A standard administrative audit is the most important standard operating procedure (SOP) a non-profit can implement. Often, tech volunteers are granted global administrator privileges simply because it is the fastest way to get things done. Over months or years, these elevated privileges accumulate, leaving your organization with multiple unmonitored accounts holding root access to sensitive systems.

To conduct an audit, log in to your central workspace and navigate to the user management console. Export your complete user list and filter specifically by assigned roles. Identify every account possessing "Global Admin," "Super Admin," or "Billing Admin" capabilities. If an outgoing volunteer only managed email distribution lists or printer setups, their account should never have held root organizational control.

Downgrade legacy administrative accounts to standard user roles immediately. Ensure that at least two trusted, permanent staff members—such as the Executive Director and an Operations Lead—hold master administrative access. Implementing this "rule of two" guarantees that your organization is never locked out if a single individual becomes unavailable or departs unexpectedly.

Additionally, review third-party app authorizations. Tech helpers frequently link personal developer tools, backup utilities, or browser extensions to organizational cloud drives. Revoke permissions for any unrecognized connected applications inside your Google Workspace or Microsoft 365 dashboard. Regular administrative auditing ensures institutional knowledge and platform ownership remain firmly within your non-profit’s hands.