Stop Inviting Hackers In: How to Create a Free Google Workspace Super Admin

When you first set up Google Workspace for your business, it’s easy to assume your daily work email should be the “Super Admin” account. It makes sense on paper, but in reality, you’re sitting on a security timebomb.

In this guide, we’re breaking down why using your daily inbox as an admin is a massive risk, and how you can set up a completely free, dedicated Super Admin account in under three minutes using a built-in Google feature called Cloud Identity Free.

Why Your Current Setup is a “Frustration Tax” Waiting to Happen

When we start a business, we wear all the hats. It’s highly likely your main daily email (like yourname@yourdomain.com.au) has full Super Admin privileges.

Here’s the problem: you use that email to sign up for newsletters, click tracking links, and communicate with the outside world. If you accidentally fall for a clever phishing scam or your password gets compromised, the hackers don’t just get your emails—they get the keys to your entire Google Workspace. They can delete your backups, lock you out of your account, and hold your business to ransom.

Historically, the only way to avoid this was to pay for a second Google Workspace licence (like admin@yourdomain.com.au) just to hold the admin keys. But paying an extra $10 to $30+ a month for an account you rarely log into feels like a rip-off.

Fortunately, there’s a better way.

The Secret Weapon: Cloud Identity Free

Google has a brilliant, little-known subscription called Cloud Identity Free. It allows you to create user accounts that sit completely outside your paid Google Workspace subscription.

These accounts don’t have a paid Gmail inbox or Google Drive, but they have full access to the Google Admin Console. It costs absolutely nothing, and it is the absolute best practice for securing your business.

The 3-Minute Walkthrough: Creating Your Free Super Admin

Ready to lock down your business? Grab your laptop, log into your current Google Admin Console (admin.google.com), and follow these simple steps.

Step 1: Add the Cloud Identity Free Licence

First, we need to tell Google we want access to these free licences.

1. In the Admin Console sidebar, go to Billing > Get more services.
2. Click on Cloud Identity in the left-hand menu.
3. Find Cloud Identity Free and click Get Started.
4. Follow the prompts to check out. The total will be $0.00.

Step 2: Turn Off Automatic Workspace Licensing

By default, Google Workspace automatically assigns paid licences to any new user you create. We need to turn this off so our new admin doesn’t cost us a cent.

1. Go to Billing > Licence settings.
2. Click on your Google Workspace subscription.
3. Under Automatic licensing, switch it to OFF and save.

Crucial Note: Don’t skip this step! If you leave auto-licensing on, Google will automatically charge you for a new Workspace licence as soon as you create the new admin user.

Step 3: Create Your New Admin User

Now, let’s create the dedicated account that will hold your system keys.

1. Go to Directory > Users and click Add new user.
2. Fill in the details. Use an obvious name (like “System Admin”) and a clean email address like admin@yourdomain.com.au.
3. Click Add New User.
4. Once created, click on the user’s name in your directory, scroll down to the Licences section, and verify that they only have Cloud Identity Free turned on (and Google Workspace is turned off).

Step 4: Assign the Super Admin Role

With the user created, we need to hand over the digital keys.

1. Inside your new admin user’s profile, click on Admin roles and privileges.
2. Find the Super Admin role and toggle the slider to Assigned.
3. Click Save.

Step 5: Secure the New Account

Now for the most important part: securing the perimeter.

1. Log out of your daily email and log into admin@yourdomain.com.au using the temporary password you generated.
2. Set up 2-Factor Authentication (2FA) immediately. This is non-negotiable for admin accounts.
3. Add a secure recovery email and phone number.

Quick Tip: Because your new admin account doesn’t have an active inbox, you won’t see critical system alerts from Google. Make sure you set up email forwarding so any admin alerts are forwarded straight to your daily inbox.

Once your free admin account is running smoothly, you can safely log back into your daily email account and remove its Super Admin privilege.

---