Skip to main content
Org Management OU Permissions lets Super Users assign staff account access based on organizational unit membership. Super Users can restrict staff who have access to User Management (such as Site Admins, Principals, and custom roles) so that each staff member can only see and manage user accounts within their assigned OUs in GoGuardian Org Management. Example: A Super User can create a custom RBAC role named “Principal” and configure Org Management OU Permissions so that users in that role can only see and manage teachers at their own school sites.

Supported Configurations

Org Management OU Permissions supports mixed integration (rostering) and OU source combinations. Supported pairings:
  • Google Admin Console OU source + Google Teacher Provisioning
  • Clever OU source + Clever Integration
  • ClassLink OU source + ClassLink Integration
  • Google Admin Console OU source + Clever Integration
  • Google Admin Console OU source + ClassLink Integration
OUPerms2.png

Fields Added to User Management

Enabling Org Management OU Permissions adds two fields to User Management. Assigned Org Unit represents a user’s assigned OU position in the district’s directory. This value is populated from the selected OU source (Google Admin Console, Clever, ClassLink, or another integration) and can be updated by moving users to a new OU and resyncing the OU source. Organizational Units Permissions reflects a staff member’s assigned OU access. This controls which user accounts the staff member can see in User Management. Accounts outside a staff member’s assigned OU permissions are not visible to that user. Supported Configurations
This field shows “N/A” for a user who does not belong to an OU or whose OU is not currently being synced.

Key Behaviors

  • Super Users always retain full visibility in User Management, regardless of OU permission settings.
  • Only Super Users can make changes to OU permissions.
  • This feature is opt-in. It takes effect only after a Super User explicitly restricts a staff member’s Assigned Org Unit permissions.
  • Assigned Org Unit permissions can be updated in bulk via CSV file upload using the org_management_ou column header.
Use the bulk CSV upload to update OU permissions for large groups of staff at once, rather than editing each account individually.
Last modified on July 15, 2026