Grant or remove access to apps

This feature is available with G Suite Enterprise, Cloud Identity Premium, and G Suite Enterprise for Education.

From the password vaulted apps page, you can grant or remove access to various apps for specific users or groups.

Grant access to users or groups

You can assign all users in a group the same credential to an application, or—if it’s more convenient for you as an administrator—you can assign apps with individual credentials, which enables users to add their own username and password to the application.

  1. Sign in to the Google Admin console at admin.google.com.
    Be sure to sign in with your administrator account and not with your personal Gmail account.
  2. From the Menu menu in the upper-left section of the page, go to Apps > Password vaulted apps.
  3. Click one of the apps on the password vaulted apps page.
  4. Click the Assignments panel.
  5. From the panel on the left side of the page, search for and select users or groups to view a list of users and credentials that don't have access to the selected application.
  6. Click Grant access.
  7. If you want each user to enter their own username and password to configure this app, click Individual credentials. If you want to assign all users in this group the same username and password to access this app, click Same credential for everyone.
  8. Click GRANT ACCESS.

    Important: Groups can inherit access to apps through their membership in other groups. So if you grant access to a group that contains child groups, members in the child group will also get access via inheritance. In the table at the bottom of the app page, users are only listed if they have access to this app via the selected group. (For more details about how nested groups behave, see Add a group to another group.) 

Remove access for users or groups  

  1. Sign in to the Google Admin console at admin.google.com.
    Be sure to sign in with your administrator account and not with your personal Gmail account.
  2. From the Menu menu in the upper-left section of the page, go to Apps > Password vaulted apps.
  3. Click one of the apps on the password vaulted apps page.
  4. Click the Assignments panel.
  5. From the panel on the left side of the page, search for and select users or groups to view a list of users and credentials that have access to the selected application.
  6. Click Remove access.

    If a group has multiple assignments, you’ll need to check the boxes for the assignments that you want to remove, and then click REMOVE.

Add credentials for individual users

  1. Sign in to the Google Admin console at admin.google.com.
    Be sure to sign in with your administrator account and not with your personal Gmail account.
  2. From the Menu menu in the upper-left section of the page, go to Apps > Password vaulted apps.
  3. Click one of the apps on the password vaulted apps page.
  4. Click the Assignments panel.
  5. From the panel on the left side of the page, search for and select users or groups to view a list of users and credentials that have access to the selected application.
  6. Click one of the groups to open a page that lists the users within that group.
  7. From the Credential column, click Add credential.
  8. Select an existing credential, or create a new credential.
  9. Click SAVE.

Related articles

Was this helpful?
How can we improve it?