Gam config without SA account

[Wayne Mask]

Is it possible to install and configure gam in a way that doesn't require a super-admin account? My company doesn't want to grant SA permissions for security reasons, but I'd like to be able to automate user admin actions like creating users etc. which shouldn't require SA permissions. 

[Jay Lee]

Yes, GAM works with delegated admins assuming they have an admin role which grants them permissions to do the required actions of the given GAM command.

I'd suggest setting up a delegated admin and testing the GAM commands you wish to use with it to understand minimum needed role and permissions.

Jay Lee

On Thu, Jun 16, 2022 at 10:07 AM 'Wayne Mask' via GAM for Google Workspace <google-ap...@googlegroups.com> wrote:

Is it possible to install and configure gam in a way that doesn't require a super-admin account? My company doesn't want to grant SA permissions for security reasons, but I'd like to be able to automate user admin actions like creating users etc. which shouldn't require SA permissions. 

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/57ba8d12-bcf9-43e4-812a-cf87df62c221n%40googlegroups.com.