Google Message Security for Google Apps Administration Guide - Manual (Page 88)

88 Message Security for Google Apps Administration Guide
Authority Privilege Propagation
In an organization hierarchy, administrator privileges are propagated down the
organizational tree. The following example illustrates how administrative authority
affects management privileges in the organization.
The Jumbo Inc activation administrator maintains authority over both the New
York and Jumbo Inc Users organizations, and all sub-organizations.
Admin B is assigned an authorization record and privileges for the New York
organization. Admin B therefore has privileges to configure and manage the
Customer Service and Systems organizations. Admin B also has the same
privileges over any sub-organizations of Customer Service and Systems.
Since Admin B has no authorization record in the Jumbo Inc Users organization,
Admin B cannot view or modify any Jumbo Inc Users sub-organizations.
Limiting Authority
An administrator is limited to managing the organization where he or she has
authority, and can manage any sub-organizations as well. The specific privileges
assigned to that administrator are inherited down the hierarchy unless another
authorization record changing that authority is added to a sub-organization.
An administrator’s access to an organization is determined by the closest
authorization record in the organization hierarchy, or in a direct parent of the
organization. An authorization record created at a peer or lower level takes
precedence over an authorization record at a higher level.