As an administrator, you can lock a group in Google Groups to prevent it from getting out of synchronization with an external source, such as an identity provider.
For example, if an external system is the data source for your group, data syncs from that source can overwrite changes that your group members make in Google Workspace. When you lock the group, only selected admins can make important changes.
About locked groups
When you lock a group, only selected admins can:
- Edit the group name, description, email address, and aliases
- Add and remove group labels
- Add or remove members
- Assign membership roles
- Delete the group
- Set up a membership restriction
- Set a new membership expiration date
- Access settings that govern membership changes, such as who can join the group or whether to allow members outside your organization
Locking a group does not affect which members can access settings that change content, such as who can add or view members.
Roles that can update locked groups
The following roles can make changes to locked groups:
- Super Admin
- Groups Admin
- Groups Editor
- Groups Editor (with a condition that doesn't include security groups)
Interfaces that allow locked groups to be updated
The roles in the previous section can update a locked group in the following interfaces:
Note:Locked groups cannot be updated in Google Groups .
Lock or unlock a group
To complete these steps, you must be an administrator with the Manage locked label on groups resource privilege .
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
- Click the group name Group information Group labels.
- Check or uncheck the Lockedbox.
- Click Save.
