Using GAM to set the "adminCreated" Groups property

Daniel Spillers

unread,

Jan 6, 2015, 1:17:19 PM1/6/15

to google-ap...@googlegroups.com

Does GAM have any ability to set the Groups property "adminCreated"? This is the property that flags whether or not a group was created by admin or by a user using the groups.google.com "Create Group" feature.

When I do a group info command, it reports the value of adminCreated. I can see that it is "false" for user-created groups, and "true" for a group created in the Admin UI (admin.google.com), or by GAM itself.

I'd love to use GAM to create (or update) a group where "adminCreated: false". Is this possible (now or in the future)?

Use Case

We use Google Apps Directory Sync to synchronize our LDAP directory with our GA domain. We have Groups for Business turned on. We want to be able to manage some groups via LDAP (i.e., creation, auto-populated membership), but allow other groups to have their memberships and settings managed by the group owners. In both situations, we want to control which groups get created, handing over membership control to group owners for any groups not in our LDAP directory.

We plan on using GAM to help automate group creation, but because it creates groups with "adminCreated: true" set, then those groups get deleted by Directory Sync if they don't exist in LDAP. Google Apps Directory Sync ignores any groups with "adminCreated: false".

Can anyone help me?

Many thanks,

daniel

Jay Lee

unread,

Jan 6, 2015, 1:46:45 PM1/6/15

to google-ap...@googlegroups.com

Unfortunately adminCreated is read-only. There's nothing GAM can do to toggle it.

Jay Lee

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3f9d111a-308a-4d0c-befa-0c41813b9d47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Daniel Spillers

unread,

Jan 6, 2015, 5:03:26 PM1/6/15

to google-ap...@googlegroups.com

Thanks for the fast reply.

And I'm assuming there's no API for creating groups wholly in Groups for Business (i.e., getting the adminCreated set to false as part of group creation)? Are all API-created groups adminCreated: true?

Fred Bean

unread,

Oct 4, 2018, 10:45:01 AM10/4/18

to GAM for G Suite

As this is something that was last answered some 3 years ago, can you tell me if this has been updated? This seems like the kind of function that large orgs would like to be able to leverage to allow for better management of what GCDS is syncing.

On Tuesday, January 6, 2015 at 1:46:45 PM UTC-5, Jay Lee wrote:

Unfortunately adminCreated is read-only. There's nothing GAM can do to toggle it.

Jay Lee

On Tue, Jan 6, 2015 at 1:17 PM, Daniel Spillers <djspi...@ualr.edu> wrote:

Does GAM have any ability to set the Groups property "adminCreated"? This is the property that flags whether or not a group was created by admin or by a user using the groups.google.com "Create Group" feature.

When I do a group info command, it reports the value of adminCreated. I can see that it is "false" for user-created groups, and "true" for a group created in the Admin UI (admin.google.com), or by GAM itself.

I'd love to use GAM to create (or update) a group where "adminCreated: false". Is this possible (now or in the future)?

Use Case

We use Google Apps Directory Sync to synchronize our LDAP directory with our GA domain. We have Groups for Business turned on. We want to be able to manage some groups via LDAP (i.e., creation, auto-populated membership), but allow other groups to have their memberships and settings managed by the group owners. In both situations, we want to control which groups get created, handing over membership control to group owners for any groups not in our LDAP directory.

We plan on using GAM to help automate group creation, but because it creates groups with "adminCreated: true" set, then those groups get deleted by Directory Sync if they don't exist in LDAP. Google Apps Directory Sync ignores any groups with "adminCreated: false".

Can anyone help me?

Many thanks,

daniel

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

Jay Lee

unread,

Oct 4, 2018, 10:52:18 AM10/4/18

to google-ap...@googlegroups.com

There is no way to flip the admin created flag other than deleting and recreating the group.

Jay

On Thu, Oct 4, 2018 at 10:45 AM Fred Bean <cfb...@gmail.com> wrote:

As this is something that was last answered some 3 years ago, can you tell me if this has been updated? This seems like the kind of function that large orgs would like to be able to leverage to allow for better management of what GCDS is syncing.

On Tuesday, January 6, 2015 at 1:46:45 PM UTC-5, Jay Lee wrote:

Unfortunately adminCreated is read-only. There's nothing GAM can do to toggle it.

Jay Lee

On Tue, Jan 6, 2015 at 1:17 PM, Daniel Spillers <djspi...@ualr.edu> wrote:

Does GAM have any ability to set the Groups property "adminCreated"? This is the property that flags whether or not a group was created by admin or by a user using the groups.google.com "Create Group" feature.

When I do a group info command, it reports the value of adminCreated. I can see that it is "false" for user-created groups, and "true" for a group created in the Admin UI (admin.google.com), or by GAM itself.

I'd love to use GAM to create (or update) a group where "adminCreated: false". Is this possible (now or in the future)?

Use Case

We use Google Apps Directory Sync to synchronize our LDAP directory with our GA domain. We have Groups for Business turned on. We want to be able to manage some groups via LDAP (i.e., creation, auto-populated membership), but allow other groups to have their memberships and settings managed by the group owners. In both situations, we want to control which groups get created, handing over membership control to group owners for any groups not in our LDAP directory.

We plan on using GAM to help automate group creation, but because it creates groups with "adminCreated: true" set, then those groups get deleted by Directory Sync if they don't exist in LDAP. Google Apps Directory Sync ignores any groups with "adminCreated: false".

Can anyone help me?

Many thanks,

daniel

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3f9d111a-308a-4d0c-befa-0c41813b9d47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.

Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/61ab5b5b-99fa-40b9-baba-5781597cb815%40googlegroups.com.

Fred Bean

unread,

Oct 4, 2018, 10:58:36 AM10/4/18

to GAM for G Suite

Thanks for your fast response!

On Thursday, October 4, 2018 at 10:52:18 AM UTC-4, Jay Lee wrote:

There is no way to flip the admin created flag other than deleting and recreating the group.

Jay

On Thu, Oct 4, 2018 at 10:45 AM Fred Bean <cfb...@gmail.com> wrote:

As this is something that was last answered some 3 years ago, can you tell me if this has been updated? This seems like the kind of function that large orgs would like to be able to leverage to allow for better management of what GCDS is syncing.

On Tuesday, January 6, 2015 at 1:46:45 PM UTC-5, Jay Lee wrote:

Unfortunately adminCreated is read-only. There's nothing GAM can do to toggle it.

Jay Lee

On Tue, Jan 6, 2015 at 1:17 PM, Daniel Spillers <djspi...@ualr.edu> wrote:

Does GAM have any ability to set the Groups property "adminCreated"? This is the property that flags whether or not a group was created by admin or by a user using the groups.google.com "Create Group" feature.

When I do a group info command, it reports the value of adminCreated. I can see that it is "false" for user-created groups, and "true" for a group created in the Admin UI (admin.google.com), or by GAM itself.

I'd love to use GAM to create (or update) a group where "adminCreated: false". Is this possible (now or in the future)?

Use Case

We use Google Apps Directory Sync to synchronize our LDAP directory with our GA domain. We have Groups for Business turned on. We want to be able to manage some groups via LDAP (i.e., creation, auto-populated membership), but allow other groups to have their memberships and settings managed by the group owners. In both situations, we want to control which groups get created, handing over membership control to group owners for any groups not in our LDAP directory.

We plan on using GAM to help automate group creation, but because it creates groups with "adminCreated: true" set, then those groups get deleted by Directory Sync if they don't exist in LDAP. Google Apps Directory Sync ignores any groups with "adminCreated: false".

Can anyone help me?

Many thanks,

daniel

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3f9d111a-308a-4d0c-befa-0c41813b9d47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

Sam

unread,

Oct 9, 2018, 9:54:28 AM10/9/18

to GAM for G Suite

Is it possible for GAM to support creating a group where AdminCreated: False upon creation?

On Thursday, October 4, 2018 at 9:52:18 AM UTC-5, Jay Lee wrote:

There is no way to flip the admin created flag other than deleting and recreating the group.

Jay

On Thu, Oct 4, 2018 at 10:45 AM Fred Bean <cfb...@gmail.com> wrote:

As this is something that was last answered some 3 years ago, can you tell me if this has been updated? This seems like the kind of function that large orgs would like to be able to leverage to allow for better management of what GCDS is syncing.

On Tuesday, January 6, 2015 at 1:46:45 PM UTC-5, Jay Lee wrote:

Unfortunately adminCreated is read-only. There's nothing GAM can do to toggle it.

Jay Lee

On Tue, Jan 6, 2015 at 1:17 PM, Daniel Spillers <djspi...@ualr.edu> wrote:

Does GAM have any ability to set the Groups property "adminCreated"? This is the property that flags whether or not a group was created by admin or by a user using the groups.google.com "Create Group" feature.

When I do a group info command, it reports the value of adminCreated. I can see that it is "false" for user-created groups, and "true" for a group created in the Admin UI (admin.google.com), or by GAM itself.

I'd love to use GAM to create (or update) a group where "adminCreated: false". Is this possible (now or in the future)?

Use Case

We use Google Apps Directory Sync to synchronize our LDAP directory with our GA domain. We have Groups for Business turned on. We want to be able to manage some groups via LDAP (i.e., creation, auto-populated membership), but allow other groups to have their memberships and settings managed by the group owners. In both situations, we want to control which groups get created, handing over membership control to group owners for any groups not in our LDAP directory.

We plan on using GAM to help automate group creation, but because it creates groups with "adminCreated: true" set, then those groups get deleted by Directory Sync if they don't exist in LDAP. Google Apps Directory Sync ignores any groups with "adminCreated: false".

Can anyone help me?

Many thanks,

daniel

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3f9d111a-308a-4d0c-befa-0c41813b9d47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

Sam

unread,

Oct 9, 2018, 10:17:16 AM10/9/18

to GAM for G Suite

Sorry I see the earlier part of the thread... Not possible... Thanks!

+KimNilsson

unread,

Oct 11, 2018, 9:41:44 AM10/11/18

to GAM for G Suite

Guys, have you tried using GAM with a regular user, without giving it admin access?

IIRC, if you allow a user to create groups manually, that same user should be allowed to do it via the APIs also.