Regaining Super Admin Access to Google Workspace

Sometimes districts lose access to their Google Workspace Super Admin (SA) account, often due to staff turnover or unexpected emergencies. While it may seem natural to contact Amplified IT for help, we are not authorized to reset or elevate admin credentials. However, we can guide you through the correct recovery process.

Why We Can’t Grant Access

Granting Super Admin access carries significant legal and security risks. Google has a formal lockout recovery process in place to protect your domain and ensure only verified owners can regain access. As your reseller, we must follow these protocols to avoid unauthorized access.

What You Can Do

Locate Another Super Admin

If you’ve lost access to your SA account, but your domain still has other Super Admins and CDW is your reseller, we can help by reaching out to those users on your behalf (if you're in our reseller account)

This is often the fastest and safest way to regain access. Submit a support ticket to start the process.

No Super Admins Available? Contact Google

If no Super Admins are accessible:

• Visit Recovering administrator access to your account
• Follow the steps to verify domain ownership and submit a recovery request.

This process may involve:

• Adding a DNS TXT record to your domain
• Providing proof of domain ownership
• Waiting for Google to validate and respond (typically within 3–5 business days)

Instructions for a Coworker Super Admin to Help

If another Super Admin is available, they can help you regain access in one of two ways:

Option A: Generate Backup Verification Codes

If the issue is related to 2-Step Verification (e.g., you reset your password and lost access to your phone for MFA), the assisting Super Admin should:

1. Sign in to the Admin console at https://admin.google.com.
2. Go to Directory > Users.
3. Select the locked-out user’s account.
4. Navigate to Security > 2-step verification.
5. Click Get Backup Verification Codes.
   
6. Share one of the codes securely with the user.

The user can then use the Sign in another way or Sign in with a backup code option at login.

Option B: Temporarily Disable 2-Step Verification

If backup codes don’t work or aren’t available:

1. Follow steps 1–4 above.
2. Temporarily turn off 2-step verification for the user.
3. Have the user sign in and reconfigure their 2SV settings

Caution: Be sure to re-enable 2SV after access is restored to maintain account security.