Super Admin

While installing the Check Point Cloud Security app, a new Super Admin user account is created in your Google Admin Console.

The Super Admin user has an email address in the cloud-sec-av@[domain] format and is sometimes referred to as the Check Point Service User.

This user requires a Gmail license. For more details about the Super Admin role, see Pre-built administrator roles.

What is the Super Admin User Used For?

Email Security uses Super Admin user to perform tasks that cannot be accomplished with the Google APIs.

Email Security uses Super Admin user to do these tasks:

To connect with Google Workspace and create User Groups, Host, Inbound Gateway, SMTP Relay Service, and Content Compliance Rules.
To enable different artifacts that allow DLP inspection of outgoing emails in Protect (Inline) policy mode.
To do maintenance activities from time to time, primarily to optimize support case handling.
To take actions on files uploaded to Google Drive that do not have an owner. For more information, see Google Drive Permissions Changes.
To support new features in the future.

Super Admin Security

The password of the Super Admin contains 43 random characters, a mix of lower case letters, upper case letters, and digits. The password is safely stored in AWS Key Management Service (AWS KMS).

Also, Check Point recommends to enable Multi-Factor Authentication (MFA) to enhance security for this account.