Google Message Security for Google Apps Administration Guide - Manual (Page 115)

Administrators 115
Organization Policy Administrators
An organization policy administrator manages the common settings, services, and
administrative controls across the organization hierarchy. This administrator also
controls the Default User, common User Access options each user has in the
Message Center, and Early Detection Quarantine.
An organization policy administrator can create new sub-administrators. This
administrator does not manage inbound mail processing tasks.
Account and organization policy administrators manage the Message Center
settings. Giving these rights to other administrators has consequences. These
Message Center settings should be made at the organization level. Changing the
Message Center user access settings for individual users or for the Default User
disconnects these users from the org-level control, and makes your organizations
difficult to manage.
Positioning Organization Policy Authorization Records
An organization policy authorization record is usually assigned to a strategic
organization. As illustrated in the following example, the Engineering organization
has different common settings and configurations from those set up in the
Operations and Sales organizations.