Revoke Workspace licence from all Admin Users

[Patric Wenk]

Hello all,

I have a very specific scenario that I would like to map.

My goal is to have all existing users with admin rights have their current workspace license revoked and replaced with a Cloud Identity Free.

My idea would be to first get a list that includes all users that have an admin role and then, using that list, revoke the workspace licenses.

Is it possible to do this via GAM?

Best Regards,

Patric

[Jay Lee]

Why do this? Admins without a Workspace license will not be able to use Workspace admin tools like Security investigation and Vault. I don't recommend it.

Having said that, try:

gam print admins

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/504a461d-8507-45c9-8932-1e3856217556n%40googlegroups.com.

[Patric Wenk]

Hi Jay,

thanks for your quick reply.

Most of the Admins are role Admins and not supposed to do this anyway. 

I'd reassign the workspace licence by hand to the five super admins afterwards.

gam print admins worked fine, thanks a lot for this.

Sorry for the questions, but I'm quite new to GAM and I'm currently trying to figure ou the possibilities.

How to I revoke the Workspace licence from these user? I can get the license type with GAM print licenses, but how to I revoke it?

Best Regards,

Patric

[Brian Kim]

Hi Patric,

You can pipe it to a next command, provided that your automatic licensing is turned off in the OU that these admins are in.

gam print admins | gam config num_threads 1 csv - gam user "~assignedToUser" delete license <licenseType>

Enterprise License Manager API is slow. If you are using advanced GAM, you can limit the number of threads (underlined)

[Patric Wenk]

Hi Brian,

thanks a lot for you anwser, this was, was I was looking for.

But also, disableing the automatic license assignment was, what I wanted to prevent. We're adding users via GCDS and need to have the automatic assignment.

I'm gonna think about something, may I'll put all Admins in their own OUs and disable the automatic assignment.

Best Regards,

Patric

[Jay Lee]

Put the admins in a sub-org and disable auto-assignment for that OrgUnit.

Jay Lee

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/38053fa8-6cfa-49fc-97da-bf72d16925d7n%40googlegroups.com.