ADMIN-013: Super Admin Count
- Platform
- Google Workspace
- Category
- Admin & User Management
- Severity
- High
- Zero Trust pillar
- Governance (weight 1)
- Golden fixtures
- 3
- Branch coverage
- Observed: fixtures prove the verdicts they exercise
- Provenance
- baseline
What it checks
The number of super admin accounts should be between 2 and 4. Too few creates a single point of failure; too many increases the attack surface
Recommended value
2-4 super admin accounts
Remediation
Admin Console > Directory > Users > Filter by super admin role > Adjust count to 2-4 by removing unnecessary super admins or adding a backup
Fixture-proven verdicts
Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.
| Scenario | Expected verdict |
|---|---|
| clean | PASS |
| known-bad | FAIL |
| throttled | Not Assessed |
Framework mappings
- NIST SP 800-53
- AC-6(1), AC-2(7)
- CIS Benchmark
- 4.13
- MITRE ATT&CK
- T1078.004