Google Message Security for Google Apps Administration Guide - Manual (Page 96)

96 Message Security for Google Apps Administration Guide
Types of Administrators
To simplify the range of possible administrator configurations, this section
describes the common types of administrators, where to place their authorization
records, and recommended privilege settings. Use these descriptions as a guide
that you can customize. It is common for an administrator’s job to be composed of
several administrative types.
The administrator types are:
• Account Administrators -- The top-level, fully authorized email administrator
• Monitor Administrators -- Observe the activity and status of the hierarchy
• Compliance Officers and Security Administrators -- Prevent illegal and
unethical conduct across the account hierarchy
• Archive Administrators -- This includes the Archive Security Administrator,
Archive Search, Audit, Retention, and Investigator Security administrators for
the account. (Message Archiving is available optionally for an additional fee.)
• Organization Policy Administrators -- Manage common settings and services
• User Administrators -- Manage the day-to-day user help desk needs
Comparing Types of Administrators
Account
Admin Monitor
Admin
Compliance,
Security
Admins
Archive
Admins
Org
Policy
Admin
User
Admin
Suspend and
Reset Users read/
modify
read/
modify
Search User
Quarantines read/
modify
read/
modify
read read/
modify
Move Users
read/
modify
read/
modify
Message
Center
Settings read/
modify
read read read/
modify
read/
modify
Create an
Administrator read/
modify
read/
modify
Add, Delete
Organizations read/
modify
read/
modify
Generate and
View Reports read/
modify
read read modify read/
modify
read
Notifications
org&user:
read/
modify
notifications:
read/modify
notify:
read/
modify
users:
read/
modify