Google Workspace Introduces Expiring Admin Roles

Google Workspace has introduced a new feature that allows super administrators to set expiration dates for admin roles assigned to users, groups, and service accounts. This aims to prevent permanent administrator access from being left behind after temporary projects are completed.

The feature, announced on September 23, is now available to all Google Workspace customers. Super administrators can choose a preset duration or enter a custom expiration date and time for the admin role assignment.

The maximum expiration period is one year, according to Google's admin instructions. The new feature is useful for short projects, coverage during an employee's absence, and external audits, as it eliminates the need for manual cleanup tasks that can be easily missed.

Service accounts, which hold privileges for automated work without a person signing in regularly, benefit particularly from this feature. IT teams should review existing administrator access, choose the narrowest role needed, and set an end date when the work has a known finish.