Unable to remove SuperAdmin role from original admin user

[Tim Chambers]

I've added a new SuperAdmin to a Google Workspace instance, so now I have two SAs:

$ gam print admins
roleAssignmentId,roleId,role,assignedTo,assignedToUser,scopeType,orgUnitId,orgUnit
xxxx8977,xxxx8977,_SEED_ADMIN_ROLE,xxxx3386,olda...@example.com,CUSTOMER,,
xxxx8978,xxxx8977,_SEED_ADMIN_ROLE,xxxx5456,newa...@example.com,CUSTOMER,,

I'd like to remove the SuperAdmin role from the old user, however this fails:

$ gam delete admin xxxx8977
Role Assignment ID: xxxx8977, Delete Failed: The operation is not allowed

If I were do remove the SuperAdmin role from this user via the Google Workspace Admin Console, the GW instance would also prompt me to change the account's primary admin to that newadmin@ account (Account settings > Contact info > Primary admin). I was thinking that maybe I need to first change the instance primary admin, but I don't see a way to do that via GAM—is that possible? Is there a better way to remove the SuperAdmin role from the current primary admin?

[Sergio Alvarez]

Hi Tim 

There is no current API to update the main super administrator on an account, this is a process that would be safer to do it from the admin console, You can see which options are available for the account here: 

https://gamcheatsheet.com/GAM%20Cheat%20Sheet%20A3.pdf

over the customer section 

[Tim Chambers]

Thanks, and thanks for the cheat sheet!

Tim Chambers
CTO, Auxilio
(916) 622-0525
auxilio.partners

Schedule a meeting with me.

--
You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/6dXVR9B_1p4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/8786c488-c794-4a32-abbf-c3e48585cd00n%40googlegroups.com.