Google Message Security for Google Apps Administration Guide - Manual (Page 91)

Administrators 91
1. Examples of initial inheritance and a sub-organization record change:
a. The top-level authorization record assigned to the New York organization
has the read-only privilege for managing spam filters.
b. When created, the Customer Service and Systems authorization records
inherit the New York authorization setting. Both have read-only privileges
for managing spam filters.
c. In the Systems record, the account administrator enables the Spam
Filters modify privilege. At this point, the Spam Filters modify privilege is
no longer updated if either parent organization’s record changes.
2. Example of the modify privilege in the Systems record not updating:
a. In the top-level New Your authorization record, the account administrator
turns off the Spam Filters privileges.
b. In the Customer Service authorization record, the Spam Filters settings
are automatically updated to the New York record changes.
c. In the Systems authorization record, the Spam Filters read-only privilege
automatically updates. Since the modify privilege was changed after the
initial settings, it does not change.
3. Example of changing a record that updates sub-organizations:
a. The top-level New York organization does not change in this example.
b. In the Customer Service record, the administrator changes the Spam
Filters privilege to read-only. At this point, this read privilege is no longer
updated when the parent New York record changes.
c. In the Systems record, a sub-organization, the Spam Filters privilege
updates to read-only since the parent’s setting has changed. The modify
privilege, changed in step 1, does not change.