How-to
Google Workspace admin how-to guides
Every task below is written as the click path in the current Google Admin console, followed by the propagation delay to expect and the security consequence of the change. Role and delegation changes can take up to 24 hours to apply across all services.
These are the admin console tasks that get searched for most and documented worst: role assignment, delegation, app passwords and ownership transfer.
Each page states the privilege you need to hold before you start, and what the change exposes once it is made.
Pages in this section
- How to transfer Google Drive ownershipTransfer ownership of Google Drive files for one file or an entire leaver account, what transfers, what does not, and the 24-hour propagation window to expect.Single file: Owner opens Share, sets the recipient to Owner
- How to make a user a super adminGrant super admin in Google Workspace, the propagation delay to expect, and why the right answer is usually a delegated role rather than a second super admin.Click path: Directory, Users, the user, Admin roles and privileges
- How to enforce two-step verificationEnforce two-step verification across a Google Workspace tenant: the enrolment period, the admin order of operations and the lockout risks to plan for.Click path: Security, Authentication, 2-step verification
- How to add a domain aliasAdd a domain alias to a Google Workspace tenant, how verification and MX records differ from a secondary domain, and what the alias does to every mailbox.Domain alias: Mirrors every existing user; no additional licences
- How to export Google Workspace dataExport data from a Google Workspace tenant, when to use the admin data export against Vault or Takeout, and the delivery times and formats to expect.Whole tenant: Admin data export; archive delivered to Cloud Storage
- How to delegate a Gmail mailboxSet up Gmail delegation in Google Workspace, what a delegate can and cannot do, and why a shared mailbox is usually better handled as a group.Delegates per mailbox: Up to 25
What this doesn't cover
- Click paths reflect the current Admin console; Google moves menu items without notice and each page carries the date we last checked.
- We do not cover Google Cloud IAM, which is a separate console and permission model.
- Anything requiring a reseller or partner console action is out of scope for a self-serve guide.
Questions we get asked
- How long do Google Workspace admin changes take to apply?
- Most user and group changes apply within minutes, but role, delegation and sharing policy changes can take up to 24 hours to propagate across all Workspace services. Test after the delay, not during it.
- How many super admins should a tenant have?
- At least two and rarely more than four. One super admin is a single point of failure at recovery time; a long list of them is the most common finding in our security audits.
Not sure which of these you need?
Send us the shape of your estate — seat count, current platform, and the deadline you are working to — and we will tell you which of these pages applies and what it costs.