Advanced Security Account Level Security

I am trying to setup the Advanced Security with Account Level Security.  I do not want accidently lockout the sa user when do this.  Does sa user always have total access to GP 2010, not matter what the security.