How to create a custom admin rule with Vault permissions only

Problem

How can you allow a user to access Vault without assigning an Admin role that grant access to the Admin console settings?

Environment

  • Google Vault

Solution

  1. Sign in to your Admin console.
  2. Navigate to Menu > Account > Admin roles.
  3. Click Create new role.
  4. Enter a name and, optionally, a description for the role and click Continue.
  5. From the Privilege Name list, check boxes all that are under 'Google Vault'.
  6. Click Continue.
  7. Review the privileges and click Create Role.

Cause

There is not a pre-built administrator role that only provides access to Vault.