Google Message Security for Google Apps Administration Guide User Manual
Page 92
92
Message Security for Google Apps Administration Guide
Create Administrators and Manage Authorization Records
When you create an administrator:
•
Check your authorization record -- Your authorization record needs the Add
Users, Assign Authority, and Assign Peer Authority (optional) privileges:
•
Add Users -- If the new administrator is not yet a user in the system, you
must have full Add Users privileges for the organization where you are
adding the new administrator. For more information, see “All Standard Privileges” chapter’s
AddUsers privilege.
•
Assign Authority -- To create new authorization records for users in your
organization and sub-organizations, and to view or edit existing
authorization records for users in your organization and sub-
organizations, you must have full Assign Authority privileges. For more
information, see “All
Standard Privileges” chapter’s Assign Authority privilege.
•
Assign Peer Authority -- To create a peer administrator record in the same
organization as one of your administrator records, you must have the
+Modify Assign Peer Authority privilege. For more information, see “All Standard Privileges”
chapter’s Assign Peer Authority privilege.
For further information on viewing your authorization record, see “Viewing
and Editing Authorization Records” on page 94. If you, as the managing
administrator, do not have these privileges, contact your account
administrator.
•
Create a user -- The new administrator must be an existing user in the
system.
•
Define the new administrator -- Deciding what type of administrator to
create is a critical preliminary step before configuring the new administrator. It
is common for one administrator to have several administrative jobs. This
administrator’s configuration is a combination of the administrator types
described in this chapter. For a chart comparing different administrator types,
see “Comparing Types of Administrators” on page 96.
•
Decide where to place the authorization records -- Once the administrator
type is determined, decide what part of your organization hierarchy the new
administrator will manage. This is where you assign the administrator’s
authorization records. In some instances, an administrator has several
records assigned to different organizations. See “Types of Administrators” on
page 96.
•
Create an administrator -- Create the new administrator and configure the
authorization record. Follow the instructions in “Creating an Administrator” on
page 93. When you are ready to populate the administrator’s authorization
record, see “Types of Administrators” on page 96 for the recommended
privilege settings for each type of administrator.
•
If needed, customize the authorization record -- Use the detailed reference
information for each privilege to customize your administrator’s settings. See
The Message Security Authorization Reference, “Message Archiving
Privileges”“All Standard Privileges”, and “Inbound Mail Processing” chapters.