What’s changing
Scale and secure your role-based access controls (RBAC) practice on Workspace by leveraging a new capability for role assignments to groups. You can now assign admin roles to groups in addition to or instead of individual users. For example, you can assign the service admin role to an existing group that contains all of the IT admins in your organization.
Currently, there is a limit of 500 role assignments— since groups can contain unlimited members, this gives you more flexibility to manage roles as needed. This is particularly helpful for larger organizations, allowing them to pare down their role assignments without exceeding the limits.
Also, roles assigned to groups will automatically reflect changes in underlying membership of the group. This allows admins to manage role assignments at a higher-entity level vs adding/removing end-users one at a time to maintain updated privileges.
Getting started
- Admins: Super admins can create and assign administrator roles. Visit the Help Center to learn more about assigning admin roles and pre-built admin roles, Additionally, use these Help Center articles to learn more about creating a security group.
- End users: There is no end user action required.
Rollout pace
- Rapid and Scheduled Release domains: Available now.
Availability
- Available to all Google Workspace customers, as well as legacy G Suite Basic and Business customers
- Available to Google Cloud Identity Premium customers