1

We need a backup superuser account. Docs say how to add an organizational admin, but that has less permissions and I am already running into permission issues. How to add a super user account? I have been on with google support for 3 hours and they have their heads...well..somewhere.

1

In my opinion, you can achieve your goal by granting Super Admin role to at least one extra account. This role is pre-built and keep in mind that:

After you assign the Super Admin role to a user, it can take up to 24 hours for the calendar privileges to be available.

If you use G Suite you can follow this guide to grant a Super Admin role.

In addition, have a look at the Creating and Managing Organizations:

Each G Suite or Cloud Identity account is associated with exactly one Organization. An Organization is associated with exactly one domain, which is set when the Organization resource is created.

When the Organization resource is created, we communicate its availability to the G Suite or Cloud Identity super admins. These super admin accounts should be used carefully because they have a lot of control over your organization and all the resources underneath it. For this reason, we do not recommend using G Suite or Cloud Identity super admin accounts for the day-to-day management of your organization. For more information about using G Suite or Cloud Identity super admin accounts in Google Cloud, see Super Administrator Account Best Practices.

EDIT Please update your question with details about your permission issues with Organizational admin, but check the documentation first:

The Organization admin, once assigned, can assign IAM roles to other users. The responsibilities of the Organization admin role are:

  • Defining IAM policies
  • Determining the structure of the Resource Hierarchy
  • Delegating responsibility over critical components such as Networking, Billing, Resource Hierarchy through IAM roles

Following the principle of least privilege, this role does not include the permission to perform other actions, such as creating folders.

Check Cloud Identity and Access Management (IAM) documentation and IAM best practice guides to find more details.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.