Google Apps: Is it possible to override the super administrator's access and assign them to a different account before the terminated employee compromises data?

Yes.

You need another super admin to do this.
Any super admin can lower the security role of another super admin.

In the case where you have a disgruntled super admin, who is the only super admin, you need to be careful and tactful. Or you can just demand that another super user be created. In the US it's a felony to tamper with a company's data or lock it up. Use that.  Google will have records of what happened if you need to go to court.

Not going to work?
Ok, you will need to be able to verify ownership of your domain with google to get your administrator password reset with the new credentials sent to another email address. You'll need access to the domain hosting account and need th know how to set up DNS records. This process can take up to 48 hours to complete once initiated.

Here's a video explaining the process:
http://www.youtube.com/watch?v=0…
In the case of an admin that needs to be removed or is changing positions, you can simply lower their security role in the admin panel using another account with the Super Admin role.  This will allow the user to continue using their account but remove their administrator ability. Their Document access should also be considered before using this as a solution.

You can also suspend an account if there is sensitive/proprietary information that the account can access via email, docs/drive etc.  Nobody can log into a suspended account.

In the case of an investigation, the user's password can be changed so that investigators can access it and the user cannot.

Changing the password is a good solution if it's difficult to determine what documents they have access to.  Logging into their account and looking at their docs list will give you a clear picture so that access can be removed before giving the account back to the user.

If a Google Apps for Business domain has been set-up with a particular superuser account, is it possible to override their super administrator privs and assign them to a different account before the terminated employee compromises our data?

Leave a Reply