Limiting a GAFE User Admin to a particular sub-organization

[dke...@district100.com]

Am curious to know if any other GAFE admins have had success with limiting a User Administrator to a sub-organization (vs. giving them Admin rights over all users).  I'd like to give a particular staff member the rights to manage all students within their school, but not the rights to manage the staff in their school.  We've already structured Google Apps such that Staff and Students are in completely separate hierarchical sub-organizations.  The problem is that the administrator toolset seems to give blanket rights to all users regardless of sub-organization, rather than allowing me to target particular sub-orgs,

I've looked a bit at creating custom administrator roles, but it doesn't give me the granularity to restrict these Administrative rights to a particular sub-organization, either.  

I should mention that I'm sure that top-tier (read: top-dollar) capabilities exist within FlashPanel or Hapara Teacher's Desktop for this... but I'm hoping to find a way this can be done with the base GAFE toolset.   We've looked at the aforementioned tools and obtained price quotes for each of them.  We presently don't have the budget to invest in either of them.

Thanks,  David

---

Pursuant to Illinois’ public records law, this written communication may constitute a public record which is available to the public and media upon request.  Please be advised that this email communication may be subject to public disclosure.

[Ben Dahlin]

When I go into admin roles, there is the option to apply the persmissons onto OU's.  See photo below.

​

Ben Dahlin

Technology Coordinator

Mahnomen ISD #432

Go Indians!

www.mahnomen.k12.mn.us

--
--
You received this message because you are subscribed to the Google
Groups "Google Apps K12 Technical Forum" group.
To post to this group, send email to k12ap...@googlegroups.com
To unsubscribe from this group, send email to
k12appstech...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/k12appstech?hl=en?hl=en

---
You received this message because you are subscribed to the Google Groups "Google Apps K12 Technical Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to k12appstech...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[dke...@district100.com]

Oooh... I'm going to check that out.  Thanks! 

David

[Google Apps K12 Technical Forum]

Wow.  That rocks, Ben.  When I was in the Administrative Roles screen, I was trying to provision a new type of role, not provisioning a user with the admin role itself (custom or native).  And all the rights I saw were blanketed.  I had no idea that you could limit the role at the point of assignment.  This is great.  Thanks!  Consider this one solved.  

David

[Ben Dahlin]

Good to hear!  

Ben Dahlin

Technology Coordinator

Mahnomen ISD #432

Go Indians!

www.mahnomen.k12.mn.us

On Wed, Oct 29, 2014 at 11:33 AM, Google Apps K12 Technical Forum <k12ap...@googlegroups.com> wrote:

Wow.  That rocks, Ben.  When I was in the Administrative Roles screen, I was trying to provision a new type of role, not provisioning a user with the admin role itself (custom or native).  And all the rights I saw were blanketed.  I had no idea that you could limit the role at the point of assignment.  This is great.  Thanks!  Consider this one solved.  

David