Skip to content

Latest commit

 

History

History
80 lines (68 loc) · 2.75 KB

Managing-Admins.md

File metadata and controls

80 lines (68 loc) · 2.75 KB

Grant a User an Admin Role

Syntax

gam create admin <user> <role> <customer|org_unit <OU>>

Grants the given user account rights as the given admin role. The command must specify whether the rights are to be granted to the entire customer Google Apps domain or to a certain org_unit and it's children org unit's. Note that some roles cannot be granted to org units, they must specify customer.

Examples

This example makes admin@acme.com a super admin

gam create admin admin@acme.com _SEED_ADMIN_ROLE customer

This example makes ny-helpdesk@acme.com a helpdesk admin for the /NY Org Unit.

gam create admin ny-helpdesk@acme.com _HELP_DESK_ADMIN_ROLE org_unit "NY"

Delete a User's Admin Role

Syntax

gam delete admin <role assignment id>

Removes an admin role assignment. Use Print All Admins to see existing assignments, you're looking for the roleAssignmentId column. You can also use CSV commands to revoke all rights for a given user.

Examples

This example revokes the given user's admin role.

gam delete admin 8771356963373081

This example revokes ALL admin role assignments for the oldadmin@acme.com user account.

gam print admins user oldadmin@acme.com | gam csv - gam delete admin ~roleAssignmentId

Print All Admins

Syntax

gam print admins [user <user>] [role <role>] [todrive]

Prints all admin role assignments in the Google Apps instance. Note that one user account can be assigned multiple roles and can be assigned one role on multiple orgs so a single user may be returned in multiple rows. The optional user argument limits returned role assignments to those granted to the given user. The optional role argument limits returned role assignments to those of the given role. The optional todrive argument tells GAM to create a Google Docs Spreadsheet instead of outputting the results to CSV.

Examples

This example prints out all admin role assignments

gam print admins

This example prints out all admin role assignments for admin@acme.com

gam print admins user admin@acme.com

This example prints out all super admin role assignments

gam print admins role _SEED_ADMIN_ROLE

Print All Admin Roles

Syntax

gam print roles [todrive]

Prints all admin roles created within the Google Apps Instance. The optional argument todrive causes GAM to create a Google Docs Spreadsheet of results instead of outputting CSV.

Examples

This example creates a spreadsheet of all admin roles for a domain.

gam print roles todrive