As an administrator, you can control who can use which Google services. Just turn the service on or off for those users in your Google Admin console. When users sign in to their account, they have only the services that are turned on for them.
Before you begin
Turn a service on or off for some users, you have these options:
- By department (common)—Add users to an organizational unit to control access by department. For details, go to Option 1: Control access for organizational units.
- Across departments (advanced)—Add users to an access group to allow access to users across or within departments. For details, go to Option 2: Customize access using groups.
Turn a service on or off for all users in your organization
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu AppsGoogle WorkspaceService status.
- Click the service that you want to turn on or off.
- Click Service status.
- Click On for everyone or Off for everyone and then click Save.
Changes can take up to 24 hours but typically happen more quickly. Learn more
Option 1: Control access for organizational units
The easiest way to turn a service on or off for specific users is using organizational units. For example, you want only your Marketing team to use YouTube. Create one organizational unit for Marketing and another for everyone else. Then, leave YouTube turned on for Marketing and turn it off for the others. For details, go to How the organizational structure works.
Click a service name for instructions (requires an administrator account).
Google Workspace |
Additional Google services |
Google Workspace Marketplace apps |
---|---|---|
Option 2: Customize access using groups
If you already use organizational units to control other settings for users, you might instead want to control specific service access using groups. This lets you control access for any user group, regardless of your organizational structure. For details, go to Customize service access using access groups.