I currently have a corporate address, which is facilitated by Google. My email address does not contain Gmail or google, but when I log in it shows a Google look and feel with minimal alterations (I can also go to drive for instance).
I am now wondering what kind of access the company has to my account. I came up with these ideas based on my image of what the world should look like:
1. Things they cannot do
- Recover my password
2. Things they can do, with me noticing
- Close my account
- Reset my password
3. Things they can do, without me noticing
- Change rights to drive folders (to which I am currently the only one with access) in the shared drive
- Reopen the account and access everything after the account was closed due to me no longer needing it
In addition to this there are some things I don't know where to place:
- Access my drive content without me knowing
- Search my email
- Look at my history (search, phone location) without changing my password
- Send emails from my account without changing my password
- Recover deleted mails/documents from beyond the point where I could have recovered them myself in a corporate or private account
Above I have indicated the most relevant points when it comes to Google corporate account access. Are my preconceptions correct and how do the unknowns fit in?
BONUS: Based on the above considerations, what is a shocking example of access types that corporates do/do not have?
Note that I am only interested in 'normal' access to my account, I am specifically not looking for anything that requires dodgy actions like abusing power over wifi/device.
Also, for those who wonder: I am not in trouble, just curious!