- Grant a User an Admin Role
- Delete a User's Admin Role
- Print All Admin Role Assignments
- Print All Admin Roles
gam create admin <user> <role> <customer|org_unit <OU>>
Grants the given user account rights as the given admin role. The command must specify whether the rights are to be granted to the entire customer Google Apps domain or to a certain org_unit and it's children org unit's. Note that some roles cannot be granted to org units, they must specify customer.
This example makes [email protected] a super admin
gam create admin [email protected] _SEED_ADMIN_ROLE customer
This example makes [email protected] a helpdesk admin for the /NY Org Unit.
gam create admin [email protected] _HELP_DESK_ADMIN_ROLE org_unit "NY"
gam delete admin <role assignment id>
Removes an admin role assignment. Use Print All Admins to see existing assignments, you're looking for the roleAssignmentId column. You can also use CSV commands to revoke all rights for a given user.
This example revokes the given user's admin role.
gam delete admin 8771356963373081
This example revokes ALL admin role assignments for the [email protected] user account.
gam print admins user [email protected] | gam csv - gam delete admin ~roleAssignmentId
gam print admins [user <user>] [role <role>] [todrive]
Prints all admin role assignments in the Google Apps instance. Note that one user account can be assigned multiple roles and can be assigned one role on multiple orgs so a single user may be returned in multiple rows. The optional user argument limits returned role assignments to those granted to the given user. The optional role argument limits returned role assignments to those of the given role. The optional todrive argument tells GAM to create a Google Docs Spreadsheet instead of outputting the results to CSV.
This example prints out all admin role assignments
gam print admins
This example prints out all admin role assignments for [email protected]
gam print admins user [email protected]
This example prints out all super admin role assignments
gam print admins role _SEED_ADMIN_ROLE
gam print roles [todrive]
Prints all admin roles created within the Google Apps Instance. The optional argument todrive causes GAM to create a Google Docs Spreadsheet of results instead of outputting CSV.
This example creates a spreadsheet of all admin roles for a domain.
gam print roles todrive