Repeatable process for setting every Chrome Policy available

[Josh Donenberg]

Hi GAM group,

Goal(s):
Looking to move (or copy & paste) chrome policies from one OU to another. 

Find/Create a repeatable process to set every chrome policy in an OU to my specification.

What I’ve tried: 

Resource: Copy Simple and Complex Policies Set Directly in One OU to another OU

• I have manually set every available chrome policy in the admin console to a locally applied value. These changes were made in my “Template OU”
• For this Template OU, I ran the GAM-ADV command to display all policies and save to the file, ChromePolicies.csv
  • gam redirect csv ChromePolicies.csv print chromepolicies ou “/TemplateOU“ formatjson quotechar "'"
• Next, I used the following command to update each policy in my destination OU.
  • gam config csv_input_row_filter "direct:boolean:true" csv ChromePolicies.csv quotechar "'" gam update chromepolicy "~name" json "~JSON" ou “/DestinationOU”

After running these commands and looking back in the admin console, I noticed that only some policies were applied to the destination OU, while not all policies were applied. 

Interestingly, no policies were copied over to the Managed Guest Session device policies page. On the managed guest session page, all policies are showing as inherited.

Alternatively, I have began looking into creating a script to individually set each chrome policy to the desired value based on the Chrome policy schema table: 

I would love to open this topic up for discussion to see if anyone has experience with this or even encountered a solution/workaround to be able to set every chrome policy in an OU programmatically. 

All the best,

Josh

[Kim Nilsson]

I'm just going to lurk over here. Don't mind me. :-)

I know managing chrome policies is still a lot of hit and miss, but I'm interested in hearing what others have to say.

[Gabriel Clifton]

I have used that command with success using GAMADV. Now, the policy API is very hit and miss as to what actually gets copied.

[Josh Donenberg]

Hey GAM Group,

I wanted to quickly draw attention back to the specific issue I encountered while copying chrome policies between OUs. I want to focus on the problem in that the managed guest session policies are not being copied over to the destination OU. On the managed guest session page, all policies are shown as inherited.

Additionally, I would like to inquire about the Policy API and its reliability. It seems that when using the API to update chrome policies, the results seem to vary. Some policies are successfully applied, while others are not, leading to an inconsistent outcome.

If anyone has experience with using GAM for managing chrome policies policies or insights into the reliability of the Policy API, I would greatly appreciate your input. I'm particularly interested in understanding if there are any known workarounds or solutions to ensure that all chrome policies, including managed guest session policies, are consistently copied over when using the API.

Best,

Josh

[Ross Scroggs]

Josh,

Send me a Meet/Zoom invitation and I'll try to ehlp.

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/cb6229ce-8282-452d-9669-86107f9143edn%40googlegroups.com.

--

Ross Scroggs

ross.s...@gmail.com