To verify, from the Admin console Home page, go to Apps > Additional Google services. In the message at the top of the page, if you see "Access to additional services without individual control for all organizational units is turned Off", click Change.