Does every employee need to activate Graphus or is it just the Google Workspace Admin for the company and everyone is covered?

Every employee does not need to activate Graphus. Once the G Suite Admin activates Graphus for your domain, Graphus is automatically activated for all active user accounts. Individual employees don’t have access to Graphus Portal but of course, they are protected from cyber threats.