GAM command to if users have a passkey or security key registered
111 views
Skip to first unread message
Nako Carroll
Apr 1, 2026, 11:25:12 AMApr 1
to GAM for Google Workspace
Hello!
Currently, the only way to accurately know which users have passkeys or security keys enrolled is to open each user's profile and go to the security page.
Google has reports, but they only show data from 6 months or earlier.
Is there a gam command that I can use to show which users do or do not have passkeys/security keys enrolled?
Ideally, I would like to avoid manually clicking through 100+ user profiles.
Currently, the only way to accurately know which users have passkeys or security keys enrolled is to open each user's profile and go to the security page.
Google has reports, but they only show data from 6 months or earlier.
Is there a gam command that I can use to show which users do or do not have passkeys/security keys enrolled?
Ideally, I would like to avoid manually clicking through 100+ user profiles.
Ross Scroggs
Apr 1, 2026, 1:40:27 PMApr 1
to google-ap...@googlegroups.com
This should give you what you want:
gam redirect csv ./UserSecurity.csv report users services accounts parameters accounts:num_passkeys_enrolled,accounts:num_security_keys
Ross
--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/5a1315ed-bcde-4d7d-a251-c81b7bc18f51n%40googlegroups.com.
Runako Carroll
Apr 1, 2026, 1:55:05 PMApr 1
to google-ap...@googlegroups.com
Thank you so much!!!
Is there a way within this command to pull all users in the report as well just so we can see who doesn't have any enrolled too?
Currently this pulls only the users that have one enrolled (which is so great!)
—
 | Runako Carroll (He/Him) Senior Cybersecurity Services Technician run...@personified.tech News & updates on LinkedIn Feel free to let us know how we're doing!  |
You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/KYK2zfNXsCo/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/FDA4FDFC-4848-4CAD-AF26-F3076D5AF68D%40gmail.com.
Ross Scroggs
Apr 1, 2026, 3:00:59 PMApr 1
to google-ap...@googlegroups.com
Add another parameter
Ross
gam redirect csv ./UserSecurity.csv report users services accounts parameters accounts:num_passkeys_enrolled,accounts:num_security_keys,accounts:timestamp_creation
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/75fa6021a710b722ba7b2b812d9adf32%40frontapp.com.
Aleksandre Rukhadze
Jul 29, 2026, 7:16:11 AM (10 days ago) Jul 29
to GAM for Google Workspace
Hi Ross, I used this command but the report seems to be incorrect. For example, some users shows 0 passkeys (in report) while I can see at least 1 passkey created from GWS admin panel.
Jay Lee
Jul 29, 2026, 7:29:27 AM (10 days ago) Jul 29
to google-ap...@googlegroups.com
The issue is likely that it's outdated, not wrong. Reports API data is at least 48-72 hours old when GAM first gets access to it so it would not include passkeys the user created in the past few days.
Check again in a day or two and the passkeys should show.
Jay Lee
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/4fd0d571-0784-4f7d-a456-2ed3252516f4n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages