User Management Admin

Privilegiada

Delegated AdminIdentity

Admin Tier

Categoria

Identity

Privilégios

Slug / ID

user-management-admin

Categoria

Identity

Admin Tier: Delegated Admin

Broad administrative permissions delegated from Super Admin. Can manage users, groups, or services across the whole organization.

Descrição

Create, edit, and delete user accounts. Manage user profiles, aliases, and organizational unit membership. Cannot manage Super Admins.

Privilégios (6)

Create and manage users

Reset user passwords

Manage user aliases

Move users between OUs

Suspend and restore users

Manage user licenses

API Privileges(10)

USERS_RETRIEVE

USERS_CREATE

USERS_UPDATE

USERS_DELETE

USERS_ALIAS_CREATE

USERS_ALIAS_DELETE

USERS_MOVE_OU

USERS_SUSPEND

USERS_PASSWORD_RESET

USERS_LICENSE_MANAGE

Role Definition (JSON)

{
  "roleId": "user-management-admin",
  "roleName": "User Management Admin",
  "roleDescription": "Create, edit, and delete user accounts. Manage user profiles, aliases, and organizational unit membership. Cannot manage Super Admins.",
  "rolePrivileges": [
    {
      "privilegeName": "USERS_RETRIEVE",
      "serviceId": "admin.googleapis.com"
    },
    {
      "privilegeName": "USERS_CREATE",
      "serviceId": "admin.googleapis.com"

Ver documentação oficial no Google Workspace Admin SDK