Google Message Security for Google Apps Administration Guide - Manual (Page 136)

136 Message Security for Google Apps Administration Guide
Most User Access changes should be made for organizations. It is possible to
configure User Access by individual users, but this makes administration more
difficult. Except when disabling Message Center access for a specific user, use
the org level User Access page, not the user level page.
You can also enable and disable the Message Center for several existing users at
once using a Batch file command.
Where User Access Is Configured
You manage user access to the Message Center, by setting User Access
permissions. These permissions are available both for an organization and for
individual users, but settings should typically be made in certain locations, as
follows:
• Organization Here is where you set permissions for whether all users in an
org can modify their own spam filters, turn filters on or off, manage personal
sender lists, add user aliases, and more. These permissions apply not just for
existing users, but for new users added to the org, as well.
• Default User Here, you should make sure Message Center access is also
enabled at the user-level—whether or not you want users to have it. This
ensures that new users added to an org have Message Center access, unless
you disable access for specific users. You should ignore other User Access
permission for a Default User, as they don’t apply (new users get these
permissions from the org).
• Specific User Here, you can view a user’s current Message Center
permissions. Optionally, you can disable access for the user temporarily
(rare), or override org-level permissions. Changing User Access for a specific
user is not recommended, since it interferes with your ability to maintain the
same Message Center policies across an org).