Google Workspace admins can now give access that switches itself off

Google Workspace now lets super admins assign admin roles with an end date. When the time is up, the access is removed automatically. It is available on every Workspace edition.

Google announced on 23 September that admins can now give someone an administrator role for a set period in the Google Admin console. When the end date arrives, Google removes the access automatically.

Super admins can assign a temporary role to a person, a group or a service account. They can pick a preset length, such as 30 days, or set a custom end date and time. The primary admin cannot be given a temporary role, because that account needs permanent super admin access. The feature is available now for all Google Workspace editions.

For a midsize business, admin access often builds up over time. An IT contractor needs access for a migration, a staff member covers while someone is on leave, or an auditor needs to look at settings for a week. The access is easy to give and easy to forget, and every account with admin rights left open is a risk if it is ever compromised.

Next time someone needs admin access for a project, set an end date when you give it. It is also worth looking at the list of people who have admin roles today. Remove anyone who no longer needs it, and for anyone who only needs it now and then, switch them to a temporary role.

Giving access with an end date means nobody has to remember to take it away.