how to list accounts with Vault User admin role for an OU

[Michael Swartz]

Hello,

I need to list the accounts with the Vault User admin role assigned to them for an OU.

Is there an easy way to do this?

Thank you,

Michael

[Ross Scroggs]

See: https://github.com/GAM-team/GAM/wiki/Administrators#display-administrative-roles

gam print roles

Find the roleName of interest

See: https://github.com/GAM-team/GAM/wiki/Administrators#display-administrators

gam print admins role <roleName>

Ross

----

Ross Scroggs

Ross.S...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/41c9d046-3890-4506-ac2e-5dcdb25b2993n%40googlegroups.com.

[Michael Swartz]

Hello,

So I typed in 

gam print admins role "vault user" todrive

and it started processing.  It indicated it got 270 Admin Role assignments...

then error:  "ERROR 400: InvalidInput - Invalid Input: Bad request for"

What part of that command is incorrect?

Thanks again for your help.

Michael

[Michael Swartz]

So here is how it went.

First I tried

gam print admins role "vault user" todrive

and it started but failed with an error

So I noticed I could search by roleID

I ran

gam print roles todrive

to get a list of admin roles defined in our domain

Then I ran

gam print admin role id:4917851638988823 (which is the Vault User admin roleID in our domain) todrive

That worked.  It had a column for scope type which was either ORG_UNIT when then showed the OU that rights were assigned for, or CUSTOMER and nothing in the OU column which indicated that the person had the role assigned to the Vault data in the entire domain.  

I could easily sort by OU and then by "assignedToUser" which is the email address of the account with the assignment.

That gave me the data I needed and actually I learned a couple things from this exercise.

Thank you Ross as always for your help.