Before this course: Workspace Productivity: collaboration (course 13.7.2). You should already know smart chips, filter views, protected ranges, share expiration, Meet access types, host controls and recording rules.
Who is the admin? Account types and admin roles
In a school, the teacher decides some rules for the whole class. In Google Workspace, the admin is that teacher. With a personal account, nobody is above you, so you make every rule yourself.
- A Workspace organization is managed in the Google Admin console. Admins get powers through admin roles.
- Google's prebuilt roles include:
| Role | What it is for |
|---|---|
| Super Admin | Full control of the Admin console, including managing other admins |
| User Management Admin | Manages non-admin user accounts in assigned organizational units |
| Help Desk Admin | Resets passwords for non-admin users and views user profiles |
| Groups Admin | Manages Google Groups, membership and access settings |
| Services Admin | Controls service settings such as Calendar, Drive and Docs |
| Storage Admin | Monitors storage use and sets storage limits |
- At least one user must be a super admin, and Google recommends at least two, so one can reset the other's password.
- Only super admins can create and assign admin roles, manage other admins, and restore deleted users, among other tasks.
- Personal accounts: there is no admin. You set your own sharing and security (course 13.7, lesson 2).
- Work or school accounts: if a menu item is missing, an admin may have turned it off for you.
- Write down every Google account you use and mark it personal or work/school.
- For a work or school account, find out who your admin is (your IT help page or teacher).
- Make a table of five common admin jobs: reset a password, add a user, change Drive settings, manage groups, check storage.
- Next to each job, write the smallest prebuilt role from the table that can do it.
- Mark which jobs truly need a super admin.
- Check: only a few jobs need super admin, and every other job has a smaller role.
Videos by other creators on YouTube, for reference. They are not made by or affiliated with The Future Market.
Read the video script
[Host] "Who can change the rules in your Google account? It depends on the account."
[Text on screen: Personal = you. Work or school = admin] "Personal account: you. School or work account: an administrator."
[Screen: list of prebuilt admin roles] "Admins get roles. Help Desk resets passwords. Groups Admin manages groups. Super Admin can do everything."
[Host] "Give people the smallest role that does the job."
Make the five-job table and choose the smallest role for each. Write one sentence on why a help desk helper should not be a super admin.
ClaudeStuck? Copy a ready-made prompt for Claude
Copy this, open Claude, paste it, and Claude will walk you through the lesson step by step.
For a grown-up: Claude is for adults (18+). Copy this, paste it into Claude, and use the answer to explain the lesson to your child.
I'm learning "Workspace Basics for Admins: sharing and security" on The Future Market. Lesson 1: "Who is the admin? Account types and admin roles". What the lesson teaches: - A Workspace organization is managed in the Google Admin console. Admins get powers through admin roles. - Google's prebuilt roles include: - Role - What it is for - Super Admin - Full control of the Admin console, including managing other admins - User Management Admin - Manages non-admin user accounts in assigned organizational units - Help Desk Admin - Resets passwords for non-admin users and views user profiles - Groups Admin - Manages Google Groups, membership and access settings The exercise I'm working on: Make the five-job table and choose the smallest role for each. Write one sentence on why a help desk helper should not be a super admin. I'm stuck. Please: 1. Explain the main idea in plain, simple words with one everyday example. 2. Walk me through the exercise one small step at a time. Ask me what I've done so far before giving the next step. 3. Don't just give me the final answer. Help me do it myself, and check my work when I share it.
I'm a parent helping my child (about 8 years old) with a lesson called "Who is the admin? Account types and admin roles" from the course "Workspace Basics for Admins: sharing and security". Here's what the lesson says: In a school, the teacher decides some rules for the whole class. In Google Workspace, the admin is that teacher. With a personal account, nobody is above you, so you make every rule yourself. The activity: Make the five-job table and choose the smallest role for each. Write one sentence on why a help desk helper should not be a super admin. Please explain this so an 8-year-old understands: short sentences, a fun everyday example, and no hard words. Then give me 3 simple questions I can ask my child to check they understood, and a way to do the activity together, one tiny step at a time.
Sources
- Google Workspace Admin Help, Prebuilt administrator roles: knowledge.workspace.google.com/admin/users/prebuilt-administrator-role
Protect the admin accounts
This lesson is part of full access: every course and every level for one payment.
Organizational units and groups
This lesson is part of full access: every course and every level for one payment.
Organization-wide Drive sharing settings
This lesson is part of full access: every course and every level for one payment.
Shared drives: files the team owns
This lesson is part of full access: every course and every level for one payment.
Roll out 2-Step Verification
This lesson is part of full access: every course and every level for one payment.
Watch the logs: Drive log events and the alert center
This lesson is part of full access: every course and every level for one payment.
When someone leaves, and your security policy
This lesson is part of full access: every course and every level for one payment.
Final project
This lesson is part of full access: every course and every level for one payment.
Quiz
Does a personal Google Account have an Admin console?
No, you are your own admin.
How many super admins does Google recommend?
At least two.
Why should a super admin have a second account?
So daily work is done without super admin powers (least privilege).
A child organizational unit has no setting of its own. Which setting does it use?
It inherits its parent's setting.
Which Drive sharing choice allows sharing only with trusted domains?
Allowlisted Domains.
How long can Drive sharing setting changes take?
Up to 24 hours.
Who owns files in a shared drive?
The organization (the team), not one person.
Which shared drive level can manage members and delete the drive?
Manager.
What should you do before enforcing 2-Step Verification?
Notify users, allow it, let them enroll and track enrollment.
Which Drive log filter finds files shared outside the organization?
Visibility: Shared externally.
How long can a deleted Workspace user be restored?
Up to 20 days.
What must happen before a personal-account ownership transfer completes?
The new owner must accept it.
Final exam
This lesson is part of full access: every course and every level for one payment.
Certificate
This lesson is part of full access: every course and every level for one payment.