Google Message Security for Google Apps Administration Guide - Manual (Page 123)

Administrators 123
You may also be able to choose between “Read” and “Modify” since you might
want to provide visibility into an organization (“User Settings”) but you may not
want that administrator to modify those settings.
All Standard Privileges
Choosing this option provides visibility or modification privileges for all data at an
organization and below. This is the most appropriate role for assigning a new
“super” administrator at a newly created sub-organization. For detailed
information on each privilege in this category, see The Message Security
Authorization Reference, “All Standard Privileges”.
Help Desk
The Help Desk section describes privileges to basic user support functions in the
User tab. To provide full access to Help Desk functions, administrators need
authority over User Settings, and some privileges in Organization Management.
These can be selected individually from the authorization record. For detailed
information for each Help Desk privilege, see The Message Security
Authorization Reference, “All Standard Privileges” chapter’s Help Desk section.
User Settings
All privileges related to user settings. For detailed information for each User
Settings privilege, see The Message Security Authorization Reference, “All
Standard Privileges” chapter’s User Settings section.
Help Desk Enables the basic user suspend, reset, and
quarantine support functions.
Suspend User Turn off services for a user.
Reset User Activate services for a suspended user and revert an
active user to the Default User settings.
View Quarantine Search, view, and deliver the messages currently
held in a user's Message Center.
User Settings Enables read and modify privileges to a large set of
common user policies.
Traffic Limits Set the daily number of messages and maximum
size messages a user can receive before email will
bounce back to the sender.
Change Address Change a user's address (the Message Center
account and all related services are preserved)
Add Users If your product has this configuration, you can add
new users to an organization.