Domain Report

Snehal Kapse

unread,

Dec 18, 2024, 11:06:39 PM12/18/24

to google-ap...@googlegroups.com

Hi,

As a google administrator can we get below details using GAM? We want to fetch what configurations are done under the settings below.

Is any API available for this?

Security > 2-Step Verification
User > Security
Security > Account Recovery
Security > Password management
Security > Advanced Protection Program
Users > Security
Security > Google session control
Security > Login challenges
Security > Context-Aware Access

The purpose of Shivaami is to make a positive change in the life of the people we connect by offering solutions and services which bring profit and happiness.

Ross Scroggs

unread,

Dec 19, 2024, 11:22:43 AM12/19/24

to google-ap...@googlegroups.com

See: https://github.com/GAM-team/GAM/wiki/Cloud-Identity-Policies

gam redirect stdout ./policies.txt show policies

Ross

----

Ross Scroggs

Ross.S...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CACYFH4ZR0n2y-ZgQLnM7Mnu1AAsQ0F%3DdJKb06OZ1R%3DcTYY%2BhpQ%40mail.gmail.com.

Brian Pugh

unread,

Dec 19, 2024, 11:36:13 PM12/19/24

to GAM for Google Workspace

I get this returned, Ross:

C:\GAMWork>gam redirect stdout ./policies.txt show policies
Command: gam redirect stdout ./policies.txt show >>>policies<<<

Thank you,

Brian

Ross Scroggs

unread,

Dec 20, 2024, 10:28:11 AM12/20/24

to google-ap...@googlegroups.com

Waht is: gam version

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/d6512cd2-a038-4f55-bde9-91c2a30ce214n%40googlegroups.com.

Brian Pugh

unread,

Dec 20, 2024, 11:16:25 AM12/20/24

to google-ap...@googlegroups.com

it is:

c:\>gam version
GAMADV-XTD3 7.00.14

Brian Pugh, IT/Educational Technologies

Associated Hebrew Schools | Danilack Middle School

p: 416.494.7666, | e: bp...@ahschools.com

w: www.associatedhebrewschools.com

252 Finch Ave W., Toronto, ON M2R 1M9

This email is confidential and is intended for the above-named recipient(s) only. If you are not the intended recipient, please delete this email from your system. Any unauthorized use or disclosure of this email is prohibited.

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/cg6OFoZuDP0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/B554AD57-5E5E-4B2F-8C84-5ED23A1F8693%40gmail.com.

Ross Scroggs

unread,

Dec 20, 2024, 11:27:54 AM12/20/24

to google-ap...@googlegroups.com

The command was added in 7.00.27, current is 7.02.03.

You should update to GAM7: https://github.com/GAM-team/GAM/wiki/How-to-Upgrade-GAMADV-XTD3-to-GAM7

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CAJBn2DTFxOy3aigBEfFO92Lpt_tAzgc0CY4cLvieMPBL8sTZzg%40mail.gmail.com.

Brian Pugh

unread,

Dec 20, 2024, 12:05:57 PM12/20/24

to google-ap...@googlegroups.com

Updated now to current version, but

c:\GAMWork>gam redirect stdout ./policies.txt show policies
Getting all Policies, may take some time on a large Google Workspace Account...
Policy Show Failed: Request had insufficient authentication scopes.

Brian Pugh, IT/Educational Technologies

Associated Hebrew Schools | Danilack Middle School

p: 416.494.7666, | e: bp...@ahschools.com

w: www.associatedhebrewschools.com

252 Finch Ave W., Toronto, ON M2R 1M9

This email is confidential and is intended for the above-named recipient(s) only. If you are not the intended recipient, please delete this email from your system. Any unauthorized use or disclosure of this email is prohibited.

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/C4D075FE-1B60-4294-8118-8FA08C895E13%40gmail.com.

Ross Scroggs

unread,

Dec 20, 2024, 12:08:34 PM12/20/24

to google-ap...@googlegroups.com

Since you're coming from and old version, update your scopes.

See: https://github.com/GAM-team/GAM/wiki/Cloud-Identity-Policies#notes

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CAJBn2DThGOLJ8pkmFjdBZOR0nALKd5KCjdJo2TcArdASufxEJA%40mail.gmail.com.

Brian Pugh

unread,

Dec 20, 2024, 3:03:26 PM12/20/24

to google-ap...@googlegroups.com

Did everything and got 550+ pages of policies...very nice!

Thank you, Ross. And have a very Merry Christmas!

Brian Pugh, IT/Educational Technologies

Associated Hebrew Schools | Danilack Middle School

p: 416.494.7666, | e: bp...@ahschools.com

w: www.associatedhebrewschools.com

252 Finch Ave W., Toronto, ON M2R 1M9

This email is confidential and is intended for the above-named recipient(s) only. If you are not the intended recipient, please delete this email from your system. Any unauthorized use or disclosure of this email is prohibited.

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/4D7A443F-2E3E-42F0-A7EC-C048371B3DFE%40gmail.com.

Snehal Kapse

unread,

Dec 22, 2024, 1:19:34 AM12/22/24

to google-ap...@googlegroups.com

Hi,

I have updated the GAM version & also allowed scope but still getting below error.

SCOPES = ['https://www.googleapis.com/auth/cloud-identity.policies']

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CAJBn2DSf7ROjRXbnU1%2BPfndS_u1wQ%2BXNfESH%2B%3DYrn3%2BnfODm2w%40mail.gmail.com.

--

Please feel free to contact me if you need any further information.

Thanks & Regards,

Snehal Kapse|

Google Workspace Support Engineer

Snehal Kapse

unread,

Dec 22, 2024, 1:39:55 AM12/22/24

to google-ap...@googlegroups.com

Hi,

It's done. Thanks

Is their any way that I can only get below policies by defining the command in such way.

Snehal Kapse

unread,

Dec 22, 2024, 1:42:08 AM12/22/24

to google-ap...@googlegroups.com

Hi,

It's done. Thanks

Is there any way that I can only get below policies by defining the command?

Security > 2-Step Verification
User > Security
Security > Account Recovery
Security > Password management
Security > Advanced Protection Program
Users > Security
Security > Google session control
Security > Login challenges
Security > Context-Aware Access

Ross Scroggs

unread,

Dec 22, 2024, 10:51:03 AM12/22/24

to google-ap...@googlegroups.com

Try rhis: gam print policies filter "setting.type.matches('security.*')"

Ross

----

Ross Scroggs

Ross.S...@gmail.com

On Dec 21, 2024, at 10:41 PM, 'Snehal Kapse' via GAM for Google Workspace <google-ap...@googlegroups.com> wrote:

Hi,

It's done. Thanks

Is there any way that I can only get below policies by defining the command?

Security > 2-Step Verification
User > Security
Security > Account Recovery
Security > Password management
Security > Advanced Protection Program
Users > Security
Security > Google session control
Security > Login challenges
Security > Context-Aware Access

On Sun, Dec 22, 2024 at 12:08 PM Snehal Kapse <snehal...@shivaami.com> wrote:

Hi,

It's done. Thanks

Is their any way that I can only get below policies by defining the command in such way.

On Sun, Dec 22, 2024 at 11:48 AM Snehal Kapse <snehal...@shivaami.com> wrote:

Hi,

I have updated the GAM version & also allowed scope but still getting below error.
SCOPES = ['https://www.googleapis.com/auth/cloud-identity.policies']

<image.png>

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CACYFH4YAs-raxzmbM1x6rtPieJrcC%2BGbHa%3DqMkZ3XqBB%2BxyxWQ%40mail.gmail.com.

Snehal Kapse

unread,

Dec 24, 2024, 5:20:25 AM12/24/24

to google-ap...@googlegroups.com

Hi Ross,

I need some details about the output to understand it in a better way. Can we connect over meet?

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/8202AA84-45CC-4D01-AC85-234D00065B91%40gmail.com.

Ross Scroggs

unread,

Dec 24, 2024, 10:55:42 AM12/24/24

to google-ap...@googlegroups.com

I am in California (UTC-8) and am available to Meet starting at 7:30AM

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CACYFH4YcQQeb2zqj1kVcPEcdw%2BvXYbFDO12-ivR7YZV4QNKWqA%40mail.gmail.com.

Ross Scroggs

unread,

Dec 24, 2024, 11:39:21 AM12/24/24

to google-ap...@googlegroups.com

Try this, you'll get easier to read utput.

gam show policies filter "setting.type.matches('security.*')"

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CACYFH4YcQQeb2zqj1kVcPEcdw%2BvXYbFDO12-ivR7YZV4QNKWqA%40mail.gmail.com.

Snehal Kapse

unread,

Dec 25, 2024, 6:03:51 AM12/25/24

to google-ap...@googlegroups.com

Hi,

Please find the report attached in this email. We have multiple entries for parent OU.

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/F0D65547-6359-455A-B8E2-FD7DD470A4CD%40gmail.com.

policy - Copy.csv

Ross Scroggs

unread,

Dec 25, 2024, 11:21:15 AM12/25/24

to google-ap...@googlegroups.com

See: https://cloud.google.com/identity/docs/concepts/policy-api-concepts

Try: gam redirect csv ./policies.csv sortheaders setting.type,policyQuery.orgUnitPath,policyQuery.sortOrder print policies filter "setting.type.matches('security.*')"

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CACYFH4b2W6vngmggV%2BMkLtLsKT7EZCy1cacYL--HTpM-ZhKeHQ%40mail.gmail.com.
<policy - Copy.csv>

Snehal Kapse

unread,

Dec 26, 2024, 1:38:31 AM12/26/24

to google-ap...@googlegroups.com

Hi,

Still getting multiple entries.

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/6F687329-F6EE-4C4E-9F06-3CFB098709BB%40gmail.com.

Ross Scroggs

unread,

Dec 26, 2024, 10:42:27 AM12/26/24

to google-ap...@googlegroups.com

GAM outputs what the API delivers, you'll have to ask Google what it means.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

On Dec 25, 2024, at 10:37 PM, 'Snehal Kapse' via GAM for Google Workspace <google-ap...@googlegroups.com> wrote:

Hi,

Still getting multiple entries.

<image.png>

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CACYFH4bnvXM11pvfmAckqj8fx18so1q_Vy_w4Y3bbg%2Bh-6BcpQ%40mail.gmail.com.

Jay Lee

unread,

Dec 26, 2024, 11:09:06 AM12/26/24

to google-ap...@googlegroups.com

See:

https://cloud.google.com/identity/docs/concepts/policy-api-concepts

One is system and one is admin policy.

Jay

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/FDB51A2A-5DC6-45EE-B890-36C295D88460%40gmail.com.

Snehal Kapse

unread,

Jan 3, 2025, 8:24:53 AMJan 3

to google-ap...@googlegroups.com

Hi,

In some settings I'm not getting the value that is enabled or disabled.

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp9N0hazPprVwoQOded34NVG1zHqHHorKWdhrQPXSToCjA%40mail.gmail.com.

Ross Scroggs

unread,

Jan 3, 2025, 11:35:05 AMJan 3

to google-ap...@googlegroups.com

Look farther to the left foa a heading: setting.value.contentComplianceRules

Ross

----

Ross Scroggs

Ross.S...@gmail.com

On Jan 3, 2025, at 5:23 AM, 'Snehal Kapse' via GAM for Google Workspace <google-ap...@googlegroups.com> wrote:

Hi,

In some settings I'm not getting the value that is enabled or disabled.

<image.png>

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CACYFH4bPmxFHPREqX6M-qvOr5bLU%3D1R6BUvD3y_8Uri2w2Qq7Q%40mail.gmail.com.

Reply all

Reply to author

Forward