Error Message Getting All Users for Multi-Domain Customer

[ryanfog]

When I perform a "Get-GSUser -Filter *" the expected result is to pull back all users in G-Suite, instead I get an error message. My environment has a little over 12K accounts involved.

[scrthq]

Hey @ryanfog - Checking this out now! Apologies for the delay!

[scrthq]

Can you try running the following to see if you get a different behavior? I have a feeling the default SearchBase value may be causing some headaches for your org size:

$users = Get-GSUser -Filter * -SearchBase $null -Verbose

This should give you some verbose feedback showing the exact filter being sent with the command. Screenshot showing the differences:

[scrthq]

@ryanfog check my last answer and let me know if passing $null for the SearchBase parameter fixes this for you!

[scrthq]

@ryanfog FYI - I removed the default value for SearchBase in v2.5.0. Still pending confirmation that this was the source of the issue for you though, let me know if either v2.5.0's update fixes you or if setting the SearchBase value to $null on an earlier version does the same!

[ryanfog]

Nate,

Sorry bad news same error..

[scrthq]

@ryanfog - In your PSGSuite config, do you have your customer ID and domain set?

[ryanfog]

I do have a customer ID listed and one of the primary domains of the 40 or so we have listed in Google. if we need to do a screen share or something I am open to that

[scrthq]

Gotcha! What's your Preference set to in your config? CustomerID or Domain or not set?

[scrthq]

And are you trying to list the users for all domains under your customer? or just a single domain's users?

[ryanfog]

[Variables]
;Add all persistent or environment specific variables here
AdminEmail=account@domain.com
Preference=CustomerID
CustomerID=108427614290562006643
ConfigName=PSGSuiteConfig
Domain=domain.com
P12KeyPath=C:\Users\fogler\Documents\PSGSuite\SecertSauce.p12
AppEmail=powershell@psgsuite-197900.iam.gserviceaccount.com
ServiceAccountClientID=308d85bab6e33c25fed6103225f6e2e2481e320d

[ryanfog]

All users and all domains

[scrthq]

can you try setting your CustomerID to "my_customer" as a test, then rerunning to see if any difference is made?

# Save the current customer ID
$currentCustomerID = (Show-PSGSuiteConfig).CustomerID

# Set the config to use the generic my_customer value
Set-PSGSuiteConfig -CustomerID my_customer

# Try pulling users again (Verbose may show where it's hanging)
$users = Get-GSUser -Filter * -Verbose

# Revert your config back to normal
Set-PSGSuiteConfig -CustomerID $currentCustomerID 

[scrthq]

if the above works, then it may indicate the wrong CustomerID is stored in your config OR that Google really doesn't like using the CustomerID there and prefers my_customer instead.

Next step would be to ensure that the customer ID wasn't the result of an odd copy/paste or something via this command to pull your admin user account and the customer ID property directly from there:

Set-PSGSuiteConfig -CustomerID (Get-GSUser).CustomerID

[ryanfog]

Its appears you are onto something..

[scrthq]

side note - I think that you should be able to specify a domain as well to list all users from, as currently Get-GSUserListPrivate only allows pulling the full customer list OR the domain set in the config (if Preference is set to Domain)

[scrthq]

Sweet!!!

Try running the command in my previous message to set your CustomerID directly from the value returned by Get-GSUser for your AdminEmail:

Set-PSGSuiteConfig -CustomerID (Get-GSUser).CustomerID
$users = Get-GSUser -Filter * -Verbose

[scrthq]

PS - I removed your screenshot since you still had your adminemail showing on the second verbose output 😉

[ryanfog]

Consider this issue resolved, it appears to be the old ID10T error on my part.

[scrthq]

lol, you're good! no dumb moves, just continual learning experiences. Glad it's sorted!!

I'm still going to add some updates to Get-GSUser to allow specific domain listing as well, as I'm sure it will be useful for users like you who manage multiple G Suite domains!

[ryanfog]

That would be awesome this we are a global company with domains like domain.fr and domain.ca etc..

[scrthq]

I should have an updated version that adds that functionality in by tonight!

[scrthq]

Just to confirm as well, you were good after setting the CustomerID in your config to (Get-GSUser).CustomerID still, right @ryanfog ?

[scrthq]

you should be using the actual CustomerID in your config and not the my_customer value if you can avoid it, just want to make sure it's working once set exactly still

[ryanfog]

That is correct my config.ini file is updated with the proper customerID retrieved from Google directly.

[scrthq]

sweet! glad it's sorted!

[scrthq]

@ryanfog - added the ability to specify -Domain $otherDomain with v2.5.3!