Today’s post is the second in our three part blog series on Google Apps Organizational Units and Permissions Management. You can download the complete guide here.

Chrome Devices

Google offers Chrome device management services for an additional fee. These services allow Chrome devices, such as Chromebooks and Chromeboxes, to be enrolled and managed from your organization’s Google Apps admin console.

Chrome management settings allow administrators to manage network settings, manage installed apps, or configure printing. These settings — and many more — can be configured for the entire organization, or for a selected organizational unit. As with other Admin roles, Chrome device administrative roles and privileges may be configured and customized by a Super Administrator. For example, a teacher might be given the ability to manage installed apps on Chrome devices for their classroom. Learn more from Google about how to “Manage Chrome Devices” and “Delegate administrator roles in Chrome".

Administrative privileges and roles

Each Google Apps setup needs at least one account with Super Administrator privileges. The Super Administrator has full administrative authority for everything in the Google Apps setup. Because of this, people with Super Administrator privileges should take care to secure access to this account (e.g., use a strong password and require two-step authentication for access).

Pre-built roles

Google offers several pre-built Administrative roles, each of which provides some level of access to your organization’s Admin console. Three commonly used pre-built roles include:

• Help Desk Admin, who can reset passwords, as well as view user profiles and the organizational unit structure.
• Groups Admin, who can manage all tasks for your organization’s Google Groups, including the ability to create, delete and manage membership of Groups.
• User Management Admin, who can manage all tasks related to non-administrative users. This includes the ability to create and delete user accounts.

Learn more from Google about “Pre-build administrator roles”.

Assign and configure roles

Only a Super Administrator may assign administrative roles. Multiple roles may be assigned to an account. A person’s account might be assigned both a Help Desk Admin and Groups Admin role, for example. Admin roles may be restricted to a specific organizational unit. A person might be given the User Management Admin role, but only for people within their organizational unit.

Custom administrator roles for both Reports and Support may be helpful. The Reports privilege enables a person to access account usage information, audit logs, and search email logs. This type of access may be useful for various legal or regulatory compliance purposes. The Support privilege gives a person the information needed to contact Google enterprise support. Learn more from Google about how to “assign administrator roles to a user”. This blog post is just a sample of the steps you can take to streamline and enhance your Google Apps administration. And for the complete guide with step by step guidance, download the guide below: