Assign admin privileges for the password vaulted apps service

Password vaulted apps were available in Cloud Identity Premium edition until June 2022. Shutdown of this feature started on September 21, 2022, and will complete by June 21, 2023. Learn more

You can assign administrator privileges for the password vaulted apps service to another admin in your Google Workspace account. When you assign password vaulting privileges to another admin, you automatically give them read access to organizational units, users, and groups in the Admin API. 

To assign admin privileges for the password vaulted apps service:

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AccountAdmin roles.
3. Point to a custom administrator role.
   Tip: If you need to create a new admin role, see Create a custom role.
4. Click View privileges.
5. Click Open privileges.
6. Under Password Vault, check the Password Vaulting box.
   Later, if you uncheck the Password Vaulting box, you need to uncheck the Read boxes under Admin API PrivilegesOrganization Units, Users, and Groups to remove those privileges.
7. Click Save.
8. Assign the new role to users. For details, see Assign administrator roles to a user.