Complete domain verification via GAM.

[Christopher Noon]

Hello,

I'm trying to automate one of my GAM workflows, part of which is adding a secondary domain to GW and doing DNS (TXT record) verification.  Everything appears to work fine:

gam create domain

gam create verficiation testdomain.com

[verification strings are output as expected]

[DNS record is then updated manually using the proper string]

gam update verification testdomain.com txt

Verified!

Method: DNS_TXT
Expected Record: testdomain.com IN TXT google-site-verification=verifcationstringfromabove

DNS      Record: testdomain.com IN TXT google-site-verification=verifcationstringfromabove
[snip]
You can now add: testdomain.com or its subdomains as secondary or domain aliases of the Google Workspace Account: realdomain.com

According to the wiki there doesn't seem to be anything else to do on the GAM side, but when I look in the admin portal (Account -> Domains -> Manage), testdomain.com is there but still unverified.  As such, I am also unable to assign email addresses from testdomain.com, which makes sense if it's really not verified.  

What am I missing?  GAM version is GAM 7.34.13.

[Jay Lee]

I believe the API-only flow doesn't work and you still need to "validate" the domain in the admin console. That should be a quic thing if you've already created the DNS record and verified there.

Jay Lee

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/7ba481fd-10b0-45d3-b32c-5a43bd498334n%40googlegroups.com.

[Christopher Noon]

Thanks Jay.  I was afraid of that.  As you say, not a huge deal.  Going through that now, clicking "Verify" in the portal, I do get the same verification string and can just next-next-next through it and it worked fine.  This seems like something that partners must have special API access to, but which never trickled down to us lowly admins and users.

On Monday, March 9, 2026 at 5:10:14 PM UTC-4 Jay Lee wrote:

I believe the API-only flow doesn't work and you still need to "validate" the domain in the admin console. That should be a quic thing if you've already created the DNS record and verified there.

Jay Lee

On Mon, Mar 9, 2026 at 5:07 PM Christopher Noon <> wrote:

Hello,

I'm trying to automate one of my GAM workflows, part of which is adding a secondary domain to GW and doing DNS (TXT record) verification.  Everything appears to work fine:

gam create domain

gam create verficiation testdomain.com

[verification strings are output as expected]

[DNS record is then updated manually using the proper string]

gam update verification testdomain.com txt

Verified!

Method: DNS_TXT
Expected Record: testdomain.com IN TXT google-site-verification=verifcationstringfromabove

DNS      Record: testdomain.com IN TXT google-site-verification=verifcationstringfromabove
[snip]
You can now add: testdomain.com or its subdomains as secondary or domain aliases of the Google Workspace Account: realdomain.com

According to the wiki there doesn't seem to be anything else to do on the GAM side, but when I look in the admin portal (Account -> Domains -> Manage), testdomain.com is there but still unverified.  As such, I am also unable to assign email addresses from testdomain.com, which makes sense if it's really not verified.  

What am I missing?  GAM version is GAM 7.34.13.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to