On , I learnt ...

GSuite’s “Groups Admin” role can read any group email

If members of your Google org want to administer groups, it’s tempting to make them a “Groups Admin”.

G-Suite Groups Admin

Be careful though as this allows the person to read any message sent to any group (including historical messages), and most organisations have groups whose messages contain sensitive information (e.g. HR or payroll).

A Groups Admin can browse group messages by visiting the appropriate conversation page:

https://groups.google.com/a/$ORG_DOMAIN/g/$GROUP_NAME

A Groups Admin has access to such pages even if they aren’t an owner/manager/member of the group.