GAM usage by non super admins

190 views
Skip to first unread message

Ian Daubney

unread,
Jul 2, 2015, 6:46:26 AM7/2/15
to google-ap...@googlegroups.com

gam 3.45 x64 (Windows 8.1).

I am wondering if the tool supports admins who are user created (non super admins)?

Does anyone have any experience with using GAM as a user created admin ?

Also how does one get back to the original scopes screen?

Select the authorized scopes for this token. Include a 'r' to grant read-only
access or an 'a' to grant action-only access.

[] 0) Group Directory API (supports read-only)
[
] 1) Organizational Unit Directory API (supports read-only)
[] 2) User Directory API (supports read-only)
[
] 3) Chrome OS Device Directory API (supports read-only)
[] 4) Mobile Device Directory API (supports read-only and action)
[
] 5) User Email Settings API
[] 6) Calendar Resources API
[
] 7) Audit Monitors, Activity and Mailbox Exports API
[] 8) Admin Settings API
[
] 9) Groups Settings API
[] 10) Calendar Data API (supports read-only)
[
] 11) Audit Reports API
[] 12) Usage Reports API
[
] 13) Drive API (create report documents for admin user only)
[] 14) License Manager API
[
] 15) User Security Directory API
[] 16) Notifications Directory API
[
] 17) Site Verification API
() 18) IMAP/SMTP Access (send notifications to admin)
(
) 19) User Schemas (supports read-only)

 20)  Select all scopes
 21)  Unselect all scopes
 22)  Continue

Thanks in advance,

Jay Lee

unread,
Jul 2, 2015, 6:50:56 AM7/2/15
to google-ap...@googlegroups.com
Delegated Admins should be able to make basic API calls depending on the privileges assigned to them. Even end users can run commands like:

gam print users userview

which gives them a printout of users with similar details that they'd see in the Contacts Directory UI but not admin-specific details.

To get back to the scopes screen, you can rename oauth2.txt (your authorization file) to something else like oauth2.txt-superadmin and then rerun GAM. You can also just revoke the authorization with "gam oauth revoke".

Hope this helps, if there are specific commands you're trying to run as a delegated admin let us know.

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/b2672c4d-bb99-4c4a-a7f7-2d209c7bfa29%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
--

Jay Lee

Reilly Brogan

unread,
Jul 6, 2015, 4:49:50 PM7/6/15
to google-ap...@googlegroups.com
Is it possible to use the Audit API as a delegated admin? I have all of the privileges that sound like they should apply but am still receiving 403 errors when trying to set up a monitor.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
--

Jay Lee

Reply all
Reply to author
Forward
0 new messages