Remediation

From Google Admin Console

1. Open the Google Admin Console at https://admin.google.com.
2. Go to Directory > Users.
3. Create a dedicated Super Admin account.
4. Configure strong authentication for the dedicated account, such as 2-Step Verification with a hardware security key.
5. Go to Account > Admin roles.
6. Open the Super Admin role and assign it to the dedicated account.
7. Remove individual user accounts from the Super Admin role after confirming the dedicated account works as expected.