--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3924b5d3-3830-4d7b-9fc1-31565f996abd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Get all current staff members with Student Admin role covering the specific students OU and delete them
Get everyone with Student Admin role
gam print admins role "Student Admin" > Roles.csv
Now, get only those admins covering the specific students OU
echo "roleAssignmentId" > Deletes.csv
grep "/Students/School 123" Roles.csv >> Deletes.csv
(PowerShell equivalent: sls "/Students/School 123" .\Roles.csv -ca | select -exp line >> .\Deletes.csv)
gam csv Deletes.csv gam delete admin "~roleAssignmentId"
Update OU membership however you do it now
Add School Admin to updated OU
gam print users query "orgUnitPath='/School Staff/School 123'" > Adds.csv
gam csv Adds.csv gam create admin "~primaryEmail" "School Admin" org_unit "/Students/School 123"
--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/29541959-8474-4d22-a808-319fc830701c%40googlegroups.com.
Quick comment: It would be easier to arrange it as /School 123/Teachers and then /School 123/StudentsOr even simpler/School 123/School 123/StudentsYou could then assign admin permissions on an OU level.
On Tue, Jan 24, 2017 at 10:38 AM, Bryan Guidroz <bryang...@tpsdonline.org> wrote:
Any suggestions on this?
On Saturday, November 19, 2016 at 3:34:49 PM UTC-6, Bryan Guidroz wrote:I'm looking to allow all teachers at a specific school to reset the passwords of all students at their school.So, teachers are in an OU /School Staff/School 123Students are in an OU /Students/School 123Every night, the membership of the /School Staff/School 123 OU is updated.Now, I'd like to give these teachers permission to reset their students' passwords.I've got a User Created Role set up as I need it. It's called School Admin.So, nightly, I'd like to give all members of /School Staff/School 123 the School Admin role to OU /Students/School 123Any suggestions on how to achieve this?It's important that I keep them in sync... meaning the School Admin role is added AND REMOVED for users as the /School Staff/School 123 OU is updated.
--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3924b5d3-3830-4d7b-9fc1-31565f996abd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.