Who can use which machines

Admins can use every managed machine. Everyone else sees only the machines they've been given.

• A whole email domain: on Settings, everyone who signs in with a verified address at the domain can use every managed machine.
• A person: on Access, give someone a machine or a group of machines.
• An IdP group: also on Access, give a Google or Microsoft group a machine or group, or make its members admins.

Groups

On Groups, put machines in groups such as teams or projects. A group can be given to people and have a schedule, so new machines only need adding to the group.