Ensure between two and four super administrators exist

VisokaNivo 1Ručni pregledgoogle-workspace

Opis

Super admins have unrestricted control; too few risks lock-out, too many widens the attack surface. Admin console only; reported as manual.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Admin console > Account > Admin roles > Super Admin > Admins: confirm 2 to 4 accounts are assigned, each a dedicated admin account [not used for daily email], and that other administrators hold least-privilege custom roles instead.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Admin console: Remove the Super Admin role from excess accounts and assign scoped prebuilt or custom admin roles.

Svojstva

Operativni sistemi: Bilo koji
Oznake: google-workspaceadmin-roles
Referenca: CIS Google Workspace Foundations Benchmark v1.4.0 - Administrator roles / Super admin accounts (verify section number for your release)