Overview

A Super Admin in Google Workspace has the highest level of permissions and control over an organization's entire Google Workspace environment.

Super admins can:

• Manage all users, groups, and organizational units

• Control all services and settings (Gmail, Drive, Calendar, etc.)

• Access and manage all user data

• Reset passwords for any user

• Perform sensitive security and audit-related actions

• Contact Google Support directly

What if you, the super admin, forgets your password? How does a super admin get help?

In this lab you learn some best practices for super admin account recovery.

Objectives

You do the following in the Google Workspace Admin Console:

• Enable super admin account recovery

• Add recovery options to your super admin account

• Reset your password using a recovery email

Prerequisites

For this lab you need an email account you can access outside of this lab, like your personal email. This will be your recovery email account for the lab. You will send and retrieve a recovery code to verify your super admin account.

Familiarity with basic Google Workspace terminology is recommended to your learning experience.

Setup and requirements

Before you click the Start Lab button

Read these instructions. Labs are timed and you cannot pause them. The timer, which starts when you click Start Lab, shows how long Google Cloud resources are made available to you.

This hands-on lab lets you do the lab activities in a real cloud environment, not in a simulation or demo environment. It does so by giving you new, temporary credentials you use to sign in and access Google Cloud for the duration of the lab.

To complete this lab, you need:

• Access to a standard internet browser (Chrome browser recommended).

Note: Use an Incognito (recommended) or private browser window to run this lab. This prevents conflicts between your personal account and the student account, which may cause extra charges incurred to your personal account.

• Time to complete the lab—remember, once you start, you cannot pause a lab.

Note: Use only the student account for this lab. If you use a different Google Cloud account, you may incur charges to that account.

Start your lab

When you are ready, click Start Lab in the upper left.

Sign in to the Google Workspace Admin Console

To access the Google Workspace Admin Console, you must find your credentials and then sign in.

Find your lab's User Email and Password

To access the resources and console for this lab, locate the User Email and Password in the Lab Details panel. This panel is on the left or at the top, depending on the width of the browser window. Use these credentials to log in to the Google Workspace Admin Console.

If your lab requires other resource identifiers or connection-related information, they appear on this panel as well.

Sign in to the Admin Console

1. Click Open Google Workspace Admin Console.

Tip: Open the tabs in separate windows, side-by-side.

Note: If you see the Verify your account dialog:

• Click Next.

• Click the prefilled user.

• Click Use another account.

2. On the Sign in page, log in using the User Email and Password details provided.

3. When prompted, click I understand and ACCEPT TERMS OF SERVICE to accept all terms and conditions.

After a few seconds, the Admin Console opens.

4. Right-click VERIFY DOMAIN in either the yellow box at the top or the red box in the Domains card, and select Open link in new tab.

   Note: To complete this step in a real-life scenario, you'd need to add an actual DNS record.

5. Click the new tab, called Domain setup, to complete the Google Workspace domain verification steps.

6. On the Let's set up your domain page, click Get Started.

7. Select the My domain uses a different host checkbox and then click Continue.

8. At the bottom of the Add verification code page, select the Come back here and confirm once you have updated the code on your domain host checkbox, and then click Confirm.

9. Wait until it says Your domain is verified! and then close the Domain setup tab.

   Note: Do not click Activate Gmail.

10. Return to the Admin Console tab and refresh the page.

Task 1. View super admin recovery settings

View the recovery options available in Google Workspace and the default settings of user passwords.

1. In the Google Admin console, click the Security card. You may have to scroll down and click Show more to see the Security card.

2. Scroll down and click to expand the Account Recovery section. This is where you configure account recovery policies for the super admin and users.

By default, account recovery is ON for a super admin and Off for users.

Task 2. Add recovery information to your administrator account

In real life, when you sign up for a Workspace account, you supply email account recovery information. This is helpful in case you lose access to your account - like forgetting your email password, or your device is lost or compromised.

Since the administrator account was created for you in the training domain, in this section you will add your email recovery information.

1. Open your Workspace account.

2. Click Security either in the left panel or on the top depending on the browser width.

Note: The Security option is on either the left panel or the top menu bar, depending on the width of your browser window.

3. Scroll down to the How you sign in to Google section.

4. Click Recovery email.

5. When prompted, enter your password from the Lab Details panel, and then click Next.

6. Enter your email address, and then click NEXT.

At this point, Google Sends a verification code to your recovery email address.

7. Go to the recovery email account and open the message from Google that provides your verification code.

8. Copy the verification code into the Verification code field and click Verify.

Your recovery email address is verified.

9. Close the Recovery email browser tab.

Click Check my progress to verify the objective.

Add recovery information to your administrator account

Task 3. Recover your administrator account

Imagine, that you have been on vacation for two weeks and have forgotten your password. How do you log in? In this next section, you sign out of your account, then go through the steps of recoving your account.

1. In your Workspace account, click the user avatar at the top right and click Sign out to sign out of the account.

2. Sign in using the User Email provided in the Lab Details pane, but when prompted for your password, click the Forgot password link.

3. Google emails you a verification code.

4. Go to your recovery email account and find the message from Google with the verification code

5. Enter the code in the Account recovery screen, then click Next.

You are now asked to reset your password.

6. Enter a new password, confirm the password, for example luv2learn, then click Save password.

7. Click Continue to return to the Admin console.

You have successfully recovered your super admin account.

Click Check my progress to verify the objective.

Recover your administrator account

---

Solution of Lab