[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-18。"],[[["\u003cp\u003eGoogle Groups streamline user management by allowing IAM roles to be granted to groups, which members then inherit, eliminating the need to assign roles to each individual user.\u003c/p\u003e\n"],["\u003cp\u003eManaging groups in the Google Cloud console requires specific group permissions managed by Google Workspace and IAM roles like Organization Viewer and Logs Viewer.\u003c/p\u003e\n"],["\u003cp\u003eThe Google Cloud console provides the functionality to view, create, and edit Google Groups, including managing group details and membership.\u003c/p\u003e\n"],["\u003cp\u003eFor advanced features like moderation settings, groups must be managed through Google Groups directly, which is accessible from the Google Cloud console.\u003c/p\u003e\n"],["\u003cp\u003eDeleting a group is irreversible, and it's recommended to revoke IAM roles and wait at least 7 days before deletion to avoid unexpected access changes.\u003c/p\u003e\n"]]],[],null,["Google groups can help you manage users at scale. Each member of a Google group\ninherits the Identity and Access Management (IAM) roles granted to that group. This\ninheritance means that you can use a group's membership to manage users' roles\ninstead of granting IAM roles to individual users.\n| **Note:** You can't add [service agents](/iam/docs/service-account-types#service-agents) to Google groups unless the [external members](https://support.google.com/a/answer/167097#zippy=%2Ccan-external-users-participate-in-groups) option is turned on.\n\nYou can create and manage groups for your organization in the Google Cloud console.\n\nRequired permissions\n\nYou need the following permissions to manage groups in the\nGoogle Cloud console.\n\nGroup permissions\n\nTo create, view, edit, and delete groups, in the Google Cloud console or\nelsewhere, you need the appropriate group permissions. These\npermissions are managed by Google Workspace, not IAM. To gain\nthese permissions, contact your Google Workspace administrator.\n\nTo learn about group permissions, see\n[Administrator privilege definitions](https://support.google.com/a/answer/1219251#groups) and\n[Set organization-wide policies for using groups](https://support.google.com/a/answer/167097#create-groups).\n\nIAM permissions\n\n\nTo get the permissions that\nyou need to use the Google Cloud console to manage groups,\n\nask your administrator to grant you the\nfollowing IAM roles on the organization:\n\n- [Organization Viewer](/iam/docs/roles-permissions/resourcemanager#resourcemanager.organizationViewer) (`roles/resourcemanager.organizationViewer`)\n- To view group membership change logs: [Logs Viewer](/iam/docs/roles-permissions/logging#logging.viewer) (`roles/logging.viewer`)\n\n\nFor more information about granting roles, see [Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access).\n\n\nYou might also be able to get\nthe required permissions through [custom\nroles](/iam/docs/creating-custom-roles) or other [predefined\nroles](/iam/docs/roles-overview#predefined).\n\nViewing groups\n\nTo view the Google groups in your organization that you have access to,\nfollow these steps:\n\n1. In the Google Cloud console, go to the **Groups** page.\n\n [Go to the Groups page](https://console.cloud.google.com/iam-admin/groups)\n2. Select the organization whose groups you want to view.\n\nThe Google Cloud console displays all the groups in your organization that\nyou can access.\n| **Note:** To check whether a group has access to your project and its resources, see [Viewing current access](/iam/docs/granting-changing-revoking-access#viewing-console).\n\nCreating a group\n\nTo create a group, follow these steps:\n\n1. In the Google Cloud console, go to the **Groups** page.\n\n [Go to the Groups page](https://console.cloud.google.com/iam-admin/groups)\n2. Click add_box\n **Create**.\n\n3. Fill in your group's details, including the group's name, email address, and\n an optional description.\n\n4. To add members to the group, click\n add **Add member** ,\n then enter the member's email and choose their\n [Google Groups role](https://support.google.com/groups/answer/2464975?ref_topic=2458761).\n\n | **Note:** When you add a member to a Google group, they inherit all IAM roles granted to that group, regardless of their Google Groups role.\n5. When you are finished, click **Submit** to create\n the group.\n\nViewing and editing group details\n\nTo view and edit the details of a group, including the group name, description,\nand membership, follow these steps:\n\n1. In the Google Cloud console, go to the **Groups** page.\n\n [Go to the Groups page](https://console.cloud.google.com/iam-admin/groups)\n2. Find the group whose details you want to view, click\n the **More** more_vert button in that\n row, and then click **View group details**.\n\n3. To edit the group name or description, type your new name or description in\n the **Group name** or **Group description** field and click **Save**.\n\n4. To edit the group's membership, do the following:\n\n - **To add members** : Click\n person **Add\n members** at the top of the page. Enter the names of the members you want\n to add, choose their [Google Groups roles](https://support.google.com/groups/answer/2464975?ref_topic=2458761), then click\n **Add** to add them to the group.\n\n | **Note:** When you add a member to a Google group, they inherit all IAM roles granted to that group, regardless of their Google Groups role.\n - **To remove members** : Select the checkboxes next to the names\n of the members you want to remove, then click\n delete **Remove\n members** at the top of the page.\n\nManaging a group in Google Groups\n\nSome groups have features---such as moderation settings, joining\nrules, and permissions for creating and viewing posts---that\nyou cannot manage from the Google Cloud console. To manage these features,\nyou need to open the group in Google Groups.\n\nTo open a group in Google Groups, follow these steps:\n\n1. In the Google Cloud console, go to the **Groups** page.\n\n [Go to the Groups page](https://console.cloud.google.com/iam-admin/groups)\n2. Find the group that you want to manage, click\n the **More** more_vert button\n in that row, and then click **View in Google\n Groups** launch.\n\nThis action opens the group in Google Groups, where you can manage all of your\ngroup's features. For more information, see the\n[Google Groups help page](https://support.google.com/groups/).\n\nDeleting a group **Warning:** Deleting a group is irreversible. To avoid unexpected access changes, revoke all IAM roles from the group, then wait at least 7 days before deleting it.\n\nTo delete a group, follow these steps:\n\n1. In the Google Cloud console, go to the **Groups** page.\n\n [Go to the Groups page](https://console.cloud.google.com/iam-admin/groups)\n2. Find the group that you want to delete, click\n the **More** more_vert button in that\n row, and then click **Delete group**.\n\n3. Confirm that you want to delete the group by clicking **Confirm** in the\n confirmation dialog.\n\nView Google Workspace audit logs in Google Cloud\n\nIf [data sharing](https://support.google.com/a/answer/9320190) is enabled for your organization,\nGoogle Cloud will automatically generate audit logs for actions taken in\nGoogle Workspace. For example, it will generate audit logs when someone\nadds a user to your organization or when someone removes a user from a group.\nYou can view and manage these logs in Cloud Logging.\n\nTo learn how to enable data sharing and how to view and manage\nGoogle Workspace audit logs, see [View and manage audit logs for\nGoogle Workspace](/logging/docs/audit/configure-gsuite-audit-logs).\n\nWhat's next\n\n- Learn how to [grant, change, and revoke access for principals](/iam/docs/granting-changing-revoking-access), including Google groups.\n- Review other ways to [create groups](https://support.google.com/a/answer/33343)."]]
