The company I work for has recently been locked out of our Google Workspace Super Admin account. The person who set it up is no longer working here. We reached out to him, but he couldn’t help. We contacted Google, and they gave us some steps. After that, they said we could elevate an account to super admin. We have an account we wanted to elevate, but 2SV was disabled. We wanted to enable it, but the option was greyed out. Now, our account has been elevated, but it’s bringing us to a screen that says, “Couldn’t sign you in. Your sign-in settings don’t meet your organization’s 2-Step Verification policy. Contact your admin for more info.” Now all of the user accounts are locked, as well as the admin accounts. We’ve contacted Google about this, but they haven’t responded.
Sounds like you are straight out of luck. This is what happens when system administrators put everything in their name and email and then they are no longer with the company. Instead there should have been an administration account where other sysadmin’s can access.
I hope you find a solution soon.
I sort of helped someone with this years ago and never documented it… sadly. But I think this might help?
When you email or contact google, I think you can ask to either generate and send a set of 2SV Backup Verification Codes for the elevated account so I can log in and/or enroll a token. Not sure if that is still possible.
Do you still have the device the previous admin used? You might find some answers there to unlock it? I have saved a 2FA lock because a previous admin left their laptop with the pin code to the laptop labeled on a piece of paper under the laptop that allowed entry and found the password manager with TOTP used.
The cost of running the cheapest synology for your business that supports google and ms 365 backup is tiny compared to its enormous value