You can share the responsibility of managing your Google Cloud account by assigning administrator roles to other users. Assigning a role grants the user access to your Google Admin console. You can make a user a super administrator who can perform all tasks in the Admin console. Or you can assign a role that limits which tasks the administrator can perform, for example, by allowing them only to create groups, manage service settings, or reset a user's password.


Here's what each role can do:


RolePrivileges 
Super AdminHas access to all features in the Admin console and Admin API, and can manage every aspect of your organization's account. Super administrators also have full access to all users' calendars and event details. After you assign the Super Admin role to a user, it can take up to 24 hours for the calendar privileges to be available.
Only super administrators can...

At least one user in your account needs to be a super administrator, but we recommend having at least two. That way, if one of you forgets your password the other can reset it for you. Having more than three super administrators, however, limits all your administrators' options for password recovery. For details, Reset your administrator password.


Groups Admin    Has full control over Google Groups created in your Admin console. This administrator can perform the following tasks both from the Admin console and via the Admin API:
  • View user profiles and your organizational structure
  • Create new groups in the Admin console
  • Manage members of groups created in the console
  • Manage group access settings
  • Delete groups from the console
  • Only read Organization Units

User management adminCan perform all actions on users who aren't administrators. This administrator can perform the following tasks both from the Admin console and via the Admin API:
  • View user profiles and your organizational structure
  • Only read organizational units
  • Create and delete user accounts *
  • Rename users and change passwords *
  • Manage a user's individual security settings *
  • Perform these other user management tasks *

* Applies only for users who aren't administrators. This administrator can't assign administrator privileges, reset an administrator's password, or make other changes to an administrator account. Only a super administrator can perform those tasks.


Helpdesk admin    Can reset passwords for users who aren't administrators, both in the Admin console and via the Admin API. This administrator can also view user profiles and your organizational structure. This administrator can only read Organization Units.
Services admin    Lets you manage certain service settings and devices that have been added to your Admin console, including for example: Calendar, Drive and Docs, and other services. This administrator can:
  • Turn services On or Off *
  • Change service settings and permissions *
  • Manage Calendar resources
  • Create custom service web addresses
  • Manage Chrome and mobile devices listed in your console
  • Only read Organization Units

* Applies only for certain products you've added to your account (G Suite services, My Maps Pro, and so on), Marketplace apps, and free Google services like Google+ and Blogger. Some products and services such as Google Vault and Cloud Print do not support the Services admin role.




How to assign Admin roles:


  1. Go to Users.
  2. In the Users list, find the user. If you need help, see Find a user account.
  3. Click the user’s name to open their account page.
  4. Click Admin roles and privileges.
  5. Take one of the following actions:
    • Assign a pre-built role or a custom role that was previously created by clicking the slider On for the role.

      If you don’t see the sliders, click anywhere under Roles to display them. 

    • Create a new role for the user by clicking Create Custom Role.

      For details, see Create custom administrator roles.

  6. Click Save.