Google workspaces has made it much easier to delegate tasks or give users such as HR administrators and personnel permissions for creating users and email groups.
This can be handy in a small or large organization and has be done with Microsoft using snap-ins for Active Directory for a long time.
Some basic permission for a user to be able to do this they need essential four rolls.
- User Management Admin
- Help Desk Admin
- Groups Reader
- Groups Editor
Once given permission to the users and the groups, a user can then add and remove users, add and remove users to groups, create and rename groups without being able to access any other area in google workspaces such as organizational units, machine and domain management etc.
