Role Permissions

gPanel / Administration / Role Permissions

After you create a role, you will need to select the permissions for your new role. Look through the different permission sets, and decide what permissions your users need.

The permissions that have check marks next to them are permissions that the role currently has. Check or uncheck the box next to a permission to add or remove that permission from the role.

Once you have made your changes be sure to click Save or your work will be lost.

Administration Roles

Audit & Compliance Permissions

Can View Domain Summary: Allows the administrator the ability to view the domain summary.

Can View Daily Changes: Allows the administrator the ability to view the Daily Changes.

Can View Dashboards: Allows the administrator the ability to view the Dashboards.

Risk Management Permissions

Can View Data Alerts: Allows the administrator the ability to view Data Alerts.

Can view Administration Alerts: Allows the administrator the ability to view Administration Alerts.

Can View Share Policies: Allows the administrator the ability to view Share Policies.

Create Administration Alerts: Allows the administrator to create new administration alerts.

Delete Administration Alerts: Allows the administrator to remove administration alerts.

Archive Administration Alerts: Allows the administrator to archive administration alerts.

Create Data Alerts: Allows the administrator to create new data alerts.

Delete Data Alerts: Allows the administrator to remove data alerts.

Archive Data Alerts: Allows the administrator to archive data alerts.

Discovery Permissions

Can View Drive Search: Allows the administrator the ability to access the Drive Search module.

Can View Drive Explorer: Allows the administrator the ability to access the Drive Explorer module.

Can run reports: Allows the administrator to run discovery reports.

Can run exports: Allows the administrator to run discovery exports.

Reporting Permissions

Can View Reports: Allows the administrator the ability to access the Reports module.

Can run reports: Allows the administrator to run reports in the reporting section.

Can run exports: Allows the administrator to run exports in the reporting section.

User Permissions

Can View User Management: Allow the administrator the ability to access the User Management module.

Create Users: Allows the administrator the ability to add a new user if a free license is available.

Edit User Profiles During User Creation: Allows the administrator to edit a user’s profile while going through the user creation wizard.

Remove Users: Allows the administrator to remove a current user, but not another administrator.

Edit cPanel Admins: Allows the administrator to make the user an administrator on CPanel. This, however, does not affect their role on gPanel.

Bulk Add Users to Group: Allows the administrator the ability to add multiple users to groups.

Bulk Remove Users From Groups: Allows the administrator the ability to remove multiple users from groups.

Bulk Remove Groups From User: Allows the administrator the ability to remove multiple groups from users.

Bulk Clear Users From Group: Allows the administrator the ability to clear multiple groups from users.

Bulk Change Member Role: Allows the administrator to change multiple user’s roles at a time.

Bulk Suspend Users: Allows the administrator the ability to suspend multiple users.

Bulk Restore Users: Allows the administrator the ability to restore multiple users.

Bulk Delete Users: Allows the administrator to delete multiple users at a time.

Bulk Change Users' OrgUnit: Allows the administrator the ability to change the organizational unit for multiple users.

Bulk Change gPanel Role: Allows the administrator the ability to change the gPanel role for multiple users.

Bulk Force Password Reset: Allows the administrator the ability to reset passwords for multiple users.

Bulk Remove Shares: Allows the administrator to remove shares in bulk from user’s Drive items.

Bulk Add Gmail Label: Allows the administrator the ability to bulk add gmail labels.

Bulk Add Gmail Filter: Allows the administrator the ability to bulk add gmail filters.

Bulk Gmail IMAP: Allows the administrator the ability to turn on and off IMAP for multiple users.

Bulk Gmail POP: Allows the administrator the ability to turn on and off POP for multiple users.

Bulk Contact Sharing: Allows the administrator the ability to share contacts to multiple users.

Bulk Update Devices: Allows the administrator to update multiple devices at a time.

Bulk Delete Shared Contacts: Allows the administrator to delete multiple shared contacts at a time.

Bulk Delete Groups: Allows the administrator to delete multiple groups at a time.

Bulk Delete Personal Contacts: Allows the administrator to delete multiple contacts for a user at a time.

Bulk Delete Aliases From Group: Allows the administrator to delete multiple aliases from a group at a time.

Bulk Add Aliases To Group: Allows the administrator to add multiple aliases to a group at a time.

Bulk Add Aliases To User: Allows the administrator to add multiple aliases to a user at a time.

Edit Email Address: Allows the administrator the ability to edit users email addresses.

Edit User's Names: Allows the administrator the ability to change a users account name.

Edit User's OrgUnit: Allows the administrator the ability to change a users organization unit.

Edit Notes: Allows the administrator the ability to edit a user’s notes.

Create Random Password: Allows the administrator the ability to randomize a users account password.

Set Custom Password: Allows the administrator the ability to specify the password for a user's account.

Force Password Reset: Allows the administrator the ability to force a user to change their password on their next login.

Edit cPanel Role: Allows the administrator the ability to edit a Role for cPanel.

Edit gPanel Role: Allows the administrator the ability to edit a Role for gPanel.

Share Contact With Directory: Allows the administrator the ability to share contacts with the directory.

Suspend/Restore Users: Allows the administrator the ability to disable or enable a user’s account.

View Aliases Tab: Allows the administrator the ability to access the alias tab of the User Management module.

Add Aliases: Allows the administrator the ability to create aliases for users.

Remove Aliases: Allows the administrator the ability to delete aliases from user accounts.

Transfer Aliases: Allows the administrator to transfer an alias from one user to another.

View Profile Tab: Allows the administrator the ability to access the profile tab of the User Management module.

View Custom Attributes: Allows the administrator to view the custom attributes for users.

View Group Membership Tab: Allows the administrator the ability to access the group membership tab within User Management.

Add Group Members: Allows the administrator to add users to current groups.

Remove Group Members: Allows the administrator to remove users from current groups.

View Personal Contacts Tab: Allows the administrator the ability to access the personal contacts tab within User Management.

Add Personal Contacts: Allows the administrator the ability to create personal contacts.

Update Personal Contacts: Allows the administrator the ability to update personal contacts.

Export Personal Contacts: Allows the administrator the ability to export a user’s contacts.

Move Personal Contacts: Allows an administrator to move a user’s contacts into and out of labels.

Remove personal Contacts: Allows the administrator the ability to delete personal contacts.

Add Personal Contact Groups: Allows the administrator the ability to create personal contact groups.

Edit Personal Contact Groups: Allows the administrator the ability to edit personal contact groups.

Remove Personal Contact Groups: Allows the administrator the ability to delete personal contact groups.

Delegate Personal Contacts: Allows the administrator the ability to delegate personal contacts.

View Gmail Settings Tab: Allows the administrator the ability to access the gmail settings tab of the User Management module.

Add Gmail Account Delegation: Allows the administrator to delegate access to a user's Gmail account.

Remove Gmail Account Delegation: Allows the administrator the ability to remove delegates from gmail accounts.

Add Gmail Filters: Allows the administrator to create filters on a user's mailbox.

Add Gmail Send As: Allows the administrator to add a send as address to a user.

Add Gmail Label: Allows the administrator the ability to create labels for users' Gmail accounts.

Delete Gmail Label: Allows the administrator the ability to remove labels for a users’ Gmail accounts.

Add Gmail POP Settings: Allows the administrator the ability to add POP settings to Gmail accounts.

Add Gmail Imap Settings: Allows the administrator the ability to add IMAP settings to Gmail accounts.

Set Gmail Vacation Message: Allows the administrator the ability to set the vacation message for users.

Disable Gmail Vacation Message: Allows the administrator the ability to disable a user’s vacation message.

Edit Gmail Forwarding: Allows the administrator to edit Gmail forwarding for users.

Set Gmail Signature: Allows the administrator to set the signature for the users.

View Calendars Tab: Allows the administrator the ability to access the calendar tab of the User Management module.

View Drive Tab: Allows the administrator the ability to access the drive tab of the User Management module.

View Auditing Tab: Allows the administrator the ability to access the auditing tab of the User Management module.

Add Email Monitors: Allows the administrator the ability to add monitors to users' email accounts.

Edit Email Monitors: Allows the administrator the ability to edit monitors on users' email accounts.

Remove Email Monitors: Allows the administrator the ability to remove monitors from users' email accounts.

View Site Tab: Allows the administrator the ability to access the sites tab of the User Management module.

View Devices Tab: Allows the administrator the ability to access the devices tab of the User Management module.

View App Password Tab: Allows the administrator the ability to access the app password tab of the User Management module.

Revoke App Specific Passwords: Allows the administrator the ability to revoke app specific passwords.

View Third Party Applications Tab: Allows the administrator the ability to access the third party applications tab of the User Management module.

Revoke Third Party Applications' Auth Tokens: Allows the administrator the ability to revoke third party applications auth tokens.

View History Tab: Allows the administrator the ability to access the history tab of the User Management module.

Edit Gmail Label: Allows the administrator to edit a user’s Gmail labels.

Add Gmail Forward Address: Allows the administrator to add a forwarding address to users.

Delete Gmail Forward Address: Allows the administrator to remove forwarding addresses from users.

Directory Permissions

Can View User Profiles: Allows the administrator the ability to access the User Profile module.

Can view Groups: Allows the administrator the ability to access the Groups module.

Can view Group Templates: Allows the administrator to see all group templates.

Can View Organizational Units: Allows the administrator the ability to access the Organizational Units module.

Can View Shared Contacts: Allows the administrator the ability to access the Shared Contacts module.

Can View Contact Sync: Allows the administrator the ability to access the Contact Sync module.

Create Group: Allows the administrator the ability to create groups.

Delete Group: Allows the administrator to delete current groups.

Edit General Information Section: Allow the administrator the ability to edit the General Information section of the Groups module.

Edit Directory Section: Allow the administrator the ability to edit the Directory section of the Groups module.

Edit Content Control Section: Allow the administrator the ability to edit the Content Control section of the Groups module.

Edit Settings Section: Allow the administrator the ability to edit the Settings section of the groups module.

Edit Permissions Section: Allow the administrator the ability to edit the Permissions section of the Groups module.

Edit Advanced Section: Allow the administrator the ability to edit the Advanced section of the Groups module.

Add Group Aliases: Allows the administrator to add aliases to current groups from the Groups module.

Remove Group Aliases: Allows the administrator to remove aliases from current groups from the Groups module.

Add Member to Group: Allows the administrator to add users to groups from the Groups module.

Add External Member to Group: Allows the administrator to add members to groups who are outside your domain.

Remove Member from Group: Allows the administrator to remove users from groups from the Groups module.

Edit Role of Group Member: Allows the administrator to change a user's role in a group.

View Group History Tab: Allows the administrator to view the history of groups.

Create Group Template: Allows the administrator to create new group templates.

Edit Group Template: Allows the administrator to edit existing group templates.

Delete Group Template: Allows the administrator to delete group templates.

Edit Email Addresses: Allows the administrator the ability to change user’s email addresses.

Edit Phone Numbers: Allows the administrator the ability to change a user’s phone number.

Edit Organizations: Allows the administrator the ability to change a user’s organization unit entries.

Edit Relationships: Allows the administrator the ability to change a user’s relationships within the company.

Edit Instant Messaging: Allows the administrator the ability to change a user’s messaging entries.

Edit Addresses: Allows the administrator the ability to change a user’s living/ home addresses.

Edit External Ids: Allows the administrator the ability to change a user’s external Ids.

Edit Websites: Allows the administrator the ability to change a user’s website(s).

Edit Notes: Allows the administrator the ability to change a user’s notes.

Edit Profile Picture: Allows the administrator to change user’s profile photos.

Add Organizational Units: Allows the administrator to create new organizational units.

Edit Organizational Units: Allows the administrator to edit existing organizational units.

Remove Organizational Units: Allows the administrator to delete organizational units.

Change Organizational Units' Membership: Allows the administrator to change a user’s organizational unit.

Add Shared Contact: Allows the administrator the ability to create new shared contacts.

Edit Shared Contacts: Allows the administrator the ability to edit shared contacts.

Remove Shared Contacts: Allows the administrator the ability to remove shared contacts.

Clone Shared Contacts: Allows the administrator the ability to clone shared contacts.

Add Contact Sync: Allows the administrator to create new contact syncs.

Edit Contact Syncs: Allows the administrator to edit current contact syncs.

Remove Contact Sync: Allows the administrator to delete current syncs.

Remove Label For Contact Sync: Allows the administrator to delete the labels for a contact sync for target users.

Edit gTalk Assistant: Allows the administrator to edit gTalk assistant.

Edit Custom Attributes: Allows the administrator to edit a user’s custom attributes.

Can Edit Employee Information: Allows the administrator to edis a user’s employee information.

Calendars Permissions

Can View Calendars: Allows the administrator the ability to view the calendar module.

Create Calendars: Allows the administrator the ability to create new calendars in gPanel.

Delete Calendars: Allows the administrator the ability to delete calendars.

Can view Resource Template: Allows the administrator to view calendar resource templates.

Create Resource Template: Allows the administrator to create new calendar resource templates.

Delete Resource Template: Allows the administrator to remove existing calendar resource templates.

Edit Resource Template: Allows the administrator to edit existing calendar resource templates.

Can View Calendar Resources: Allows the administrator the ability to access the calendar resources module.

Create Resource Calendar: Allows the administrator to create new resource calendars.

Delete Resource Calendar: Allows the administrator to remove existing resource calendars.

Edit Calendar Resource: Allows the administrator to edit existing resource calendars.

Add Share to Calendar: Allows the administrator to share calendars with additional people.

Edit Calendar Shares: Allows the administrator the ability to share calendars with users.

Remove Calendar Shares: Allows the administrator the ability to remove shared calendars from users.

Rename Calendars: Allows the administrator the ability to rename current calendars.

Edit Calendar Color: Allows the administrator the ability to change the color that events are displayed in on current calendars.

Edit Calendar Location: Allows the administrator the ability to change the location information on current calendars.

Edit Calendar Description: Allows the administrator the ability to change the description of a calendar.

Edit Calendar Timezone: Allows the administrator the ability to change the current time zone for calendars

Edit Calendar Visibility: Allows the administrator the ability to change the visibility level of calendars.

Can Enable Event Editing: Allows the administrator to give users the ability to edit calendar events.

View Calendar Events: Allows the administrator to view a calendar’s events.

Add Calendar Events: Allows the administrator the ability to add events to a calendar.

Remove Calendar Events: Allows the administrator the ability to remove events from a calendar.

Remove All Calendar Events: Allows the administrator to remove all of a calendar’s events at once.

Update Calendar Events: Allows the administrator the ability to update calendar events.

View Calendar Resource Events: Allows the administrator to view a resource calendar’s events.

Add Resource Calendar Events: Allows the administrator to add events to a resource calendar.

Remove Resource Calendar Events: Allows the administrator to remove events from a resource calendar.

Update Resource Calendar Events: Allows the administrator to make changes to a resource calendar’s events.

Add Share to Resource Calendar: Allows the administrator to add a user to a calendar resource.

Remove Share from Resource Calendar: Allows the administrator to remove a user from a calendar resource.

Edit Share of Resource Calendar: Allows the administrator the ability to edit a user's access to a calendar resource.

View share calendar with other: Allows the administrator to see the option to share a calendar with other.

View Resources By Building: Allows the admin to view resource calendars by building.

Can Create Resource Calendars as category "Unknown": Allows the admin to create resource calendars within the “Unknown” category.

Can Create Resource Calendars as category "Conference Room": Allows the admin to create resource calendars within the “Conference Room” category.

Can Create Resource Calendars as category "Other": Allows the admin to create resource calendars within the “Other” category.

Edit Calendar Resource Common Name: Allows the admin to edit a resource calendar’s common name.

Edit Calendar Resource Category: Allows the admin to edit a resource calendar’s category.

Edit Calendar Resource Type: Allows the admin to redefine the type for a resource calendar.

Edit Calendar Resource Building: Allows the admin to redefine which building a resource calendar is within.

Edit Calendar Resource Floor: Allows the admin to redefine which floor a resource calendar is on.

Edit Calendar Resource Floor Section: Allows the admin to redefine which floor section a resource calendar is in.

Edit Calendar Resource Capacity: Allows the admin to edit the capacity for a resource calendar (room).

Edit Calendar Resource Features: Allows the admin to edit the features of a resource calendar.

Edit Calendar Resource User Visible Description: Allows the admin to edit the user visible description for a resource calendar.

Edit Calendar Resource Internal Description: Allows the admin to edit the non-user visible description for a resource calendar.

View Features: Allows the admin to view resource calendar features.

Create Features: Allows the admin to create features in a resource calendar.

Delete Features: Allows the admin to delete features in a resource calendar.

View Buildings: Allows the admin to view the buildings for a resource calendar.

Create Buildings: Allows the admin to create buildings for a resource calendar.

Edit Buildings: Allows admin to edit buildings for a resource calendar.

Delete Buildings: Allows admin to delete buildings for a resource calendar.

Can Transfer Calendars: Allows the admin to transfer calendars to another user.

Can view Calendar Transfer Logs: Allows the admin to view logs about calendar transfers.

Drive Permissions

Can View Drive Explorer: Allows the administrator to access the Drive Explorer module.

Can View Drive Search: Allows the administrator to access the Drive Search module.

Can View Ownership Transfer Logs: Allows the administrator the ability to read the logs for ownership transfer actions in Drive.

Take Action: Allows the administrator the ability to perform actions on Drive accounts.

Create Folders: Allows the administrator the ability to create a new folder in the Drive module for the users.

Move Doc: Allows the administrator the ability to move documents to different folders in the Drive module.

Trash Docs: Allows the administrator the ability to trash documents and folders.

Restore Docs: Allows the admin to restore deleted docs.

Permanently Delete Docs: Allows the admin to permanently delete trashed docs.

Rename Docs: Allows the administrator to rename documents or folders.

Transfer Docs: Allows the administrator the ability to change a documents owner from one user to another user.

View Doc Shares: Allows the administrator the ability to view shared documents.

Edit Visibility on Docs: Allows the administrator the ability to edit who can see documents in Drive. (e.g. Private, Domain, Public, etc.)

Edit Shares on Docs: Allows the administrator to change who documents and folders are shared with.

Edit Starred Docs: Allows the admin to star or un-star docs.

Copy Docs: Allows the admin to copy docs.

Export Drive Search: Allows the administrator to export the results of a Drive search to a spreadsheet.

View Drive Sweeps: Allows the admin to view drive sweeps.

Edit Drive Sweeps: Allows the admin to edit existing drive sweeps.

Delete Drive Sweeps: Allows the admin to remove existing drive sweeps.

Can use Drive Encryption: Allows the admin to use drive encryption.

Sites Permissions

Can View Sites: Allows the administrator the ability to access the Sites module.

Add Sites: Allows the administrator the ability to create sites.

Edit Sites: Allows the administrator the ability to edit current sites.

Clone Sites: Allows the admin to copy existing sites.

Tools Permissions

Can View Reports: Allows the administrator to access the Reports module.

Can View Policies: Allows the administrator to access the Policies module.

Can View Signature Templates: Allows the administrator to access the Signature Templates module.

Can View Bulk Operations: Allows the administrator to access Bulk Operations.

Can View gTalk Assistant: Allows the administrator to access the gTalk Assistant module.

Can view Mobile Management: Allows the administrator to access the Mobile Management module.

Can view Device Management: Allows the admin to access the Device Management module.

Can View Gmail Export: Allows the administrator to access the Gmail Export module.

Can View Account Audit: Allows the administrator to access the Account Audit section.

Can view cPanel Logs: Allows the admin to access the cPanel Logs module.

Approve Mobile Devices: Allows the administrator to approve a device for mobile management.

Block Mobile Devices: Allows the administrator to block a mobile device in mobile management.

Delete Mobile Devices: Allows the administrator to delete devices from mobile management.

Remote Wipe Mobile Devices: Allows the administrator to remote wipe a mobile device.

Remote Wipe Account Only Mobile Devices: Allows the admin to remote wipe the account from a mobile device.

Deprovision Devices: Allows the admin to deprovision devices.

Disable Devices: Allows the admin to disable devices.

Enable Devices: Allows the admin to enable devices.

Create Decommissioning Processes: Allows the admin to setup a new decommissioning policy.

Edit Decommissioning Processes: Allows the admin to edit existing decommissioning policies.

Delete Decommissioning Processes: Allows the admin to remove existing decommissioning policies.

Run Decommissioning Process: Allows the admin to execute existing decommissioning policies.

Copy Decommissioning Process: Allows the admin to clone existing decommissioning policies.

Disable Decommissioning Process: Allows the admin to disable decommissioning policies.

Enable Decommissioning Process: Allows the admin to enable decommissioning policies.

Create Report: Allows the admin to create new reports.

Delete Report: Allows the admin to delete existing reports.

Edit Reports: Allows the admin to edit existing reports.

Run All Reports: Allows the admin to run all existing reports at once.

Run Approved Email Forwarding Report: Allows the admin to run a report to see all users with approved email forwarding.

Run Customer Usage Report: Allows the administrator to run a report for customer usage.

Run Docs Activity Report: Allows the administrator to run a report for document activity.

Run Login Activity Report: Allows the administrator to run a report for login activity.

Run Docs Modified In Last 14 Days Report: Allows the administrator to run a report for documents modified in the last 14 days.

Run Docs Modified in Last X Days Report: Allows the admin to run a report for documents modified in a specified number of days.

Run Docs Over 100MB Report: Allows the administrator to run a report for documents over 100MB.

Run Docs Over 10MB Report: Allows the administrator to run a report for documents over 10MB.

Run Docs Shared Externally Report: Allows the administrator to run a report for documents shared externally.

Run Docs Shared Publicly Report: Allows the administrator to run a report for documents shared publicly.

Run Docs Shared With Groups Report: Allows the administrator to run a report for documents shared with groups.

Run Docs Shared With Domain Report: Allows the admin to run a report for documents shared with the domain.

Run Docs Shared With Link Report: Allows the admin to run a report for documents share with a link.

Run docs that contain a CC number or SSN Report: Allows the admin to run a report to show all documents that contain a CC or SS number.

Run Docs With MP3 Extension Report: Allows the administrator to run a report for documents with an MP3 extension.

Run Email Delegation Report: Allows the administrator to run a report for email delegation activity.

Run Email Forwarding Report: Allows the administrator to run a report for email forwarding activity.

Run Email Monitoring Report: Allows the administrator to run a report for email monitoring activity.

Run Empty Group Report: Allows the administrator to run a report for empty groups.

Run Export Personal Contacts Report: Allows the admin to run an export of personal contacts.

Run Group Report: Allows the administrator to run a report for groups.

Run Group Membership Report: Allows the admin to run a report to see all members of groups.

Run Group Member Count Report: Allows the administrator to run a report for group member count.

Run Groups With Nested Groups Report: Allows the administrator to run a report for nested groups.

Run Groups With No Owners Report: Allows the administrator to run a report for groups with no owners.

Run Signatures Report: Allows the admin to run a report to see signatures.

Run Users who are not member Of any Group: Allows the admin to run a report that shows any user who is not a member of any group.

Run Hidden User Report: Allows the administrator to run a report for hidden user activity.

Run Inactive User Report: Allows the administrator to run a report for inactive user activity.

Run User Usage Report: Allows the administrator to run a report for user usage.

Run License Types Report: Allows the admin to run a report which shows the license types for users.

Run Last Login Time Report: Allows the administrator to run a report for last login time.

Run Login Activity Report: Allows the admin to run a report to see login activity of users.

Run Mobile Device Report: Allows the admin to run a report which lists mobile devices.

Run Orgs Member Count Report: Allows the administrator to run a report for organizations member count.

Run Orgs With No Members Report: Allows the administrator to run a report for organizations with no members.

Run Send As Addresses: Allows the admin to run a report which lists the send as addresses for users.

Run Shared Contact Report: Allows the admin to run a report which lists shared contacts.

Run Site Ownership: Allows the admin to run a report to list sites and their owners.

Run Super Admin Report: Allows the administrator to run a report for super admins.

Run Storage Report: Allows the admin to run a report to see the storage used for users.

Run Suspended User Report: Allows the administrator to run a report for suspended users.

Run Two Factor Enrolled Report: Allows the administrator to run a report for two factor enrolled users.

Run User Profile Report: Allows the administrator to run a report for user profile activity.

Run Quota Report: Allows the administrator to run a report for quotas.

Run Gmail Breakdown Report: Allows the admin to run a report to see the breakdown of user’s Gmails.

Run User Usage Report: Allows the admin to run a report to see user’s usages.

Run Email Activity Report: Allows the admin to run a report to see the email activity of users.

Run Nested Group Reports: Allows the admin to run a report to see which groups are nested within other groups.

Run Third Party Application Reports: Allows the admin to run reports to see third party applications users have approved.

Run Export Admin Logs Reports: Allows the admin to run a report which displays admin logs.

Run File Hierarchy Reports: Allows the admin to run a report which shows file hierarchy.

Run Activity Feed Reports: Allows the admin to run a report which shows activity feed.

Run Externally Owned Docs Report: Allows the admin to run a report which lists externally owned documents.

Create Signature Template: Allows the administrator to create a signature template.

Delete Signature Template: Allows the administrator to delete a signature template.

Edit Signature Template: Allows the administrator to edit a signature template.

Edit Signature Template Configuration: Allows the administrator to edit a signature template configuration.

Run Signature Template: Allows the administrator to run a signature template.

Create Policy: Allows the administrator to create policies.

Delete Policy: Allows the administrator to delete policies.

Edit Policy: Allows the administrator to edit policies.

Run Policy: Allows the administrator to run policies.

Run Group Bulk Operations: Allows the admin to run bulk operations on groups.

Run Users Bulk Operations: Allows the admin to run bulk operations on users.

Run Shared Contacts Bulk Operations: Allows the admin to run bulk operations on shared contacts.

Run Bulk Group Deletion Operations: Allows the admin to run bulk operations which delete multiple groups at a time.

Run Bulk Group Removal Operations: Allows the admin to run bulk operations which remove users from groups.

Run Bulk Assign Archive User Licenses: Allows the admin to run bulk operations which archive multiple users at a time.

Run Clear Users From Group Operations: Allows the admin to clear users from multiple groups at a time.

Run Multiple User Vacation Responder Operation: Allows the admin to set the vacation responder for multiple users at a time.

Run Bulk Force Password Reset Operations: Allows the admin to force multiple users to reset their passwords on next sign in.

Run Bulk Remove Shares Operations: Allows the admin to remove multiple shares at a time.

Run Bulk Delete Shared Contacts Operations: Allows the admin to delete multiple shared contacts at a time.

Run Bulk Delete Personal Contacts Operations: Allows the admin to delete multiple personal contacts at a time.

Run Bulk Profile Picture Upload: Allows the admin to set the profile pictures of multiple users at a time.

Run Bulk Upload Users: Allows the admin to create multiple users at a time.

Run Bulk Drive Transfer: Allows the admin to transfer multiple users drives to other users.

Run Bulk Calendar Permission Settings: Allows the admin to change the permissions of multiple calendars at a time.

Run Bulk Signature Template Blocklist Status: Allows the admin to block or un-block signature templates from applying to multiple users at a time.

Run Signature Template Report: Allows the admin to run a report which lists signature templates.

Run Time and IP Address Report of Logged In Users: Allows the admin to run a report to show the IP addresses of logged in users.

Create Gmail Export: Allows the admin to export a user’s email.

Delete Gmail Export: Allows the admin to delete an export of a user’s email.

Download Gmail Exports: Allows the admin to download an export of a user’s email.

Set the Encryption Key: Allows the admin to set the key used to encrypt a user’s exported email.

Create Gmail Search: Allows an admin to create a search to search through user’s emails.

Delete Gmail Search: Allows an admin to delete existing Gmail searches.

View Gmail Search: Allows an admin to view the results of a search through a user’s email.

Run Gmail Search: Allows an admin to execute a search on user’s emails.

Preview Gmail Search: Allows an admin to preview a search operation on user’s emails.

Report Gmail Search: Allows an admin to run a report for gmail searches.

Hangouts Report: Allows an admin to run a report for Hangouts.

Run Resource Event Remover: Allows an admin to run an operation to remove resource events.

Administration Permissions

Can View Roles: Allows the administrator to access the role editor section of the administration module.

Can View App Logs: Allows the administrator to access the application logs.

Can view Domain Defaults: Allows the admin to view default settings for the domain.

Can View Settings: Allows the administrator to access the settings section of the administration module.

Can View Domain Service Errors: Allows the admin to view errors related to gPanel’s API access.

Can View My Account Page: Allows the admin to see the My Account page.

Can view Labs: Allows the admin to view experimental and beta features in gPanel.

Add gPanel Licenses: Allows the admin to add new licenses for gPanel.

Create Role: Allows the admin to create new admin and user roles.

Delete Role: Allows the admin to delete existing admin and user roles.

Edit Role: Allows the admin to make changes to existing admin and user roles.

Add Member to Roles: Allows the admin to assign roles to users.

Remove Member from Role: Allows the admin to remove a role from a user.

Can view Domain Default for Resource Calendar: The admin can view the default domain resource calendar.

Add G Suite Licenses: The admin can purchase new Google Workspace licenses.

Can view Set gPanel Admin: The admin can set a new default admin in gPanel.

Can view Authentication: The admin can view authentication settings.

Can View Indexing: Allows the administrator to access the indexing tab of the settings section of the administration module.

Can view IP Intrusion: Allows the admin to view IP Intrusion settings.

Can view Secondary Domains: Allows the admin to view secondary domains.

Can view Timezone: Allows the admin to view what the timezone is set to for gPanel

Can view Custom Labeling: Allows the admin to view custom labels.

Can view Google API Status: Allows the admin to view the current connection status of gPanel for each API.

Export App Logs: Allows the admin to download a copy of app logs.

Can Enable and Disable Lab Features: Allows the admin to turn experimental and beta features in gPanel on or off.

Can get Google API Status Notifications: Allows the admin to receive notifications about gPanel’s API connection status.

Can Access gPanel Data Security: Allows the admin to access data security features.

Enable email notification outside domain: Allows the admin to receive email notifications to a non-domain email address.

View Session Timeout: Allows the admin to view the session timeout setting.

View Welcome Email Templates: Allows the admin to view welcome email templates.

Delete Welcome Template: Allows the admin to remove existing welcome email templates.

Edit Welcome Template: Allows the admin to make changes to existing welcome email templates.

Create Welcome Template: Allows the admin to create new welcome email templates.

Billing Permissions

Can view current subscription information: Required for sub components of the billing section.

Can use saved payment methods for license purchases: Allows the admin to use previously saved payment methods to purchase licenses.

Can add payment methods: Allows the admin to add new payment methods.

Can edit payment methods: Allows the admin to edit saved payment methods.

Can remove payment methods: Allows the admin to delete saved payment methods.

Can view payment methods: Allows the admin to view saved payment methods.

Can change the auto pay source: Allows the admin to make changes to the account auto pay will charge.

Can view domain and company settings: Allows the admin to view and make changes to domain and company information.

Can add billing contacts: Allows the admin to add billing contacts who will receive notifications.

Can edit billing contacts: Allows the admin to edit existing billing contacts.

Can remove billing contacts: Allows the admin to delete existing billing contacts.

Can change primary billing contact: Allows the admin to set a billing contact as primary.

Can edit company profile information: Allows the admin to make changes to the profile information of the company.

Can add G Suite licenses: Allows the admin to purchase additional Google Workspace licenses.

Can add Chrome licenses: Allows the admin to purchase additional Chrome licenses.

Can add Jamboard licenses: Allows the admin to purchase additional Jamboard licenses.

Can add gPanel licenses: Allows the admin to purchase additional gPanel licenses.

Can add CFM licenses: Allows the admin to purchase additional Chromebox for Meetings licenses.

Can add Identity licenses: Allows the admin to purchase additional Cloud Identity licenses.

Can view G Suite licenses: Allows the admin to view the current Google Workspace licenses.

Can view Chrome licenses: Allows the admin to view the current Chrome licenses.

Can view CFM licenses: Allows the admin to view the current Chromebox for Meetings licenses.

Can view Jamboard licenses: Allows the admin to view the current Jamboard licenses.

Can view Vault licenses: Allows the admin to view the current Vault licenses.

Can view Drive licenses: Allows the admin to view the current Drive licenses.

Can view gPanel licenses: Allows the admin to view the current gPanel licenses.

Can view Identity licenses: Allows the admin to view the current Cloud Identity licenses.

User Roles

User View Permissions

Can view My Profile: Allows the user to view their profile information.

Can view My Contacts: Allows the user to view their contacts within the gPanel user portal.

Can view My Groups: Allows the user to view all of the groups they are a member of.

Can view All Group Members: Allows the user to see all members within the groups they can see.

Can view All Groups: Allows the user to to see all groups in the organization.

Can view Group Settings: Allows the user to view groups settings for the groups they are able to see.

Can view Shared Contacts: Allows the user to view shared contacts.

Can add Members to Owned Groups: Allows the user to add members to groups they are an owner of.

Can add Managers to Owned Groups: Allows the user to add managers to groups they are the owner of.

Can add Owners to Owned Groups: Allows the user to add additional owners to groups they are the owner of.

Can remove Members from Owned Groups: Allows the user to remove members from groups they are the owner of.

Can remove Managers from Owned Groups: Allows the user to remove managers from groups they are the owner of.

Can remove Owners from Owned Groups: Allows the user to remove other owners from groups they are also an owner of.

Can add Members to Managed Groups: Allows the user to add members to groups they are a manager of.

Can add Managers to Managed Groups: Allows the user to add additional managers to groups they are a manager of.

Can add Owners to Managed Groups: Allows the user to add owners to groups they are a manager of.

Can remove Members from Managed Groups: Allows the user to remove members from groups they are a manager of.

Can remove Managers from Managed Groups: Allows the user to remove managers from groups they are a manager of.

Can remove Owners from Managed Groups: Allows the user to remove owners of groups they are a manager of.

Can add Groups: Allows the user to create new groups.

Can view directory search: Allows the user to view the directory search section.

Directory Search Permissions

Can search for users: Allows the user to search for other users.

Can search for groups: Allows the user to search for groups.

Can view all users: Allows the user to view all other users.

Can view all groups: Allows the user to view all groups in the domain.

Can view user's groups: Allows the user to view the groups other users are a member of.

Users Permissions

Can view User Management: Allows the user to view the user management section.

Create Users: Allows the user to create new users.

Edit User Profiles During User Creation: Allows the user to edit user profiles during the creation process of a new user.

Remove Users: Allows the user to remove other users.

Edit cPanel Admins: Allows the user to assign or unassign a super admin role for Google Admin to other users.

Bulk Add Users To Group: Allows the user to bulk add other users to a group.

Bulk Remove Users From Group: Allows the user to bulk remove other users from a group.

Bulk Remove Groups From User: Allows the user to remove multiple groups from a user at once.

Bulk Clear Users From Group: Allows the user to clear all users from multiple groups at once.

Bulk Change Member Role: Allows the user to change multiple member roles at a time.

Bulk Suspend Users: Allows the user to suspend multiple other users at once.

Bulk Restore Users: Allows the user to restore multiple users at once.

Bulk Delete Users: Allows the user to delete multiple other users at once.

Bulk Change Users' OrgUnit: Allows the user to change the organizational units for multiple other users at a time.

Bulk Change gPanel Role: Allows the user to change the gPanel roles of multiple other users at a time.

Bulk Force Password Reset: Allows the user to force a password reset on multiple other users at a time.

Bulk Remove Shares: Allows the user to remove multiple shares at a time.

Bulk Add Gmail Label: Allows the user to add multiple Gmail labels at a time.

Bulk Add Gmail Filter: Allows the user to add multiple Gmail filters at a time.

Bulk Gmail IMAP: Allows the user to change the Gmail IMAP setting for multiple other users at once.

Bulk Gmail POP: Allows the user to change the Gmail POP setting for multiple other users at once.

Bulk Contact Sharing: Allows the user to add multiple shared contacts at a time.

Bulk Update Devices: Allows the user to update multiple devices at once.

Bulk Delete Shared Contacts: Allows the user to delete multiple shared contacts at a time.

Bulk Delete Groups: Allows the user to delete multiple groups at once.

Bulk Delete Personal Contacts: Allows the user to remove multiple of another user’s personal contacts at once.

Bulk Delete Aliases From Group: Allows the user to delete multiple aliases from a group at a time.

Bulk Add Aliases To Group: Allows the user to add multiple aliases to a group at a time.

Bulk Add Aliases To User: Allows the user to add multiple aliases to another user at a time.

Edit Email Address: Allows the user to edit email addresses.

Edit User's Name: Allows the user to edit a user’s name.

Edit User's OrgUnit: Allows the user to edit a user’s organizational unit.

Edit Notes: Allows the user to edit notes.

Create Random Password: Allows the user to use the generate randomized password functionality.

Set Custom Password: Allows the user to set a custom password.

Force Password Reset: Allows the user to force a password reset on another user.

Edit cPanel Role: Allows the user to edit the cPanel role.

Edit gPanel Role: Allows the user to edit the gPanel role.

Share Contact With Directory: Allows the user to share a contact with the directory.

Suspend/Restore Users: Allows the user to suspend or unsuspend other users.

View Aliases Tab: Allows the user to view the aliases tab.

Add Aliases: Allows the user to add aliases.

Remove Aliases: Allows the user to remove aliases.

Transfer Aliases: Allows the user to transfer aliases to another user.

View Profile Tab: Allows the user to view the profile tab.

View Custom Attributes: Allows the user to view custom attributes.

View Group Membership Tab: Allows the user to view the group membership tab.

Add Group Members: Allows the user to add group members.

Remove Group Members: Allows the user to remove group members.

View Personal Contacts Tab: Allows the user to view the personal contacts tab.

Add Personal Contacts: Allows the user to add new personal contacts.

Update Personal Contacts: Allows the user to edit existing personal contacts.

Export Personal Contacts: Allows the user to export a CSV of personal contacts.

Move Personal Contacts: Allows the user to move personal contacts.

Remove Personal Contacts: Allows the user to delete existing personal contacts.

Add Personal Contact Groups: Allows the user to add personal contacts groups.

Edit Personal Contact Groups: Allows the user to edit personal contact groups.

Remove Personal Contact Groups: Allows the user to remove personal contact groups.

Delegate Personal Contacts: Allows the user to delegate personal contacts.

View Gmail Settings Tab: Allows the user to view the Gmail settings tab.

Add Gmail Account Delegation: Allows the user to add account delegates.

Remove Gmail Account Delegation: Allows the user to remove account delegates.

Add Gmail Filters: Allows the user to add Gmail filters.

Add Gmail Send As: Allows the user to add a send as address.

Add Gmail Label: Allows the user to add Gmail labels.

Delete Gmail Label: Allows the user to delete Gmail labels.

Add Gmail Pop Settings: Allows the user to add Gmail Pop settings.

Add Gmail Imap Settings: Allows the user to add Gmail IMAP settings.

Set Gmail Vacation Message: Allows the user to set a vacation responder message.

Disable Gmail Vacation Message: Allows the user to disable a vacation responder.

Edit Gmail Forwarding: Allows the user to edit Gmail forwarding settings.

Set Gmail Signature: Allows the user to set a Gmail signature.

View Calendars Tab: Allows the user to view the Calendars tab.

View Drive Tab: Allows the user to view the Drive tab.

View Auditing Tab: Allows the user to view the Auditing tab.

Add Email Monitors: Allows the user to create email monitors.

Edit Email Monitors: Allows the user to edit existing email monitors.

Remove Email Monitors: Allows the user to remove existing email monitors.

View Sites Tab: Allows the user to view the Sites tab.

View Devices Tab: Allows the user to view the Devices tab.

View App Password Tab: Allows the user to view the App Password tab.

Revoke App Specific Passwords: Allows the user to revoke app specific passwords.

View Third Party Applications Tab: Allows the user to view the Third Party Applications tab.

Revoke Third Party Applications' Auth Tokens: Allows the user to revoke third party application’s auth tokens.

View User History Tab: Allows the user to view the History tab.

Edit Gmail Label: Allows the user to edit Gmail labels.

Add Gmail Forward Address: Allows the user to add Gmail forwarding addresses.

Delete Gmail Forward Address: Allows the user to remove Gmail forwarding addresses.

Directory Permissions

Can view User Profiles: Allows the user to view User Profiles.

Can view Groups: Allows the user to view Groups.

Can view Group Templates: Allows the user to view group templates.

Can view Organizational Units: Allows the user to view organizational units.

Can view Shared Contacts: Allows the user to view shared contacts.

Can view Contact Sync: Allows the user to view contact syncs.

Create Group: Allows the user to create groups.

Delete Group: Allows the user to delete groups.

Edit General Information Section: Allows the user to edit their general information section.

Edit Directory Section: Allows the user to edit the directory section.

Edit Content Control Section: Allows the user to edit the content control section.

Edit Settings Section: Allows the user to edit the settings section.

Edit Permissions Section: Allows the user to edit the permissions section.

Edit Advanced Section: Allows the user to edit the advanced section.

Add Group Aliases: Allows the user to add group aliases.

Remove Group Aliases: Allows the user to remove group aliases.

Add Member to Group: Allows the user to add members to groups.

Add External Member to Group: Allows the user to add members to groups who are outside of the domain.

Remove Member from Group: Allows the user to remove members from groups.

Edit Role of Group Member: Allows the user to edit the role of group members.

View Group History Tab: Allows the user to view the group history tab.

Create Group Template: Allows the user to create group templates.

Edit Group Template: Allows the user to edit group templates.

Delete Group Template: Allows the user to delete group templates.

Edit Email Addresses: Allows the user to edit email addresses.

Edit Phone Numbers: Allows the user to edit phone numbers.

Edit Organizations: Allows the user to edit organizations.

Edit Relationships: Allows the user to edit relationships.

Edit Instant Messaging: Allows the user to edit instant messaging.

Edit Addresses: Allows the user to edit addresses.

Edit External Ids: Allows the user to edit external IDs.

Edit Websites: Allows the user to edit websites.

Edit Notes: Allows the user to edit notes.

Edit Profile Picture: Allows the user to edit profile pictures.

Add Organizational Units: Allows the user to add new organizational units.

Edit Organizational Units: Allows the user to edit existing organizational units.

Remove Organizational Units: Allows the user to delete existing organizational units.

Change Organizational Units' Membership: Allows the user to change a user’s organizational unit.

Add Shared Contacts: Allows the user to add new shared contacts.

Edit Shared Contacts: Allows the user to edit existing shared contacts.

Remove Shared Contacts: Allows the user to delete existing shared contacts.

Clone Shared Contacts: Allows the user to duplicate existing shared contacts.

Add Contact Sync: Allows the user to add new shared contacts.

Edit Contact Sync: Allows the user to edit current shared contacts.

Remove Contact Sync: Allows the user to delete existing shared contacts.

Remove Label For Contact Sync: Allows the user to remove labels for shared contacts.

Edit gTalk Assistant: Allows the user to edit gTalk assistant.

Edit Custom Attributes: Allows the user to edit custom attributes.

Can Edit Employee Information: Allows the user to edit information in the employee information section.