In most organizations, your role affects your level of access. Roles vary, so access to information and tools varies. A help desk technician, a network administrator, and a CIO each need different tools. Faculty, staff, and students also may require different tools and levels of access.
And that’s what a Super Administrator configures in G Suite: which groups of people have access to services, settings and administrative controls.
Google organizes user accounts into “organizational units,” and provides administrative permissions with “admin roles.” Administrators new to G Suite need to know that organizational units and admin roles are unrelated to domains and groups.
Account Access Overview
In G Suite, two settings control a person’s access: the account’s assigned organizational unit and the account’s privileges. The organizational unit determines which services a person may access, while the account’s privileges determine which administrative settings a person may change.
Every G Suite account belongs to one organizational unit. Initially, all accounts connect to a single organizational unit. Because of this, every account accesses the same set of apps. An Administrator creates a new organizational unit to provide access to different services for different groups. For example, a school might create “Faculty,” “Staff,” and “Student” organizational units, to provide each group access to different sets of G Suite services.
Each person’s account also receives privileges assigned by an Administrator. To simplify management, Google provides several “pre-built” collections of privileges in the form of Administrative Roles. (An Administrator also may create new roles as needed.) An Administrator may assign multiple administrative roles to an account.
In some cases, it helps to restrict an administrative role to a specific organizational unit. For example, a person might be assigned the “User Management Admin” role for the “Staff” organizational unit. The person could create or delete user accounts in the “Staff” organizational unit only; they would not be able to create or delete user accounts for “Faculty” or “Students.”
This ability to configure and delegate administrative privileges for an organizational unit allows G Suites to scale to serve the needs of a large organization.
If you’re looking to learn even more about organizational units and permissions in G Suite, check out our recent eBook. With this eBook, you can work smarter, not harder. The guide offers tips on how to delegate permissions to users, control access, improve efficiency, and simplify time-consuming tasks. Download it today and boost your productivity!