Google Message Security for Google Apps Administration Guide - Manual (Page 141)

The Message Center 141
Sender Lists Read only Users can see any Approved and Blocked
Senders, and Approved Mailing Lists, defined for them
via their user-level settings in the Administration
Console, but they can’t add to these lists. (Users don’t
see any org-level senders at the Message Center.)
Use this setting if you want individual users to have their
own approved/blocked senders and mailing lists, but you
don’t want them to manage the lists themselves. They
can send you addresses to enter for them, via the
Administration Console. They can then view their
personal lists at the Message Center.
Read / Modify Users can also add their own user-level
Approved or Blocked senders, or Approved Mailing Lists.
Both unchecked Users can neither see nor change any
of these lists.
Virus Settings Read only Users can see their virus status (On/Off), and
their Virus Notification interval, but not change these
settings.
Read / Modify Users can also turn virus blocking on or
off (not recommended except for advanced users), and
set their own Virus Notification interval.
Both unchecked Users can neither see nor change
their virus blocking settings.
Pending
Quarantine Read (default) Users can view messages in the Pending
Quarantine in the Message Center, but they can’t deliver
the messages to their inboxes.
Modify Users can deliver messages in the Pending
Quarantine to their inboxes. Messages in this quarantine
may contain a virus or other threat. (If you are archiving
messages for users, this setting has no effect, which
prevents archiving of messages with viruses.)
Both Unchecked The Pending tab in the Message
Center is not visible to the users.
Account Settings Checks or unchecks all permissions listed below, acting
as a shortcut to enabling or disabling account settings
permissions at once.
If all check boxes under Account Settings are cleared,
users can’t view or modify their account settings
(passwords or aliases).
User Access Permissions