Admins can now assign administrator roles to users, groups, or service accounts for a defined period of time. Once the expiration time is reached, the access granted by the role is automatically revoked.
This feature helps minimize security risks by reducing standing privileges and ambient access throughout your organization. It also streamlines administrative overhead, removing the need to manually track and revoke temporary privileges for short-term projects, coverage during employee absences, or external audits.
When assigning a role, super admins can choose from predefined durations (such as 30 days) or set a custom expiration date and time.
Temporary roles cannot be assigned to the primary admin for your organization, as the primary admin requires permanent super admin privileges.
Getting started
- Admins: Visit the Help Center to learn more about assigning admin roles for a specific duration.
- End users: There is no end user setting for this feature.
Rollout pace
- Rapid Release and Scheduled Release domains: Available now
Availability
- Available to all Google Workspace customers
Resources
- Google Workspace Admin Help: Assign admin roles for a specific duration