View role assignments & privileges

As an administrator for your organization’s Google Workspace or Cloud Identity account, you can see a list of all the admin roles and privileges assigned to a user or group. You can also see a list of all the direct assignments for a given role. This information can help you to quickly determine a user’s or group’s level of administrative access to your organization’s Google Workspace account and services.

You must be signed in as a  super administrator  for this task.

View a user’s roles & privileges

On a user’s page, you can see roles directly assigned to a userand roles a user indirectly receivesas a member of a group that was assigned the role.

1. Sign in with a super administrator account to the Google Admin console.

   If you aren’t using a super administrator account, you can’t complete these steps.

2. Go to Menu  Directory > Users .
3. Open the user's account page: Click the user's name. Or, at the top, in the search box, enter the user's name and open their account page. For more options, go to  Find a user account . 

   

4. Scroll down and click Admin roles and privileges.

   

5. In the Roleslist, in the Assigned statuscolumn, review the roles assigned to the user.
6. Scroll to  Privileges to review all the user’s privileges. For each privilege, you can see the role it was inherited from and which organizational units it applies to.
7. (Optional) To return to the user’s account page, for Admin roles and privileges, click the Up arrow .

View a group’s roles & privileges

On a group’s page, you can see roles directly assigned to a groupand roles a group indirectly receivesas a member of another group that was assigned the role.

1. Sign in with a super administrator account to the Google Admin console.

   If you aren’t using a super administrator account, you can’t complete these steps.

2. Go to Menu Directory > Groups .

   Requires having the Groups administrator privilege.

3. Find the group in the list.
4. Click the group’s name to open its account page.
5. Click  Admin roles and privileges. 
6. In the Roleslist, in the Assigned statuscolumn, review the roles assigned to the group.
7. Scroll to  Privileges to review all the group’s privileges. For each privilege, you can see the role it was inherited from and which organizational units it applies to.
8. (Optional) To return to the group’s account page, for Admin roles and privileges, click the Up arrow .

View direct assignments for a role

On the Roles page, you can see all users and groups that have a role directly assigned to them. You can’t see the roles that are indirectly assigned to users or groups that are members of a group receiving the role.

1. Sign in with a super administrator account to the Google Admin console.

   If you aren’t using a super administrator account, you can’t complete these steps.

2. Go to Menu  Account > Admin roles .
3. Click the role that you want to review Admins.

Change a role assignment

For information about changing a user’s or group’s role assignment, go to Assign specific admin roles .