Google Workspace

Google Workspace is a collection of cloud computing, productivity and collaboration tools, software and products developed and marketed by Google.

About Roles in Google Workspace

The Google Workspace Directory API offers role-based access control (RBAC) to effectively manage access to features within your Google Workspace domain. Through this API, you can create custom roles with specific privileges to finely control administrative access, going beyond the pre-built roles provided by Google Workspace. These roles can be assigned to individual users or security groups.

Here are some common terms associated with RBAC in the context of Google Workspace, as used by the Directory API:

• Privilege: A permission required to perform a specific task or operation within a Google Workspace domain. Represented by the Privilege resource. It’s important to note that this resource does not have persistent data associated with it.
• Role: A collection of privileges that provides entities assigned to that role with the capability to perform designated tasks or operations. Represented by the Role resource.
• Role assignment: This refers to the record of a particular role granted to a user or group. Represented by the RoleAssignment resource.
• Security group: A specific type of Cloud Identity group used for controlling access to organizational resources. Security groups can include both individual users and other groups.