Embedded Files
In this section you can assign users to administrative roles with different levels of privileges. You can also create and assign your own custom roles.
In this section you can assign users to administrative roles with different levels of privileges. You can also create and assign your own custom roles.
System roles
System roles
Super Admin
Super Admin
These users have complete management of the entire domain. Note that any Super Admin also has access to access Google Vault reports, so it's important that this role is not administered freely.
Groups Admin
Groups Admin
This is particularly useful if you have a few users who you would like to create and manage Groups on your domain.
User Management Admin
User Management Admin
This role allows management of individual users such as resetting passwords, security settings and also deleting or suspending users.
Help Desk Admin
Help Desk Admin
This role allows the resetting of users passwords. You can give permissions to just manage individual organisation units, so it's often a good idea to give staff the 'User Management' privileges just for the Student organisation unit.
Services Admin
Services Admin
This role allows a user to manage all of the Device management settings.
User created roles
User created roles
If you are working in a team of IT/Network Managers we recommend that you create a role called 'Super(ish) Admin' and enable all privileges except for Google Vault. This enable anyone assigned to that role to have full access to manage the Admin console, but can't access users emails and Drive files through Vault.
Report abuse