get recent admin activity on a certain user by gam report

[Markus Frömmel]

Hi,

I am tiring to write a command that displays me all the recent admin activities that were performed on a certain user, such as password reset, renaming, group membership etc.

I tried this but I failed:

$ gam report admin filter "User_EMAIL==us...@domain.com" thismonth
Getting Reports for all users
ERROR: Invalid request: Parameter User_EMAIL not found in manifest.

Can anybody help?

Kind regards, Markus

[Markus Frömmel]

I have figured it out. The problem was the capitalization. It has to be "USER_EMAIL"

but now I have another problem. It does not accept the fields parameter:

$ gam report admin filter "USER_EMAIL==us...@domain.com" fields name,GROUP_EMAIL,NEW_VALUE,actor.email,id thismonth

Command: /home/techsupport/bin/gamadv-xtd3/gam report admin filter USER_EMAIL==us...@domain.com >>>fields<<< "name,GROUP_EMAIL,NEW_VALUE,actor.email,id" thismonth
ERROR: Invalid argument
Help: Syntax in file /home/techsupport/bin/gamadv-xtd3/GamCommands.txt
Help: Documentation is at https://github.com/taers232c/GAMADV-XTD3/wiki

What I am doing wrong now? Can somebody help me please?

[Temple Rodgers]

Markus,

when I use fields, I don't put the double quotes around the field names
Temple

[Markus Frömmel]

i tried both, it's not working unfortunately.

[Temple Rodgers]

yes - I just tried it, it won't work with the <<fields>> but it does work like this:

gam report admin filter USER_EMAIL==us...@domain.com

I didn't get any output with "thismonth"

[Ross Scroggs]

Markus,

Fields is not defined for that command: https://github.com/taers232c/GAMADV-XTD3/wiki/Reports#activity-reports

In this case you want header filtering: https://github.com/taers232c/GAMADV-XTD3/wiki/CSV-Output-Filtering#column-header-filtering

gam config csv_output_header_filter "name,GROUP_EMAIL,NEW_VALUE,actor.email,id" report admin filter "USER_EMAIL==us...@domain.com" thismonth

Ross

--

ross.s...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/2ecf826d-f918-4e56-bfd3-39a0040e101bn%40googlegroups.com.

[Markus Frömmel]

Ross saves the day – again :-) 

Thank you!

Does the API support partial matches for USER_EMAIL?
If Yes how would I write the operator?