[Security / Re-access] Questions for Console Administrator Access Policy

[heeyeon01]

1. If someone from another company successfully login in through google auth, wouldn't they be able to modify our company's settings?
2. When the person in charge changes, how does their the new person in charge gain access?