Role Permissions

 

Audit & Compliance Permissions

Can View Domain Summary: Allows the administrator the ability to view the domain summary.

Can View Daily Changes: Allows the administrator the ability to view the Daily Changes.

Can View Dashboards: Allows the administrator the ability to view the Dashboards.

 

Risk Management Permissions

Can View Data Alerts: Allows the administrator the ability to view Data Alerts.

Can view Administration Alerts: Allows the administrator the ability to view Administration Alerts.

Can View Share Policies: Allows the administrator the ability to view Share Policies.

Create Administration Alerts: Allows the administrator to create new administration alerts.

Delete Administration Alerts: Allows the administrator to remove administration alerts.

Archive Administration Alerts: Allows the administrator to archive administration alerts.

Create Data Alerts: Allows the administrator to create new data alerts.

Delete Data Alerts: Allows the administrator to remove data alerts.

Archive Data Alerts: Allows the administrator to archive data alerts.

 

Discovery Permissions

Can View Drive Search: Allows the administrator the ability to access the Drive Search module.

Can View Drive Explorer: Allows the administrator the ability to access the Drive Explorer module.

Can run reports: Allows the administrator to run discovery reports.

Can run exports: Allows the administrator to run discovery exports.

 

Reporting Permissions

Can View Reports: Allows the administrator the ability to access the Reports module.

Can run reports: Allows the administrator to run reports in the reporting section.

Can run exports: Allows the administrator to run exports in the reporting section.

 

User Permissions

Can View User Management: Allow the administrator the ability to access the User Management module.

Create Users: Allows the administrator the ability to add a new user if a free license is available.

Edit User Profiles During User Creation: Allows the administrator to edit a user’s profile while going through the user creation wizard.

Remove Users: Allows the administrator to remove a current user, but not another administrator.

Edit cPanel Admins: Allows the administrator to make the user an administrator on CPanel.  This, however, does not affect their role on gPanel.

Bulk Add Users to Group: Allows the administrator the ability to add multiple users to groups.

Bulk Remove Users From Groups: Allows the administrator the ability to remove multiple users from groups.

Bulk Remove Groups From User: Allows the administrator the ability to remove multiple groups from users.

Bulk Clear Users From Group: Allows the administrator the ability to clear multiple groups from users.

Bulk Change Member Role: Allows the administrator to change multiple user’s roles at a time.

Bulk Suspend Users: Allows the administrator the ability to suspend multiple users.

Bulk Restore Users: Allows the administrator the ability to restore multiple users.

Bulk Delete Users: Allows the administrator to delete multiple users at a time.

Bulk Change Users' OrgUnit: Allows the administrator the ability to change the organizational unit for multiple users.

Bulk Change gPanel Role: Allows the administrator the ability to change the gPanel role for multiple users.

Bulk Force Password Reset: Allows the administrator the ability to reset passwords for  multiple users.

Bulk Remove Shares: Allows the administrator to remove shares in bulk from user’s Drive items.

Bulk Add Gmail Label: Allows the administrator the ability to bulk add gmail labels.

Bulk Add Gmail Filter: Allows the administrator the ability to bulk add gmail filters.

Bulk Gmail IMAP: Allows the administrator the ability to turn on and off IMAP for multiple users.

Bulk Gmail POP: Allows the administrator the ability to turn on and off POP for multiple users.

Bulk Contact Sharing: Allows the administrator the ability to share contacts to multiple users.

Bulk Update Devices: Allows the administrator to update multiple devices at a time.

Bulk Delete Shared Contacts: Allows the administrator to delete multiple shared contacts at a time.

Bulk Delete Groups: Allows the administrator to delete multiple groups at a time.

Bulk Delete Personal Contacts: Allows the administrator to delete multiple contacts for a user at a time.

Bulk Delete Aliases From Group: Allows the administrator to delete multiple aliases from a group at a time.

Bulk Add Aliases To Group: Allows the administrator to add multiple aliases to a group at a time.

Bulk Add Aliases To User: Allows the administrator to add multiple aliases to a user at a time.

Edit Email Address: Allows the administrator the ability to edit users email addresses.

Edit User's Names: Allows the administrator the ability to change a users account name.

Edit User's OrgUnit: Allows the administrator the ability to change a users organization unit.

Edit Notes: Allows the administrator the ability to edit a user’s notes.

Create Random Password: Allows the administrator the ability to randomize a users account password.

Set Custom Password: Allows the administrator the ability to specify the password for a user's account.

Force Password Reset: Allows the administrator the ability to force a user to change their password on their next login.

Edit cPanel Role: Allows the administrator the ability to edit a Role for cPanel.

Edit gPanel Role: Allows the administrator the ability to edit a Role for gPanel.

Share Contact With Directory: Allows the administrator the ability to share contacts with the directory.

Suspend/Restore Users: Allows the administrator the ability to disable or enable a user’s account.

View Aliases Tab: Allows the administrator the ability to access the alias tab of the User Management module.

Add Aliases: Allows the administrator the ability to create aliases for users.

Remove Aliases: Allows the administrator the ability to delete aliases from user accounts.

Transfer Aliases: Allows the administrator to transfer an alias from one user to another.

View Profile Tab: Allows the administrator the ability to access the profile tab of the User Management module.

View Custom Attributes: Allows the administrator to view the custom attributes for users.

View Group Membership Tab: Allows the administrator the ability to access the group membership tab within User Management.

Add Group Members: Allows the administrator to add users to current groups.

Remove Group Members: Allows the administrator to remove users from current groups.

View Personal Contacts Tab: Allows the administrator the ability to access the personal contacts tab within User Management.

Add Personal Contacts: Allows the administrator the ability to create personal contacts.

Update Personal Contacts: Allows the administrator the ability to update personal contacts.

Export Personal Contacts: Allows the administrator the ability to export a user’s contacts.

Move Personal Contacts: Allows an administrator to move a user’s contacts into and out of labels.

Remove personal Contacts: Allows the administrator the ability to delete personal contacts.

Add Personal Contact Groups: Allows the administrator the ability to create personal contact groups.

Edit Personal Contact Groups: Allows the administrator the ability to edit personal contact groups.

Remove Personal Contact Groups: Allows the administrator the ability to delete personal contact groups.

Delegate Personal Contacts: Allows the administrator the ability to delegate personal contacts.

View Gmail Settings Tab: Allows the administrator the ability to access the gmail settings tab of the User Management module.

Add Gmail Account Delegation: Allows the administrator to delegate access to a user's Gmail account.

Remove Gmail Account Delegation: Allows the administrator the ability to remove delegates from gmail accounts.

Add Gmail Filters: Allows the administrator to create filters on a user's mailbox.

Add Gmail Send As: Allows the administrator to add a send as address to a user.

Add Gmail Label: Allows the administrator the ability to create labels for users' Gmail accounts.

Delete Gmail Label: Allows the administrator the ability to remove labels for a users’ Gmail accounts.

Add Gmail POP Settings: Allows the administrator the ability to add POP settings to Gmail accounts.

Add Gmail Imap Settings: Allows the administrator the ability to add IMAP settings to Gmail accounts.

Set Gmail Vacation Message: Allows the administrator the ability to set the vacation message for users.

Disable Gmail Vacation Message: Allows the administrator the ability to disable a user’s vacation message.

Edit Gmail Forwarding: Allows the administrator to edit Gmail forwarding for users.

Set Gmail Signature: Allows the administrator to set the signature for the users.

View Calendars Tab: Allows the administrator the ability to access the calendar tab of the User Management module.

View Drive Tab: Allows the administrator the ability to access the drive tab of the User Management module.

View Auditing Tab: Allows the administrator the ability to access the auditing tab of the User Management module.

Add Email Monitors: Allows the administrator the ability to add monitors to users' email accounts.

Edit Email Monitors: Allows the administrator the ability to edit monitors on users' email accounts.

Remove Email Monitors: Allows the administrator the ability to remove monitors from users' email accounts.

View Site Tab: Allows the administrator the ability to access the sites tab of the User Management module.

View Devices Tab: Allows the administrator the ability to access the devices tab of the User Management module.

View App Password Tab: Allows the administrator the ability to access the app password tab of the User Management module.

Revoke App Specific Passwords: Allows the administrator the ability to revoke app specific passwords.

View Third Party Applications Tab: Allows the administrator the ability to access the third party applications tab of the User Management module.

Revoke Third Party Applications' Auth Tokens: Allows the administrator the ability to revoke third party applications auth tokens.

View History Tab: Allows the administrator the ability to access the history tab of the User Management module.

Edit Gmail Label: Allows the administrator to edit a user’s Gmail labels.

Add Gmail Forward Address: Allows the administrator to add a forwarding address to users.

Delete Gmail Forward Address: Allows the administrator to remove forwarding addresses from users.

 

Directory Permissions

Can View User Profiles: Allows the administrator the ability to access the User Profile module.

Can view Groups: Allows the administrator the ability to access the Groups module.

Can view Group Templates: Allows the administrator to see all group templates.

Can View Organizational Units: Allows the administrator the ability to access the Organizational Units module.

Can View Shared Contacts: Allows the administrator the ability to access the Shared Contacts module.

Can View Contact Sync: Allows the administrator the ability to access the Contact Sync module.

Create Group: Allows the administrator the ability to create groups.

Delete Group: Allows the administrator to delete current groups.

Edit General Information Section: Allow the administrator the ability to edit the General Information section of the Groups module.

Edit Directory Section: Allow the administrator the ability to edit the Directory section of the Groups module.

Edit Content Control Section: Allow the administrator the ability to edit the Content Control section of the Groups module.

Edit Settings Section: Allow the administrator the ability to edit the Settings section of the groups module.

Edit Permissions Section: Allow the administrator the ability to edit the Permissions section of the Groups module.

Edit Advanced Section: Allow the administrator the ability to edit the Advanced section of the Groups module.

Add Group Aliases: Allows the administrator to add aliases to current groups from the Groups module.

Remove Group Aliases: Allows the administrator to remove aliases from current groups from the Groups module.

Add Member to Group: Allows the administrator to add users to groups from the Groups module.

Add External Member to Group: Allows the administrator to add members to groups who are outside your domain.

Remove Member from Group: Allows the administrator to remove users from groups from the Groups module.

Edit Role of Group Member: Allows the administrator to change a user's role in a group.

View Group History Tab: Allows the administrator to view the history of groups.

Create Group Template: Allows the administrator to create new group templates.

Edit Group Template: Allows the administrator to edit existing group templates.

Delete Group Template: Allows the administrator to delete group templates.

Edit Email Addresses: Allows the administrator the ability to change user’s email addresses.

Edit Phone Numbers: Allows the administrator the ability to change a user’s phone number.

Edit Organizations: Allows the administrator the ability to change a user’s organization unit entries.

Edit Relationships: Allows the administrator the ability to change a user’s relationships within the company.

Edit Instant Messaging: Allows the administrator the ability to change a user’s messaging entries.

Edit Addresses: Allows the administrator the ability to change a user’s living/ home addresses.

Edit External Ids: Allows the administrator the ability to change a user’s external Ids.

Edit Websites: Allows the administrator the ability to change a user’s website(s).

Edit Notes: Allows the administrator the ability to change a user’s notes.

Edit Profile Picture: Allows the administrator to change user’s profile photos.

Add Organizational Units: Allows the administrator to create new organizational units.

Edit Organizational Units: Allows the administrator to edit existing organizational units.

Remove Organizational Units: Allows the administrator to delete organizational units.

Change Organizational Units' Membership: Allows the administrator to change a user’s organizational unit.

Add Shared Contact: Allows the administrator the ability to create new shared contacts.

Edit Shared Contacts: Allows the administrator the ability to edit shared contacts.

Remove Shared Contacts: Allows the administrator the ability to remove shared contacts.

Clone Shared Contacts: Allows the administrator the ability to clone shared contacts.

Add Contact Sync: Allows the administrator to create new contact syncs.

Edit Contact Syncs: Allows the administrator to edit current contact syncs.

Remove Contact Sync: Allows the administrator to delete current syncs.

Remove Label For Contact Sync: Allows the administrator to delete the labels for a contact sync for target users.

Edit gTalk Assistant: Allows the administrator to edit gTalk assistant.

Edit Custom Attributes: Allows the administrator to edit a user’s custom attributes.

Can Edit Employee Information: Allows the administrator to edis a user’s employee information.

 

Calendars Permissions

Can View Calendars: Allows the administrator the ability to view the calendar module.

Create Calendars: Allows the administrator the ability to create new calendars in gPanel.

Delete Calendars: Allows the administrator the ability to delete calendars.

Can view Resource Template: Allows the administrator to view calendar resource templates.

Create Resource Template: Allows the administrator to create new calendar resource templates.

Delete Resource Template: Allows the administrator to remove existing calendar resource templates.

Edit Resource Template: Allows the administrator to edit existing calendar resource templates.

Can View Calendar Resources: Allows the administrator the ability to access the calendar resources module.

Create Resource Calendar: Allows the administrator to create new resource calendars.

Delete Resource Calendar: Allows the administrator to remove existing resource calendars.

Edit Calendar Resource: Allows the administrator to edit existing resource calendars.

Add Share to Calendar: Allows the administrator to share calendars with additional people.

Edit Calendar Shares: Allows the administrator the ability to share calendars with users.

Remove Calendar Shares: Allows the administrator the ability to remove shared calendars from users.

Rename Calendars: Allows the administrator the ability to rename current calendars.

Edit Calendar Color: Allows the administrator the ability to change the color that events are displayed in on current calendars.

Edit Calendar Location: Allows the administrator the ability to change the location information on current calendars.

Edit Calendar Description: Allows the administrator the ability to change the description of a calendar.

Edit Calendar Timezone: Allows the administrator the ability to change the current time zone for calendars

Edit Calendar Visibility: Allows the administrator the ability to change the visibility level of calendars.

Can Enable Event Editing: Allows the administrator to give users the ability to edit calendar events.

View Calendar Events: Allows the administrator to view a calendar’s events.

Add Calendar Events: Allows the administrator the ability to add events to a calendar.

Remove Calendar Events: Allows the administrator the ability to remove events from a calendar.

Remove All Calendar Events: Allows the administrator to remove all of a calendar’s events at once.

Update Calendar Events: Allows the administrator the ability to update calendar events.

View Calendar Resource Events: Allows the administrator to view a resource calendar’s events.

Add Resource Calendar Events: Allows the administrator to add events to a resource calendar.

Remove Resource Calendar Events: Allows the administrator to remove events from a resource calendar.

Update Resource Calendar Events: Allows the administrator to make changes to a resource calendar’s events.

Add Share to Resource Calendar: Allows the administrator to add a user to a calendar resource.

Remove Share from Resource Calendar: Allows the administrator to remove a user from a calendar resource.

Edit Share of Resource Calendar: Allows the administrator the ability to edit a user's access to a calendar resource.

View share calendar with other: Allows the administrator to see the option to share a calendar with other.

View Resources By Building: Allows the admin to view resource calendars by building.

Can Create Resource Calendars as category "Unknown": Allows the admin to create resource calendars within the “Unknown” category.

Can Create Resource Calendars as category "Conference Room": Allows the admin to create resource calendars within the “Conference Room” category.

Can Create Resource Calendars as category "Other": Allows the admin to create resource calendars within the “Other” category.

Edit Calendar Resource Common Name: Allows the admin to edit a resource calendar’s common name.

Edit Calendar Resource Category: Allows the admin to edit a resource calendar’s category.

Edit Calendar Resource Type: Allows the admin to redefine the type for a resource calendar.

Edit Calendar Resource Building: Allows the admin to redefine which building a resource calendar is within.

Edit Calendar Resource Floor: Allows the admin to redefine which floor a resource calendar is on.

Edit Calendar Resource Floor Section: Allows the admin to redefine which floor section a resource calendar is in.

Edit Calendar Resource Capacity: Allows the admin to edit the capacity for a resource calendar (room).

Edit Calendar Resource Features: Allows the admin to edit the features of a resource calendar.

Edit Calendar Resource User Visible Description: Allows the admin to edit the user visible description for a resource calendar.

Edit Calendar Resource Internal Description: Allows the admin to edit the non-user visible description for a resource calendar.

View Features: Allows the admin to view resource calendar features.

Create Features: Allows the admin to create features in a resource calendar.

Delete Features: Allows the admin to delete features in a resource calendar.

View Buildings: Allows the admin to view the buildings for a resource calendar.

Create Buildings: Allows the admin to create buildings for a resource calendar.

Edit Buildings: Allows admin to edit buildings for a resource calendar.

Delete Buildings: Allows admin to delete buildings for a resource calendar.

Can Transfer Calendars: Allows the admin to transfer calendars to another user.

Can view Calendar Transfer Logs: Allows the admin to view logs about calendar transfers.

 

Drive Permissions

Can View Drive Explorer: Allows the administrator to access the Drive Explorer module. 

Can View Drive Search: Allows the administrator to access the Drive Search module. 

Can View Ownership Transfer Logs: Allows the administrator the ability to read the logs for ownership transfer actions in Drive.

Can View Documents: Allows the administrator to prevent certain users from viewing their organization’s documents

Take Action: Allows the administrator the ability to perform actions on Drive accounts.

Create Folders: Allows the administrator the ability to create a new folder in the Drive module for the users.

Move Doc: Allows the administrator the ability to move documents to different folders in the Drive module.

Trash Docs: Allows the administrator the ability to trash documents and folders. 

Restore Docs: Allows the admin to restore deleted docs.

Permanently Delete Docs: Allows the admin to permanently delete trashed docs.

Rename Docs: Allows the administrator to rename documents or folders.

Transfer Docs: Allows the administrator the ability to change a documents owner from one user to another user. 

View Doc Shares: Allows the administrator the ability to view shared documents.

Edit Visibility on Docs: Allows the administrator the ability to edit who can see documents in Drive. (e.g. Private, Domain, Public, etc.)

Edit Shares on Docs: Allows the administrator to change who documents and folders are shared with. 

Edit Starred Docs: Allows the admin to star or un-star docs.

Copy Docs: Allows the admin to copy docs. 

Export Drive Search: Allows the administrator to export the results of a Drive search to a spreadsheet.

View Drive Sweeps: Allows the admin to view drive sweeps.

Edit Drive Sweeps: Allows the admin to edit existing drive sweeps.

Delete Drive Sweeps: Allows the admin to remove existing drive sweeps.

Can use Drive Encryption: Allows the admin to use drive encryption.

 

Sites Permissions

Can View Sites: Allows the administrator the ability to access the Sites module.

Add Sites: Allows the administrator the ability to create sites.

Edit Sites: Allows the administrator the ability to edit current sites.

Clone Sites: Allows the admin to copy existing sites.

 

Tools Permissions

Can View Reports: Allows the administrator to access the Reports module.

Can View Policies: Allows the administrator to access the Policies module.

Can View Signature Templates: Allows the administrator to access the Signature Templates module.

Can View Bulk Operations: Allows the administrator to access Bulk Operations.

Can View gTalk Assistant: Allows the administrator to access the gTalk Assistant module.

Can view Mobile Management: Allows the administrator to access the Mobile Management module.

Can view Device Management: Allows the admin to access the Device Management module.

Can View Gmail Export: Allows the administrator to access the Gmail Export module.

Can View Account Audit: Allows the administrator to access the Account Audit section.

Can view cPanel Logs: Allows the admin to access the cPanel Logs module.

Approve Mobile Devices: Allows the administrator to approve a device for mobile management.

Block Mobile Devices: Allows the administrator to block a mobile device in mobile management.

Delete Mobile Devices: Allows the administrator to delete devices from mobile management.

Remote Wipe Mobile Devices: Allows the administrator to remote wipe a mobile device.

Remote Wipe Account Only Mobile Devices: Allows the admin to remote wipe the account from a mobile device.

Deprovision Devices: Allows the admin to deprovision devices.

Disable Devices: Allows the admin to disable devices.

Enable Devices: Allows the admin to enable devices.

Create Decommissioning Processes: Allows the admin to setup a new decommissioning policy.

Edit Decommissioning Processes: Allows the admin to edit existing decommissioning policies.

Delete Decommissioning Processes: Allows the admin to remove existing decommissioning policies.

Run Decommissioning Process: Allows the admin to execute existing decommissioning policies.

Copy Decommissioning Process: Allows the admin to clone existing decommissioning policies.

Disable Decommissioning Process: Allows the admin to disable decommissioning policies.

Enable Decommissioning Process: Allows the admin to enable decommissioning policies.

Create Report: Allows the admin to create new reports.

Delete Report: Allows the admin to delete existing reports.

Edit Reports: Allows the admin to edit existing reports.

Run All Reports: Allows the admin to run all existing reports at once.

Run Approved Email Forwarding Report: Allows the admin to run a report to see all users with approved email forwarding.

Run Customer Usage Report: Allows the administrator to run a report for customer usage. 

Run Docs Activity Report: Allows the administrator to run a report for document activity.

Run Login Activity Report: Allows the administrator to run a report for login activity.

Run Docs Modified In Last 14 Days Report: Allows the administrator to run a report for documents modified in the last 14 days.

Run Docs Modified in Last X Days Report: Allows the admin to run a report for documents modified in a specified number of days.

Run Docs Over 100MB Report: Allows the administrator to run a report for documents over 100MB.

Run Docs Over 10MB Report: Allows the administrator to run a report for documents over 10MB.

Run Docs Shared Externally Report: Allows the administrator to run a report for documents shared externally.

Run Docs Shared Publicly Report: Allows the administrator to run a report for documents shared publicly.

Run Docs Shared With Groups Report: Allows the administrator to run a report for documents shared with groups.

Run Docs Shared With Domain Report: Allows the admin to run a report for documents shared with the domain.

Run Docs Shared With Link Report: Allows the admin to run a report for documents share with a link.

Run docs that contain a CC number or SSN Report: Allows the admin to run a report to show all documents that contain a CC or SS number.

Run Docs With MP3 Extension Report: Allows the administrator to run a report for documents with an MP3 extension.

Run Email Delegation Report: Allows the administrator to run a report for email delegation activity.

Run Email Forwarding Report: Allows the administrator to run a report for email forwarding activity.

Run Email Monitoring Report: Allows the administrator to run a report for email monitoring activity.

Run Empty Group Report: Allows the administrator to run a report for empty groups.

Run Export Personal Contacts Report: Allows the admin to run an export of personal contacts.

Run Group Report: Allows the administrator to run a report for groups.

Run Group Membership Report: Allows the admin to run a report to see all members of groups.

Run Group Member Count Report: Allows the administrator to run a report for group member count.

Run Groups With Nested Groups Report: Allows the administrator to run a report for nested groups.

Run Groups With No Owners Report: Allows the administrator to run a report for groups with no owners.

Run Signatures Report: Allows the admin to run a report to see signatures.

Run Users who are not member Of any Group: Allows the admin to run a report that shows any user who is not a member of any group.

Run Hidden User Report: Allows the administrator to run a report for hidden user activity.

Run Inactive User Report: Allows the administrator to run a report for inactive user activity.

Run User Usage Report: Allows the administrator to run a report for user usage.

Run License Types Report: Allows the admin to run a report which shows the license types for users.

Run Last Login Time Report: Allows the administrator to run a report for last login time.

Run Login Activity Report: Allows the admin to run a report to see login activity of users.

Run Mobile Device Report: Allows the admin to run a report which lists mobile devices.

Run Orgs Member Count Report: Allows the administrator to run a report for organizations member count.

Run Orgs With No Members Report: Allows the administrator to run a report for organizations with no members.

Run Send As Addresses: Allows the admin to run a report which lists the send as addresses for users.

Run Shared Contact Report: Allows the admin to run a report which lists shared contacts.

Run Site Ownership: Allows the admin to run a report to list sites and their owners.

Run Super Admin Report: Allows the administrator to run a report for super admins.

Run Storage Report: Allows the admin to run a report to see the storage used for users.

Run Suspended User Report: Allows the administrator to run a report for suspended users.

Run Two Factor Enrolled Report: Allows the administrator to run a report for two factor enrolled users.

Run User Profile Report: Allows the administrator to run a report for user profile activity.

Run Quota Report: Allows the administrator to run a report for quotas.

Run Gmail Breakdown Report: Allows the admin to run a report to see the breakdown of user’s Gmails.

Run User Usage Report: Allows the admin to run a report to see user’s usages.

Run Email Activity Report: Allows the admin to run a report to see the email activity of users.

Run Nested Group Reports: Allows the admin to run a report to see which groups are nested within other groups.

Run Third Party Application Reports: Allows the admin to run reports to see third party applications users have approved.

Run Export Admin Logs Reports: Allows the admin to run a report which displays admin logs.

Run File Hierarchy Reports: Allows the admin to run a report which shows file hierarchy.

Run Activity Feed Reports: Allows the admin to run a report which shows activity feed.

Run Externally Owned Docs Report: Allows the admin to run a report which lists externally owned documents.

Create Signature Template: Allows the administrator to create a signature template.

Delete Signature Template: Allows the administrator to delete a signature template.

Edit Signature Template: Allows the administrator to edit a signature template.

Edit Signature Template Configuration:  Allows the administrator to edit a signature template configuration.

Run Signature Template: Allows the administrator to run a signature template.

Create Policy: Allows the administrator to create policies.

Delete Policy: Allows the administrator to delete policies.

Edit Policy: Allows the administrator to edit policies.

Run Policy: Allows the administrator to run policies.

Run Group Bulk Operations: Allows the admin to run bulk operations on groups.

Run Users Bulk Operations: Allows the admin to run bulk operations on users.

Run Shared Contacts Bulk Operations: Allows the admin to run bulk operations on shared contacts.

Run Bulk Group Deletion Operations: Allows the admin to run bulk operations which delete multiple groups at a time.

Run Bulk Group Removal Operations: Allows the admin to run bulk operations which remove users from groups.

Run Bulk Assign Archive User Licenses: Allows the admin to run bulk operations which archive multiple users at a time.

Run Clear Users From Group Operations: Allows the admin to clear users from multiple groups at a time.

Run Multiple User Vacation Responder Operation: Allows the admin to set the vacation responder for multiple users at a time.

Run Bulk Force Password Reset Operations: Allows the admin to force multiple users to reset their passwords on next sign in.

Run Bulk Remove Shares Operations: Allows the admin to remove multiple shares at a time.

Run Bulk Delete Shared Contacts Operations: Allows the admin to delete multiple shared contacts at a time.

Run Bulk Delete Personal Contacts Operations: Allows the admin to delete multiple personal contacts at a time.

Run Bulk Profile Picture Upload: Allows the admin to set the profile pictures of multiple users at a time.

Run Bulk Upload Users: Allows the admin to create multiple users at a time.

Run Bulk Drive Transfer: Allows the admin to transfer multiple users drives to other users.

Run Bulk Calendar Permission Settings: Allows the admin to change the permissions of multiple calendars at a time.

Run Bulk Signature Template Blocklist Status: Allows the admin to block or un-block signature templates from applying to multiple users at a time.

Run Signature Template Report: Allows the admin to run a report which lists signature templates.

Run Time and IP Address Report of Logged In Users: Allows the admin to run a report to show the IP addresses of logged in users.

Create Gmail Export: Allows the admin to export a user’s email.

Delete Gmail Export: Allows the admin to delete an export of a user’s email.

Download Gmail Exports: Allows the admin to download an export of a user’s email.

Set the Encryption Key: Allows the admin to set the key used to encrypt a user’s exported email.

Create Gmail Search: Allows an admin to create a search to search through user’s emails.

Delete Gmail Search: Allows an admin to delete existing Gmail searches.

View Gmail Search: Allows an admin to view the results of a search through a user’s email.

Run Gmail Search: Allows an admin to execute a search on user’s emails.

Preview Gmail Search: Allows an admin to preview a search operation on user’s emails.

Report Gmail Search: Allows an admin to run a report for gmail searches.

Hangouts Report: Allows an admin to run a report for Hangouts.

Run Resource Event Remover: Allows an admin to run an operation to remove resource events.

 

Administration Permissions

Can View Roles: Allows the administrator to access the role editor section of the administration module.

Can View App Logs: Allows the administrator to access the application logs.

Can view Domain Defaults: Allows the admin to view default settings for the domain.

Can View Settings: Allows the administrator to access the settings section of the administration module.

Can View Domain Service Errors: Allows the admin to view errors related to gPanel’s API access.

Can View My Account Page: Allows the admin to see the My Account page.

Can view Labs: Allows the admin to view experimental and beta features in gPanel.

Add gPanel Licenses: Allows the admin to add new licenses for gPanel.

Create Role: Allows the admin to create new admin and user roles.

Delete Role: Allows the admin to delete existing admin and user roles.

Edit Role: Allows the admin to make changes to existing admin and user roles.

Add Member to Roles: Allows the admin to assign roles to users.

Remove Member from Role: Allows the admin to remove a role from a user.

Can view Domain Default for Resource Calendar: The admin can view the default domain resource calendar.

Add G Suite Licenses: The admin can purchase new Google Workspace licenses.

Can view Set gPanel Admin: The admin can set a new default admin in gPanel.

Can view Authentication: The admin can view authentication settings.

Can View Indexing: Allows the administrator to access the indexing tab of the settings section of the administration module.

Can view IP Intrusion: Allows the admin to view IP Intrusion settings.

Can view Secondary Domains: Allows the admin to view secondary domains.

Can view Timezone: Allows the admin to view what the timezone is set to for gPanel

Can view Custom Labeling: Allows the admin to view custom labels.

Can view Google API Status: Allows the admin to view the current connection status of gPanel for each API.

Export App Logs: Allows the admin to download a copy of app logs.

Can Enable and Disable Lab Features: Allows the admin to turn experimental and beta features in gPanel on or off.

Can get Google API Status Notifications: Allows the admin to receive notifications about gPanel’s API connection status.

Can Access gPanel Data Security: Allows the admin to access data security features.

Enable email notification outside domain: Allows the admin to receive email notifications to a non-domain email address.

View Session Timeout: Allows the admin to view the session timeout setting.

View Welcome Email Templates: Allows the admin to view welcome email templates.

Delete Welcome Template: Allows the admin to remove existing welcome email templates.

Edit Welcome Template: Allows the admin to make changes to existing welcome email templates.

Create Welcome Template: Allows the admin to create new welcome email templates.

 

Billing Permissions

Can view current subscription information: Required for sub components of the billing section.

Can use saved payment methods for license purchases: Allows the admin to use previously saved payment methods to purchase licenses.

Can add payment methods: Allows the admin to add new payment methods.

Can edit payment methods: Allows the admin to edit saved payment methods.

Can remove payment methods: Allows the admin to delete saved payment methods.

Can view payment methods: Allows the admin to view saved payment methods.

Can change the auto pay source: Allows the admin to make changes to the account auto pay will charge.

Can view domain and company settings: Allows the admin to view and make changes to domain and company information.

Can add billing contacts: Allows the admin to add billing contacts who will receive notifications.

Can edit billing contacts: Allows the admin to edit existing billing contacts.

Can remove billing contacts: Allows the admin to delete existing billing contacts.

Can change primary billing contact: Allows the admin to set a billing contact as primary.

Can edit company profile information: Allows the admin to make changes to the profile information of the company.

Can add G Suite licenses: Allows the admin to purchase additional Google Workspace licenses.

Can add Chrome licenses: Allows the admin to purchase additional Chrome licenses.

Can add Jamboard licenses: Allows the admin to purchase additional Jamboard licenses.

Can add gPanel licenses: Allows the admin to purchase additional gPanel licenses.

Can add CFM licenses: Allows the admin to purchase additional Chromebox for Meetings licenses.

Can add Identity licenses: Allows the admin to purchase additional Cloud Identity licenses.

Can view G Suite licenses: Allows the admin to view the current Google Workspace licenses.

Can view Chrome licenses: Allows the admin to view the current Chrome licenses.

Can view CFM licenses: Allows the admin to view the current Chromebox for Meetings licenses.

Can view Jamboard licenses: Allows the admin to view the current Jamboard licenses.

Can view Vault licenses: Allows the admin to view the current Vault licenses.

Can view Drive licenses: Allows the admin to view the current Drive licenses.

Can view gPanel licenses: Allows the admin to view the current gPanel licenses.

Can view Identity licenses: Allows the admin to view the current Cloud Identity licenses.

 

User Roles

 

User View Permissions

Can view My Profile: Allows the user to view their profile information.

Can view My Contacts: Allows the user to view their contacts within the gPanel user portal.

Can view My Groups: Allows the user to view all of the groups they are a member of.

Can view All Group Members: Allows the user to see all members within the groups they can see.

Can view All Groups: Allows the user to to see all groups in the organization.

Can view Group Settings: Allows the user to view groups settings for the groups they are able to see.

Can view Shared Contacts: Allows the user to view shared contacts.

Can add Members to Owned Groups: Allows the user to add members to groups they are an owner of.

Can add Managers to Owned Groups: Allows the user to add managers to groups they are the owner of.

Can add Owners to Owned Groups: Allows the user to add additional owners to groups they are the owner of.

Can remove Members from Owned Groups: Allows the user to remove members from groups they are the owner of.

Can remove Managers from Owned Groups: Allows the user to remove managers from groups they are the owner of.

Can remove Owners from Owned Groups: Allows the user to remove other owners from groups they are also an owner of.

Can add Members to Managed Groups: Allows the user to add members to groups they are a manager of.

Can add Managers to Managed Groups: Allows the user to add additional managers to groups they are a manager of.

Can add Owners to Managed Groups: Allows the user to add owners to groups they are a manager of.

Can remove Members from Managed Groups: Allows the user to remove members from groups they are a manager of.

Can remove Managers from Managed Groups: Allows the user to remove managers from groups they are a manager of.

Can remove Owners from Managed Groups: Allows the user to remove owners of groups they are a manager of.

Can add Groups: Allows the user to create new groups.

Can view directory search: Allows the user to view the directory search section.

 

Directory Search Permissions

Can search for users: Allows the user to search for other users.

Can search for groups: Allows the user to search for groups.

Can view all users: Allows the user to view all other users.

Can view all groups: Allows the user to view all groups in the domain.

Can view user's groups: Allows the user to view the groups other users are a member of.

 

Users Permissions

Can view User Management: Allows the user to view the user management section.

Create Users: Allows the user to create new users.

Edit User Profiles During User Creation: Allows the user to edit user profiles during the creation process of a new user.

Remove Users: Allows the user to remove other users.

Edit cPanel Admins: Allows the user to assign or unassign a super admin role for Google Admin to other users.

Bulk Add Users To Group: Allows the user to bulk add other users to a group.

Bulk Remove Users From Group: Allows the user to bulk remove other users from a group.

Bulk Remove Groups From User: Allows the user to remove multiple groups from a user at once.

Bulk Clear Users From Group: Allows the user to clear all users from multiple groups at once.

Bulk Change Member Role: Allows the user to change multiple member roles at a time.

Bulk Suspend Users: Allows the user to suspend multiple other users at once.

Bulk Restore Users: Allows the user to restore multiple users at once.

Bulk Delete Users: Allows the user to delete multiple other users at once.

Bulk Change Users' OrgUnit: Allows the user to change the organizational units for multiple other users at a time.

Bulk Change gPanel Role: Allows the user to change the gPanel roles of multiple other users at a time.

Bulk Force Password Reset: Allows the user to force a password reset on multiple other users at a time.

Bulk Remove Shares: Allows the user to remove multiple shares at a time.

Bulk Add Gmail Label: Allows the user to add multiple Gmail labels at a time.

Bulk Add Gmail Filter: Allows the user to add multiple Gmail filters at a time.

Bulk Gmail IMAP: Allows the user to change the Gmail IMAP setting for multiple other users at once.

Bulk Gmail POP: Allows the user to change the Gmail POP setting for multiple other users at once.

Bulk Contact Sharing: Allows the user to add multiple shared contacts at a time.

Bulk Update Devices: Allows the user to update multiple devices at once.

Bulk Delete Shared Contacts: Allows the user to delete multiple shared contacts at a time.

Bulk Delete Groups: Allows the user to delete multiple groups at once.

Bulk Delete Personal Contacts: Allows the user to remove multiple of another user’s personal contacts at once.

Bulk Delete Aliases From Group: Allows the user to delete multiple aliases from a group at a time.

Bulk Add Aliases To Group: Allows the user to add multiple aliases to a group at a time.

Bulk Add Aliases To User: Allows the user to add multiple aliases to another user at a time.

Edit Email Address: Allows the user to edit email addresses.

Edit User's Name: Allows the user to edit a user’s name.

Edit User's OrgUnit: Allows the user to edit a user’s organizational unit.

Edit Notes: Allows the user to edit notes.

Create Random Password: Allows the user to use the generate randomized password functionality.

Set Custom Password: Allows the user to set a custom password.

Force Password Reset: Allows the user to force a password reset on another user.

Edit cPanel Role: Allows the user to edit the cPanel role.

Edit gPanel Role: Allows the user to edit the gPanel role.

Share Contact With Directory: Allows the user to share a contact with the directory.

Suspend/Restore Users: Allows the user to suspend or unsuspend other users.

View Aliases Tab: Allows the user to view the aliases tab.

Add Aliases: Allows the user to add aliases.

Remove Aliases: Allows the user to remove aliases.

Transfer Aliases: Allows the user to transfer aliases to another user.

View Profile Tab: Allows the user to view the profile tab.

View Custom Attributes: Allows the user to view custom attributes.

View Group Membership Tab: Allows the user to view the group membership tab.

Add Group Members: Allows the user to add group members.

Remove Group Members: Allows the user to remove group members.

View Personal Contacts Tab: Allows the user to view the personal contacts tab.

Add Personal Contacts: Allows the user to add new personal contacts.

Update Personal Contacts: Allows the user to edit existing personal contacts.

Export Personal Contacts: Allows the user to export a CSV of personal contacts.

Move Personal Contacts: Allows the user to move personal contacts.

Remove Personal Contacts: Allows the user to delete existing personal contacts.

Add Personal Contact Groups: Allows the user to add personal contacts groups.

Edit Personal Contact Groups: Allows the user to edit personal contact groups.

Remove Personal Contact Groups: Allows the user to remove personal contact groups.

Delegate Personal Contacts: Allows the user to delegate personal contacts.

View Gmail Settings Tab: Allows the user to view the Gmail settings tab.

Add Gmail Account Delegation: Allows the user to add account delegates.

Remove Gmail Account Delegation: Allows the user to remove account delegates.

Add Gmail Filters: Allows the user to add Gmail filters.

Add Gmail Send As: Allows the user to add a send as address.

Add Gmail Label: Allows the user to add Gmail labels.

Delete Gmail Label: Allows the user to delete Gmail labels.

Add Gmail Pop Settings: Allows the user to add Gmail Pop settings.

Add Gmail Imap Settings: Allows the user to add Gmail IMAP settings.

Set Gmail Vacation Message: Allows the user to set a vacation responder message.

Disable Gmail Vacation Message: Allows the user to disable a vacation responder.

Edit Gmail Forwarding: Allows the user to edit Gmail forwarding settings.

Set Gmail Signature: Allows the user to set a Gmail signature.

View Calendars Tab: Allows the user to view the Calendars tab.

View Drive Tab: Allows the user to view the Drive tab.

View Auditing Tab: Allows the user to view the Auditing tab.

Add Email Monitors: Allows the user to create email monitors.

Edit Email Monitors: Allows the user to edit existing email monitors.

Remove Email Monitors: Allows the user to remove existing email monitors.

View Sites Tab: Allows the user to view the Sites tab.

View Devices Tab: Allows the user to view the Devices tab. 

View App Password Tab: Allows the user to view the App Password tab.

Revoke App Specific Passwords: Allows the user to revoke app specific passwords.

View Third Party Applications Tab: Allows the user to view the Third Party Applications tab.

Revoke Third Party Applications' Auth Tokens: Allows the user to revoke third party application’s auth tokens.

View User History Tab: Allows the user to view the History tab.

Edit Gmail Label: Allows the user to edit Gmail labels.

Add Gmail Forward Address: Allows the user to add Gmail forwarding addresses.

Delete Gmail Forward Address: Allows the user to remove Gmail forwarding addresses.

 

Directory Permissions

Can view User Profiles: Allows the user to view User Profiles.

Can view Groups: Allows the user to view Groups.

Can view Group Templates: Allows the user to view group templates.

Can view Organizational Units: Allows the user to view organizational units.

Can view Shared Contacts: Allows the user to view shared contacts.

Can view Contact Sync: Allows the user to view contact syncs.

Create Group: Allows the user to create groups.

Delete Group: Allows the user to delete groups.

Edit General Information Section: Allows the user to edit their general information section.

Edit Directory Section: Allows the user to edit the directory section.

Edit Content Control Section: Allows the user to edit the content control section.

Edit Settings Section: Allows the user to edit the settings section.

Edit Permissions Section: Allows the user to edit the permissions section.

Edit Advanced Section: Allows the user to edit the advanced section.

Add Group Aliases: Allows the user to add group aliases.

Remove Group Aliases: Allows the user to remove group aliases.

Add Member to Group: Allows the user to add members to groups. 

Add External Member to Group: Allows the user to add members to groups who are outside of the domain.

Remove Member from Group: Allows the user to remove members from groups.

Edit Role of Group Member: Allows the user to edit the role of group members.

View Group History Tab: Allows the user to view the group history tab.

Create Group Template: Allows the user to create group templates.

Edit Group Template: Allows the user to edit group templates.

Delete Group Template: Allows the user to delete group templates.

Edit Email Addresses: Allows the user to edit email addresses.

Edit Phone Numbers: Allows the user to edit phone numbers.

Edit Organizations: Allows the user to edit organizations.

Edit Relationships: Allows the user to edit relationships.

Edit Instant Messaging: Allows the user to edit instant messaging.

Edit Addresses: Allows the user to edit addresses.

Edit External Ids: Allows the user to edit external IDs.

Edit Websites: Allows the user to edit websites.

Edit Notes: Allows the user to edit notes.

Edit Profile Picture: Allows the user to edit profile pictures.

Add Organizational Units: Allows the user to add new organizational units.

Edit Organizational Units: Allows the user to edit existing organizational units.

Remove Organizational Units: Allows the user to delete existing organizational units.

Change Organizational Units' Membership: Allows the user to change a user’s organizational unit.

Add Shared Contacts: Allows the user to add new shared contacts.

Edit Shared Contacts: Allows the user to edit existing shared contacts.

Remove Shared Contacts: Allows the user to delete existing shared contacts.

Clone Shared Contacts: Allows the user to duplicate existing shared contacts.

Add Contact Sync: Allows the user to add new shared contacts.

Edit Contact Sync: Allows the user to edit current shared contacts.

Remove Contact Sync: Allows the user to delete existing shared contacts.

Remove Label For Contact Sync: Allows the user to remove labels for shared contacts.

Edit gTalk Assistant: Allows the user to edit gTalk assistant.

Edit Custom Attributes: Allows the user to edit custom attributes.

Can Edit Employee Information: Allows the user to edit information in the employee information section.