QuestionQ31

Manage users, groups, and organizational units

Help Desk administrators require a limited set of privileges to carry out actions in the Google Admin console. How should an administrator grant those permissions while following the principle of least privilege?

Explanation

A custom admin role can contain only the specific administrator privileges needed for defined management tasks. Assigning that role gives Help Desk administrators the required Admin console access without the unnecessary permissions associated with broad predefined roles or full user-management access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!