Google Message Security for Google Apps Administration Guide - Manual (Page 102)

102 Message Security for Google Apps Administration Guide
Positioning Monitor Authorization Records
In large accounts, an authorization record for monitor administrators is assigned
to the account organization. In addition, large sub-organizations may need
monitor administrators. In the following example, the administrator assigned to the
Jumbo Inc Account Administrators monitors the status of the whole account
hierarchy. The division-level administrators monitor their specific sub-
organizations. On occasion, a monitor administrator is assigned to a lower level
organization such as the Operations monitor in the following example. In this
case, the Operations monitor could have less read-only access than the monitor
administrators assigned to higher-level organizations. The Operations monitor’s
authorization record would grant fewer privileges based upon your business
needs.
Recommended Monitor Administrator Privilege Settings
For detailed information for each privilege, see The Message Security
Authorization Reference.
Monitor Administrator Privilege Read /Modify Notes
All Standard Privileges
Help Desk
Suspend User
Reset User
View Quarantine Low level monitor