GSuite for Education: Giving teacher access to password resets for Google Accounts

[Ditto]

We're thinking of giving all teachers the ability to reset Google account passwords to enable to them to immediately resolve the in classroom 'I've forgotten my password' scenario for their pupils. We'd probably create a custom admin role restricted to just that. Apart from the need for a small amount of training on the steps can anyone highlight any downsides to consider. I guess opening up the Admin console awareness to so many is a slight concern, but it will be very limited to password resets for the pupil domains. I guess if there is a nifty app that provides a simple interface to do the same, that might be better, but it'll have to be cost free. Or perhaps if this was a function within google classroom, that would be ideal, but I could not see that it was an option.

[Stormborn15]

I have given teachers help desk user access to enable student password changes and they are limited to their year groups - works very well as they can’t change anything else - definitely helps with faster password resets

[DavidYoung]

I have used it but seen this add on which looks like it would make it easier for your teachers: http://cloudlab.newvisions.org/add-ons/opensesame

[FN-GM]

Have you considered syncing passwords with Active Directory? It will redcure the number of password issues.

[derf]

Why not use gSuite with SAML and have SSO for your gSuite domain, and handle password resets only on AD?

[Ditto]

I have used it but seen this add on which looks like it would make it easier for your teachers: openSesame - CloudLab

Thanks for this - I have not found anything else yet. There is very limited number of reviews here so I'd be trail-blazing! It's a possibility. I have just tried out the a new restricted admin role. Whilst I can restrict which OU it applies to (a pupils one), the administrator can see the whole OU structure and that's not something I really want to advertise - anyone know how to block it to show only the OU that the admin teacher can work on?

[Ditto]

Yes, but we are not ready just yet. We're, I think, a little unusual in as much that we started with Google accounts and ran for 3 years with just those. AD was only brought in this year, so perhaps the opposite way around to many? Currently we only have a handful of GCSE Computing pupils with AD accounts, so for now we need a GSuite.solution. In fact thinking about this, currently for primary there is no windows infrastructure, purely Chromebooks, so we'd probably need this longer term too.

 

- - - Updated - - -

 

Have you considered syncing passwords with Active Directory? It will redcure the number of password issues.

Yes, but we are not ready just yet. We're, I think, a little unusual in as much that we started with Google accounts and ran for 3 years with just those. AD was only brought in this year, so perhaps the opposite way around to many? Currently we only have a handful of GCSE Computing pupils with AD accounts, so for now we need a GSuite.solution. In fact thinking about this, currently for primary there is no windows infrastructure, purely Chromebooks, so we'd probably need this longer term too.

[Ditto]

Why not use gSuite with SAML and have SSO for your gSuite domain, and handle password resets only on AD?

See reply to @FN-GM.

[Ditto]

Whilst thinking about this, it occurs to me that my original thought about needing this in Classroom is probably the best solution. I'll put together a google feature request/idea and submit. Let me know if you want a link to support the feature request.