Admin privileges for the security center

Availability of features depends on your Google Workspace or Cloud Identity edition (details below on this page).

As a super administrator, you can access security center features, including the security dashboard, security health page, and security investigation tool. You can give other admins access to a specific security center feature—for example, just the security dashboard—by granting them the privileges for that feature.

Important: To provide more granular access permissions, the Audit and Investigation View privilege will soon be required to access log event data. Existing administrator roles with the Reports privilege will automatically be assigned the Audit and Investigation View, Activity View, and Activity Manage privileges. These privileges must be explicitly assigned for new administrator roles. If you need the Reports privilege, but not Audit and Investigation View, wait until after the change to remove the privilege. After this change, roles with only the Reports privilege will no longer be able to access log event data.

Grant security center privileges to an admin

Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
In the Admin console, go to Menu AccountAdmin roles.
Point to a custom administrator role.
Tip: If you need to create an admin role, go to Create a custom role.
Click View privilegesOpen privileges.
Check the privileges for the security center area you want to grant access to.
Review Security center privileges below on this page.
Click Save.

Security center privileges

Some features in the security center—for example, data related to Gmail and Drive—are not available with Enterprise Standard, Frontline Standard, and Cloud Identity Premium.

Security area	Privilege required
Security page Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition This feature is available with Cloud Identity Premium edition. Compare editions	SecuritySecurity Settings To open the Security page, from the Admin console Home page, click Security.
Security dashboard Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition This feature is available with Cloud Identity Premium edition. Compare editions	ServicesSecurity CenterThis user has full administrative rights for Security CenterDashboards Note: Some admins with the Reports privilege may have access to the security dashboard. For the security center, the Dashboards privilege replaced the Reports privilege. (The Reports privilege for non-security center reports in the Admin console isn’t changing.)
Security health Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition This feature is available with Cloud Identity Premium edition. Compare editions	To access the security health page, an admin needs all of these privileges: ServicesSecurity CenterThis user has full administrative rights for Security CenterSecurity Health Organizational UnitsRead UsersRead In addition, the admin needs setting-specific privileges for the setting or group of settings you want to give access to. Review the table below, Settings reference for the security health page.
Investigation tool Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition This feature is available with Cloud Identity Premium edition. Compare editions	ServicesSecurity CenterThis user has full administrative rights for Security CenterAudit & Investigation For more information, go to Admin privileges for the investigation tool.

Security area

Privilege required

Security page

Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition

This feature is available with Cloud Identity Premium edition. Compare editions

SecuritySecurity Settings

To open the Security page, from the Admin console Home page, click Security.

Security dashboard

Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition

This feature is available with Cloud Identity Premium edition. Compare editions

ServicesSecurity CenterThis user has full administrative rights for Security CenterDashboards

Note: Some admins with the Reports privilege may have access to the security dashboard. For the security center, the Dashboards privilege replaced the Reports privilege. (The Reports privilege for non-security center reports in the Admin console isn’t changing.)

Security health

Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition

This feature is available with Cloud Identity Premium edition. Compare editions

To access the security health page, an admin needs all of these privileges:

ServicesSecurity CenterThis user has full administrative rights for Security CenterSecurity Health
Organizational UnitsRead
UsersRead

In addition, the admin needs setting-specific privileges for the setting or group of settings you want to give access to. Review the table below, Settings reference for the security health page.

Investigation tool

Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition

This feature is available with Cloud Identity Premium edition. Compare editions

ServicesSecurity CenterThis user has full administrative rights for Security CenterAudit & Investigation

For more information, go to Admin privileges for the investigation tool.

Settings reference for the security health page

Super admins can access security health settings. Other admins need super admins to grant them the additional privileges listed here for each setting or group of settings. If an admin doesn't have the required privileges for specific settings, those settings don’t appear on the security health page.

Note: Only super admins can access the security health settings for 2-Step Verification and security-key enforcement for users, as well as groups creation and management.

Security health setting	Privileges required
Automatic email forwarding Comprehensive mail storage Bypassing spam filters for internal senders POP and IMAP access for users DKIM SPF record DMARC Approved senders without authentication Approved domain senders Email whitelist IPs Add spam headers setting to all default routing rules MX record configuration Attachment safety Links and external images safety Spoofing and authentication safety MTA-STS configuration Supported edition: Enterprise Plus	GmailSettings
Groups creation and membership Supported edition: Enterprise Plus	Only available for super admin accounts
Sites sharing policy Google Workspace Marketplace applications usage Hangouts out of domain warning Supported edition: Enterprise Plus	ServicesService Settings Assigning the Service Settings privilege: Automatically checks the Settings box for Gmail, Google Drive, and Google Calendar Makes their security health settings visible to the assigned admin
Calendar sharing policy Supported edition: Enterprise Plus	ServicesCalendarAll Settings
File publishing on the web Access Checker Warning for out of domain sharing Drive sharing settings Google sign-in requirement for external collaborators Access to offline docs Drive add-ons Desktop access to Drive Supported editions: Enterprise Plus and Enterprise Essentials Plus	ServicesDrive and DocsSettings
Mobile management Blocking of compromised mobile devices Mobile inactivity reports Mobile password requirements Device encryption Application verification Installation of mobile apps from unknown sources External media storage Auto account wipe Supported editions: Enterprise Standard and Enterprise Plus; Enterprise Essentials Plus; and Cloud Identity Premium	ServicesMobile Device ManagementManage Devices and Settings
2-Step Verification for admins 2-Step Verification for users Security-key enforcement for admins Security-key enforcement for users Supported editions: Enterprise Standard and Enterprise Plus; Enterprise Essentials Plus; and Cloud Identity Premium	Only available for super admin accounts

Was this helpful?

How can we improve it?

Admin privileges for the security center

Grant security center privileges to an admin

Security center privileges

Settings reference for the security health page

Related topics

Was this helpful?