Creating a Custom Role

A custom role needs to be created if a super admin role cannot be assigned to the user created above. A custom role can only collect and manage users and groups. For roles, a super admin role is needed. Follow the steps below to create a custom role:

1. Login to Google Cloud Directory Sync (GCDS).

2. Select Account → Admin roles.

3. Click Create new role.

4. Enter the name and description of the new role.

5. Select the following under Admin console privileges:

   1. Organizational Units → Read

   2. Users → Read

   3. Groups

   4. Domain Settings

   5. Security → User Security Management

6. Select the following under Admin API privileges:

   1. Read customer

7. Click CONTINUE and Create Role.

For more information about creating and managing custom users in Cloud Identity Sync, see Create Custom Admin Role.