Google Workspace admins can now give access that switches itself off
By Brett Gavaghan, Founder of Adaptd · · Updated
Google Workspace now lets super admins assign admin roles with an end date. When the time is up, the access is removed automatically. It is available on every Workspace edition.
The short version
- Google announced on 23 September that super admins can assign Workspace admin roles with an end date, after which access is removed automatically.
- It's available now on all Workspace editions, except for the primary admin.
- Set an end date whenever you grant admin access.
Google Workspace now lets super admins give someone an admin role that switches itself off.
What are temporary admin roles in Google Workspace?
Temporary admin roles let admins give someone an administrator role for a set period in the Google Admin console. Google announced the feature on 23 September, and when the end date arrives, Google removes the access automatically.
Super admins can assign a temporary role to a person, a group or a service account. They can pick a preset length, such as 30 days, or set a custom end date and time.
Who can use it, and are there limits?
Temporary admin roles are available now for all Google Workspace editions. The primary admin cannot be given a temporary role, because that account needs permanent super admin access.
For a midsize business, admin access often builds up over time. An IT contractor needs access for a migration, a staff member covers while someone is on leave, or an auditor needs to look at settings for a week. The access is easy to give and easy to forget, and every account with admin rights left open is a risk if it is compromised.
What should your business do with temporary admin roles?
Next time someone needs admin access for a project, set an end date when you give it. It is also worth looking at the list of people who have admin roles today. Remove anyone who no longer needs it, and for anyone who only needs it now and then, switch them to a temporary role.
With an end date, nobody has to remember to take access away.
Wondering what this means for your business?
That's exactly what the discovery call is for.