Problem
How to allow certain groups to use restricted Google Workspace services in a specific OU without overriding the OU permissions.
Environment
It is being implemented in a Google Workspace account, where multiple services needs to be denied for the bulk of the users in a specific OU but allowed for a small group of users.
Solution
Using Access groups, we are able to allow a small group of users to access to a restricted service in a specific OU.
- Create the list of users and their organizational units.
- Choose organizational unit settings for the service.
- Create the access group.
- Turn on the service.
- Check service access.
Cause
When you restrict a service, the whole OU gets affected by it, therefore, access groups allow this to work on only certain users that are members of the group.
For further information check this article.
For further information check this article.