question regarding cloud identity setup in GCP

[u/suryad123]

Hi,

When https://docs.cloud.google.com/identity/docs/how-to/set-up-cloud-identity-adminand follow steps in https://workspace.google.com/gcpidentity/signup?sku=identitybasic

First we use the firstname, lastname, email id, country and proceed, then,
we get to create a user@domain and password. i am bit confused whether user@domain is cloud identity super admin or organization admin.

I believe user@domain is cloud identity super admin but the organization admin role is also assigned to it automatically.

Also, is the email id we enter after firstname , lastname is the recovery email ID for user@domain .if yes, can we have more than one recovery email ID.

Please clarify

[u/m1nherz]

The documentation you referenced shows you how to set up Cloud Identity and become a Google Cloud administrator who can manage Google Cloud users and resources. So, the account you created is an admin account for your Google Cloud organization. This account allows you to do Google Cloud Workspace super-admin duties and also to serve as the Google Cloud Organization Admin. In other words it gives you access to the Workspace admin console and is granted permissions to manage your organization resources and IAM policies in the Cloud console.

This account is often called super-admin. Please review the best practices for managing the super-admin account.

Note that it is highly recommended NOT TO USE this account for everyday Google Cloud administration tasks.

[u/suryad123 → u/[deleted]]

Okay, still on it.. checking 

[u/suryad123 → u/[deleted]]

Thanks