u/OkArt331

Can super admins generate their own backup codes with 2SV set as key only?

Can a super admin generate the 8-digit backup codes for their own account when 2SV enforcement is set to only passkey/security key? If someone could please confirm this and/or point me to where in Google's documentation it says this is possible I'd be so grateful. I believed they could until Gemini explicitly many times today said no they can't and provided documentation that suggests it may be true. Unfortunately I cannot test this myself. We just want to store backup codes for our super admin accounts in case we lose keys, and be able to regenerate them if needed.

There's also a setting in the admin console 2SV section that suggests they cannot be generated for the purpose of storing long-term if security key login is enforced. It's called "2-Step Verification policy suspension grace period", and suggests generated codes only work for a limited time.

reddit.com
u/OkArt331 — 1 day ago
▲ 1 r/gsuite

Can a super admin generate their own 8-digit backup codes when 2SV enforcement is set to only passkey/security key?

Just the question in the title. If someone could please confirm this and/or point me to where in Google's documentation it says this is possible I'd be so grateful. I believed they could until Gemini explicitly many times today said no they can't and provided documentation that suggests it may be true. Unfortunately I cannot test this myself. We just want to store backup codes for our super admin accounts in case we lose keys, and be able to regenerate them if needed.

There's also a setting in the admin console 2SV section that suggests they cannot be generated for the purpose of storing long-term if security key login is enforced. It's called "2-Step Verification policy suspension grace period", and suggests generated codes only work for a limited time.

reddit.com
u/OkArt331 — 3 days ago
▲ 1 r/gsuite

Looking at the Passwd.team Marketplace app for a small org since we’re already fully on Google Workspace and its model aligns with that, but I haven’t found any independent audits or pentest results for it.

For those who’ve evaluated similar tools:

Is that a hard no, or something you’d weigh against the architecture? It's the perfectly convenient tool, but I don't know if it should be trusted. Just trying to sanity-check the risk here.

reddit.com
u/OkArt331 — 9 days ago
▲ 2 r/googleworkspace+1 crossposts

Folks, while Google is on an AI bender, the basic and foundational component of Workspace permission management, Google Groups, remains a total mess, and today I discovered something ludicrous that I'm hoping someone has found a workaround for: Turns out if you want *some* members of a group, but not all, to be able to add or remove group members, they MUST also have permission to change group settings in the Groups UI, because they must be group managers. There is seemingly no way around this. Last year Google removed the ability to have custom roles control who can manage members, so either all members can or only managers or owners can, and managers or owners can *always* change group settings. I know you can lock down some setting changes in the admin console, but there are some that are critical to our setup that remain open. We need managers to be able to update group membership but NOT change these settings. Anyone know how we can accomplish this?

reddit.com
u/OkArt331 — 14 days ago

Does anyone know of a handheld mirror one can use to shave their head with? I mean, without the use of a wall mirror. A product one could hold and shave your head outside with, no stand or hook to hold it up. I use an electric razor, so precision isn't an absolute necessity, but just something that shows me the top and back of my head. I once saw a tri-fold telescoping pocket mirror on Amazon, but it is now gone :/

reddit.com
u/OkArt331 — 18 days ago

We have several forms we built and need to give folks on our team the ability to work on them regularly, but we need to store backups and can't give them access to the backups. Is there any way to do this? Options I've already looked into:

-Form collaboration feature: Won't work for us because our people need to add integrations to forms, and only the form owner can do this.

-Use the Jotform server backup feature: Wouldn't work, gave us an error and support couldn't help.

-Some way to export a form off the platform: Would be ideal but doesn't seem to exist.

-Jotform Enterprise: 20 times the cost of other platforms' plans with multi-user capability. We can't afford it.

-Asking Jotform support to copy our forms to another account: I've heard you can do this but this would be quite a nuisance because we need regular backups.

Has anyone found a way to do this?

reddit.com
u/OkArt331 — 22 days ago