Google Workspace super admins can give people in their organization access to email quarantine. Learn more about the super admin role in Prebuilt administrator roles.
We recommend these options for giving people access to email quarantine, where they can review and take action on quarantined messages:
- Option 1: Give specific users access to all quarantines: Create a custom admin role with Access Admin Quarantine admin privilege (access all messages in all quarantines), then assign the role to users in your organization. Go to detailed steps.
- Option 2: Give specific users access to different quarantines with user groups: Create a custom role with Access Restricted Quarantines admin privileges, assign the role to users, and then add users to a group. When you create or edit a quarantine, you can give the group access to that quarantine. This is a good option when you want to give certain users access to specific quarantines. For example, you might want your compliance team to review quarantined messages that contain personal or sensitive information. Go to detailed steps.
Option 1: Give individual users quarantine access
With this option, first create a custom role in your Google Admin console, then assign the role to people in your organization. This option lets people with the custom role access all messages in all quarantines.
Create a new role with the Access Admin Quarantine privilege
-
Sign in to your Google Admin console.
Sign in using an account with super administrator privileges (does not end in @gmail.com).
-
In the Admin console, go to Menu
Account
Admin roles.
-
Click Create new role.
-
Enter a name, for example Admin quarantine access, and, optionally, a description for the role and click Continue.
-
From the Privilege Name list, scroll to Gmail and check the Access Admin Quarantine box. To give users access to specific quarantines, as described in Step 2, check the Access Restricted Quarantines box instead.
-
Click Continue, then click Create Role.
Assign the role to users
-
In the Admin console, go to Menu
Directory
- Find the user in the list.
- Click the user’s name to open their account page.
- Scroll down and click Admin roles and privileges.
- Next to the custom role you just created, click Turn on
.
If you don’t see Turn on
- (Optional) To restrict the admin's role to a specific organizational unit, next to All organizational units, click Edit
, select the organizational units, and click Done.
If you don’t see Edit
- Click Save.
To assign multiple people the new role at one time:
-
In the Admin console, go to Menu
- Point to the custom role you just created and on the right, click Assign admin.
Tip: You can switch between admins you’re assigning to the role and the privileges. At the top, click Admins or Privileges.
- Click Assign members.
- Enter the first few letters of the user's email address (not username) and select the user’s address from the options.
You can assign a role to up to 20 users at a time.
- Click Assign Role.
- (Optional) To restrict the admin's role to a specific organizational unit, next to All organizational units, click Edit
If you don’t see Edit
Option 2: Give user groups quarantine access
To give different users access to different quarantines, create a custom role with Access Restricted Quarantines privileges, assign the role to users, and then place users in a group. When you create or edit a quarantine, you can give specified user groups access to the quarantine.
Create a new role with the Access Restricted Quarantines privilege
-
Sign in to your Google Admin console.
Sign in using an account with super administrator privileges (does not end in @gmail.com).
-
In the Admin console, go to Menu
-
Click Create new role.
-
Enter a name, for example Admin quarantine access, and, optionally, a description for the role and click Continue.
-
From the Privilege Name list, scroll to Gmail and check the Access restricted quarantines box.
-
Click Continue, then click Create Role.
Assign the role to users
-
In the Admin console, go to Menu
- Find the user in the list.
- Click the user’s name to open their account page.
- Scroll down and click Admin roles and privileges.
- Next to the custom role you just created, click Turn on
If you don’t see Turn on
- (Optional) To restrict the admin's role to a specific organizational unit, next to All organizational units, click Edit
If you don’t see Edit
- Click Save.
To assign multiple people the new role at one time:
-
In the Admin console, go to Menu
- Point to the custom role you just created and on the right, click Assign admin.
Tip: You can switch between admins you’re assigning to the role and the privileges. At the top, click Admins or Privileges.
- Click Assign members.
- Enter the first few letters of the user's email address (not username) and select the user’s address from the options.
You can assign a role to up to 20 users at a time.
- Click Assign Role.
- (Optional) To restrict the admin's role to a specific organizational unit, next to All organizational units, click Edit
If you don’t see Edit
Create a group that will get access to specific quarantines
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
- Enter a name, email address, and description for the group.
- For the Access Level, select Restricted.
- Click Create.
For detailed information about creating new groups, visit Create a group in your organization.
Add users to the group
- Make sure the users are assigned the new role with Access restricted quarantines privileges.
- Click Add members
.
- Click Add members.
- For users or groups, enter the first few characters of the email address and select it.
- For service accounts, enter the entire email address.
- Repeat the previous steps as needed.
- Click Add To Group.
To add multiple people to the group at once, use one of these methods:
Instruct your users how to access email quarantine
After you give users access to email quarantine, they can review and take action on messages. Share these steps with your users so they can start managing quarantined messages:
- Sign into your Google Workspace account.
- Go to https://email-quarantine.google.com/adminreview.
- Review and take action to quarantined messages. For detailed steps, visit manage quarantined messages.
