View role assignments & privileges

As an administrator for your organization's Google Workspace or Cloud Identity account, you can see a list of all the admin roles and privileges assigned to a user or group. You can also see a list of all the direct assignments for a given role. This information can help you to quickly determine a user's or group's level of administrative access to your organization's Google Workspace account and services.

You must be signed in as a super administrator for this task.

View a user's roles & privileges

On a user's page, you can see roles directly assigned to a user and roles a user indirectly receives as a member of a group that was assigned the role.

  1. In the Google Admin console, go to Menu and then Directory and thenUsers.

    Requires having the appropriate User management privilege. Without the correct privilege, you won't see all the controls needed to complete these steps.

  2. Open the user's account page: Click the user's name. Or, at the top, in the search box, enter the user's name and open their account page. For more options, go to Find a user account. 
  3. Scroll down and click Admin roles and privileges.
  4. In the Roles list, in the Assigned status column, review the roles assigned to the user.
  5. Scroll to Privileges to review all the user's privileges. For each privilege, you can see the role it was inherited from and which organizational units it applies to.
  6. (Optional) To return to the user's account page, for Admin roles and privileges, click the Up arrow .

View a group's roles & privileges

On a group's page, you can see roles directly assigned to a group and roles a group indirectly receives as a member of another group that was assigned the role.

  1. In the Google Admin console, go to Menu and then Directory and thenGroups.

    Requires having the Groups administrator privilege.

  2. Find the group in the list.
  3. Click the group's name to open its account page.
  4. Click Admin roles and privileges.
  5. In the Roles list, in the Assigned status column, review the roles assigned to the group.
  6. Scroll to Privileges to review all the group's privileges. For each privilege, you can see the role it was inherited from and which organizational units it applies to.
  7. (Optional) To return to the group's account page, for Admin roles and privileges, click the Up arrow .

View direct assignments for a role

On the Roles page, you can see all users and groups that have a role directly assigned to them. You can't see the roles that are indirectly assigned to users or groups that are members of a group receiving the role.

  1. In the Google Admin console, go to Menu and then Account and thenAdmin roles.

    You must be signed in as a super administrator for this task.

  2. Click the role that you want to review and thenAdmins.

Change a role assignment

For information about changing a user's or group's role assignment, go to Assign specific admin roles.