Read-only (data collection) GAM setup possible?

[David Moreira]

Hi,

the primary reason I am seeking to install GAM is to easily get access to data extracts that aren't available in the portal standard reports and otherwise quite tedious to do in the Portal (via ClickOps).

Is there documentation on how to setup GAM in such a way that it is restricted to read-only (R) operations (i.e. not permitted to do changes)?  It would have been nice if G Workspaces had a Global Reader type of admin account, but since it does not, has anyone tried such a setup that can share his/her experience?

I understand that any GAM CLI commands that require changes would fail, but that is the whole point of this access control (extract data that requires Super Admin, but don't allow GAM initiated "CUD" operations).

Thank you.

Regards,

David

[Ross Scroggs]

When you set up GAM credentials, you can disable scopes for which you want no access and may scopes  can be enabled to read-only access.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/4982888c-3a73-46d6-b831-14c80c345a0en%40googlegroups.com.