Creating a read-only project / user
53 views
Skip to first unread message
Joshua Cook
Mar 31, 2025, 9:52:32 AM3/31/25
to GAM for Google Workspace
Hello,
I have the need to create a GAM project / user that has read only access to certain metrics within Google Workspace. I have created a service account user in GW, created a custom admin role, assigned the service account user to this role, validated that I can login as that user and see data.
Now, I want to create a project (which I assume I'll need to do using my SuperAdmin account) and assign the service account user to have permissions on that project (read only). I've looked through the documentation, but don't really see an easy way to do this.
My end goal is to run GAM via some sort of cron job or something like that to extract some defined metrics. Since it will be run automatically, I want to use least privilege to do this.
Does anyone have any suggestions on how to do this? Thanks for any help anyone can provide. Let me know if you need more information on any of this.
Thanks!
Now, I want to create a project (which I assume I'll need to do using my SuperAdmin account) and assign the service account user to have permissions on that project (read only). I've looked through the documentation, but don't really see an easy way to do this.
My end goal is to run GAM via some sort of cron job or something like that to extract some defined metrics. Since it will be run automatically, I want to use least privilege to do this.
Does anyone have any suggestions on how to do this? Thanks for any help anyone can provide. Let me know if you need more information on any of this.
Thanks!
Joshua Cook
Ross Scroggs
Mar 31, 2025, 9:56:00 AM3/31/25
to google-ap...@googlegroups.com
--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/ce5338ad-7f7a-4e6a-aea1-bac29ded6441n%40googlegroups.com.
Joshua Cook
Mar 31, 2025, 10:01:52 AM3/31/25
to GAM for Google Workspace
Thanks! I'll give that a try and report back how it goes.
Joshua Cook
Jay Lee
Mar 31, 2025, 10:09:35 AM3/31/25
to google-ap...@googlegroups.com
Figure out what GAM commands / reports you want to include. That will define least privilege.
Jay
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/809c438b-cf2c-4be7-bc69-ccc050741160n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages