Google Message Security for Google Apps Administration Guide - Manual (Page 98)

98 Message Security for Google Apps Administration Guide
Positioning Account Authorization Records
The account administrator’s authorization record is assigned to the account
organization. This administrator has global management privileges across the
whole account hierarchy. And, in turn, this administrator creates additional
administrators to manage either peer or sub organization levels. The following
example illustrates how the account administrator for Jumbo Inc has
administrative privileges for every level of the hierarchy.