- What is an organization?
- What is a team?
- About the system-generated teams
- Supported roles for an organization and teams
What is an organization?
An AppSheet organizationprovides organization administrators with a centralized tool to manage all of the teams in the organization and delegate team management responsibilities to team administrators.
For Google Workspace users with verified domains, an AppSheet organization is created for you and is based on the Workspace organization. By default, the AppSheet organization is named after your primary domain, such as mycompany.com
.
What is a team?
An AppSheet teamis a group of AppSheet users who are members of a business unit . Teams provide team root and administrator accounts with centralized tools for managing governance, security, policies, analytics, and billing of team members to ensure that AppSheet is compliant with the business unit's requirements. Common assets like data sources and user domains can be defined once by the team root or administrator and used by all app creators in the team.
Team rootprivileges are automatically assigned to Google Workspace admins with:
- AppSheet Enterprise accounts.
- AppSheet service admin privileges (as defined by Workspace). Super Admins and Workspace Service Admins include these privileges, by default. See Prebuilt administrator roles .
See also Assign AppSheet admin privileges to Workspace admins .
About the system-generated teams
An AppSheet organization includes the following system-generated teams by default:
- Workspace organization team that includes all Google authenticated users in your organization
- Domain-based teams for all verified domains associated with your Workspace account allowing users to sign in with non-Google authentication methods
You aren't obligated to use the system-generated teams. You can create your own teams using Google Groups or Microsoft Groups as long as each team has a root admin. See Add teams to an organization .
You can assign root admins using the Workspace Admin Console or AppSheet Admin Console, as described in the following sections:
- Assign AppSheet admin privileges to Google Workspace admins
- Assign team member roles on the Manage organization page
To determine the best option for your organization, consider the following:
- System-generated team names can't be changed. Group-based team names are based on the name of the group.
- You can't move a user from one system-generated team to another system-generated team. A user can only be moved to another team if they are included in a Google Groups-based team and authenticate through Google.
- Any users that authenticate through non-Google or non-Microsoft authentication methods (such as Okta, and so on) will be automatically added to a domain-based team.
- If there was no verified Workspace organization when a user first signed in to AppSheet, then they might be added to a domain-based team instead of the Workspace organization-based team.
Supported roles for an organization and teams
The following figure shows the hierarchical relationship between an organization, and its teams and members.
Supported roles and permissions for an organization and its teams are summarized in the following table.
Role
How many?
Permissions
Organization administrator
- View all teams and team members in an organization
- Add a team to the organization that is based on Google Groups or Microsoft Groups
- See the number of apps created by app creators on any team
- Update the team member roles for any team to delegate team administration
- Delete teams in an organization
- Define organization, team, and account governance policies
- Define , remove , and delete team members in your current team
- View team member account details , including number of apps
- View team app details and receive an emailed app summary report
- View and share resources with team members (sample apps, databases, data stores, and so on)
- View security for your team
- Monitor your team app activity, usage, and billing information, and download membership data
- Configure team settings including:
- Define team and account governance policies , and view organization governance policies.
- Export team audit logs to Big Query
- Transfer apps and databases between team members
- Automate the removal of team user accounts
Team administrator
- Define and remove team members in your current team
- View team member account details , including number of apps
- View team app details and receive an emailed app summary report
- View and share resources with team members (sample apps, databases, data stores, and so on)
- View security for your team
- Monitor your team app activity, usage, and billing information, and download membership data
- Configure team settings including:
- Define team and account governance policies , and view organization governance policies.
- Export team audit logs to Big Query
Team member
