Home / News / The Google Admin Console: Possibilities and Best Practices

The Google Admin Console: Possibilities and Best Practices

Google Admin Console Tips and Tricks for Educators

If you’re a system administrator working in a district that is new to Google Apps, you’ve probably noticed that there are a lot of options in the Google Apps admin console. It’s easy to become overwhelmed by the sheer number of choices! Here’s a quick overview of what you can (and should) do with the Google Apps Admin console.

What Can I Do?
Using the Google Apps Admin Console, you can create and manage users, set permissions for access to different Google services, manage Chromebooks and other mobile devices, and even configure mail routing. If you’re a sysadmin already, you’ll be familiar with some of the controls you encounter, though they may not be where you expect them to be.

Basic Setup and User Management
If you’re starting from scratch with Google Apps for Education, you can create users here or upload them in bulk from a .csv file. If you’ve already got a user organization structure in Active Directory, you can use a tool called GADS to sync your AD user orgs to Google Apps. As a best practice, you’ll want to create sub-organizations for different groups within your userbase, rather than dumping all users into a single user organization. You can set this up in a variety of ways, depending upon what works for your district or organization. See Google Apps for Education: Domain Best Practices for an in-depth discussion of this idea. Google has a lot of resources for migration to and deployment of Google services – check out their migration guide.


Wrangling Google Apps
Once your domain is set up, you’ll want to enable different apps and services for different users. For instance, many school districts choose to disable email for younger students, turn off Google+ for students while enabling it for staff to use in their professional learning communities, or manage YouTube and Hangouts for certain groups of students. If you’ve already organized your users into organizations, this is pretty simple – just be sure you’ve selected the correct organization before changing a setting.

Apps are organized into three major categories – Google Apps (the 9 services governed by the Google Apps agreement you signed when you registered), Additional Google Services (other Google-branded apps and services not covered by the agreement, such as Blogger and Youtube), and Marketplace Apps (third-party apps that you can add to your domain and push out to users). Most of your frequently used services are included in the first Google Apps pane: Drive, Docs, Gmail, Classroom, Calendar, and more. Options for each service vary, so it’s best to just take a tour through each app’s settings and see what you can do with it.

Managing devices
Things can get a little confusing in the Device Management pane. Within are three sub-panes: Mobile Devices, Chrome Devices and Chrome Devices for Meetings. The sidebar in Device Management has options for Network and for Chrome Management. Once you have enrolled devices in your domain for management, they’ll show up in the Mobile or Chrome Devices panes; you can view serial numbers, move devices between user organizations, and disable devices from there. Settings that affect what users can do on a Chrome device (or with Chrome itself while logged in as a user in your domain) are available in Chrome Management in the sidebar. This is also where you determine settings for public sessions and kiosk mode.

Best practices and considerations
If you’re just starting out, begin with the end in mind. Get your user organizations sorted out from the beginning so you have control. As far as enabling services – restrict what you must, but trust when you can.

Consider security. Have you made two-step authentication available to your users? What about your admins? If you’re thinking of making it mandatory, be sure you don’t enforce this policy on users until they’ve opted in, or people will lose access. Do you have a backup Super Admin? Do you have limited admin roles to delegate tasks, while keeping higher-level functions more secure?

When establishing policy, communicate with instructional staff to be sure you understand how they are using the tools–don’t operate in an IT vacuum. Your understanding of the use of these tools (especially around security and why teachers and students need various functions) is different than what a teacher deals with day-to-day. Get into a classroom periodically if you can.

Above all–go with the flow. Google changes stuff CONSTANTLY. Often it’s for the better. Use the help and search functions in the Admin console, and find a community of other admins for your personal learning (check out the GAFE Admins Group on Google+).  There’s a lot of stuff to read through, but contextual help in the Admin panel is continually improving, and there are a lot of minor caveats that can make a big difference.  Keep learning and roll with it!