Exercise 3: Assign Administrator roles

As a Google Workspace Administrator, you can share the responsibility of managing your Google Workspace account by assigning Administrator roles to other users. Assigning a role grants the user access to the Google Admin console. Google recommends following a practice of least privilege when assigning Administrator roles, where the permissions match the role and responsibilities of the user. To learn more about security best practices for Administrator accounts, please refer to the article, “Security best practices for administrator accounts”.

Pre-built Administrator roles

The easiest way to give Administrator privileges to another user is to assign prebuilt Administrator roles. Each role grants one or more privileges that together allow you to perform a common business function. For example, one role manages user accounts, another role manages groups, another role manages calendars and resources, and so on. Assign multiple roles to grant all privileges in those roles.

Custom Administrator roles

If the prebuilt Administrator roles don't grant the privileges that you want to assign to a user, you can create a custom role that does. Each custom role can include one or more Administrator privileges for specific management tasks in your Google Admin console. You can create up to 750 custom roles for your entire organization.