As more schools are utilizing Chromebooks and GSuite, schools are finding that it is helpful to have multiple staff members on campus that have password reset rights in the GSuite console.
There are several levels of administrative roles built into the console, and the ability to quickly develop custom roles if you want staff to only have access to specific tools and services. When setting up staff to reset student passwords, we strongly recommend drilling down into each level of the admin role you are considering assigning, or making a custom role to limit access to unnecessary tools.
For example, some of the built-in admin roles have access to the email audit log; I may want the library associate in each building to be able to reset passwords for students, but do not want to burden him/her with looking up messages lost to the spam filter.
Learn more about pre-built administrative roles and custom roles in GSuite Support.
Schools can also turn on password recovery for staff, so they can generate their own password reset when needed. GSuite does not allow this feature to be utilized for users under age 18.