Glossary
Super administrator
The Google Workspace role with unrestricted rights over the organization's settings, users and data, including delegation and SSO.
A super administrator in Google Workspace can change every setting, manage every user, grant admin roles, configure SSO, approve domain-wide delegation and create mail routing and compliance rules. A compromised super admin is a tenant compromise.
New super admins are logged as GRANT_ADMIN_PRIVILEGE in the Admin log. Good practice: few super admins, not used for daily work, and security keys enforced.