Unified Staff Access: Super Admin enrollment
Sign in using the designated administrator's Google account. The system will verify Google's signed identity token and display the account's permanent Google identifier. This does not activate administrator access.
Verified Google subject
Copy this identifier to the dedicated Apps Script project's protected Script Property SUPER_ADMIN_GOOGLE_SUB. Then deliberately set SUPER_ADMIN_ENABLED to TRUE after security review. Do not share tokens or HMAC secrets.