Assign admin privileges for the password vaulted apps service

You can assign administrator privileges for the password vaulted apps service to another admin in your Google Workspace account. When you assign password vaulting privileges to another admin, you automatically give them read access to organizational units, users, and groups in the Admin API. 

To assign admin privileges for the password vaulted apps service:

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AccountAdmin roles.
3. Point to a custom administrator role.
   Tip: If you need to create a new admin role, see Create a custom role.
4. Click View privileges.
5. Click Open privileges.
6. Under Password Vault, check the Password Vaulting box.
   Later, if you uncheck the Password Vaulting box, you need to uncheck the Read boxes under Admin API PrivilegesOrganization Units, Users, and Groups to remove those privileges.
7. Click Save.
8. Assign the new role to users. For details, see Assign administrator roles to a user.