Google Message Security for Google Apps Administration Guide - Manual (Page 99)

Administrators 99
In the following example, fully authorized email administrators are assigned to
organizations below the account level. These administrators have the same
privileges as an account administrator. In the example, the Jumbo Inc account
administrator has access to the Western and Eastern Divisions. The Western
Division and Eastern Division regional administrators manage their respective
divisions.
Recommended Account Administrator Privilege Settings
For detailed information for each privilege, see The Message Security
Authorization Reference.
Account Administrator Privilege Read /Modify Notes
All Standard Privileges
Help Desk
Suspend User
Reset User
View Quarantine
User Settings
Traffic Limits
Change Address
Add Users