.

Choosing whether to restrict access

Reasons to restrict access to services

Some Google services don't have their own On or Off setting in the Admin console, and Google may release new services at any time. You might want to restrict users from accessing services with their managed Google Account for reasons such as:

  • Company policy—Your organization might need control over the services your users can use with their organization-managed Google Accounts.
  • Industry regulations—Your organization might be subject to industry regulations that require administrative control over users' data.
  • School restrictions—Your educational institution might need to restrict use of services for policy reasons or because it doesn't have parental approval to provide them to students.

How restricting access to services affects users

  • If you turn off Google services that you don't control individually in the Admin console, users can't use services that might be helpful to them. If users are already using these services for work purposes, restricting access to them might disrupt their work.
  • If users try to sign in to a restricted service, they're usually redirected to a page that tells them the service is unavailable and why.
  • If you turn off services that you don't control individually, users' data isn't deleted. Users might be able to export their data from some of these services using Google Takeout. To let users export their data, coordinate with them before turning off these services

Related topics

Was this helpful?
How can we improve it?