Actor for ACL changes made by GAM

53 views
Skip to first unread message

Google Admin

unread,
Sep 11, 2023, 3:48:34 PM9/11/23
to google-ap...@googlegroups.com, Ross Scroggs
Hi Ross,

I am running the following commands to change ACL for thousands of files within our Google Workspace instance. The ACL change looks good, however, while running the second command the actor for these changes isn't the file owner but someone else within the organisation for many of these file which is quite confusing. Do you know why the owner won't be the actor in this case?

First Command:
Extract all files with visibility "domainwithlink"

gam redirect stdout ./createsyflsharesyfl.txt multiprocess redirect stderr stdout csv shareallsyfl.csv gam user "~Owner" add drivefileacl "~id" domain "~audience" role "~permission.role" allowfilediscovery "~permission.allowFileDiscovery"

Second Command:
To change visibility from entire Org to a Target Audience.

gam redirect stdout ./createsyflsharesyflnew.txt multiprocess redirect stderr stdout csv  shareallsyfl.csv  gam user "~Owner" add drivefileacl "~id" domain "~audience" role "~permission.role" allowfilediscovery "~permission.allowFileDiscovery"

Regards.

Google Admin

unread,
Sep 11, 2023, 3:52:22 PM9/11/23
to google-ap...@googlegroups.com, Ross Scroggs
Hello,

Correct command for first bit:

gam redirect csv ./shareallsyfl.csv all users print filelist fields id,name,mimetype,basicpermissions pm type domain domain domain.com em pmfilter oneitemperrow addcsvdata audience XXXXXXX.audience.googledomains.com query "(visibility='domainCanFind' or visibility='domainWithLink')"
Reply all
Reply to author
Forward
0 new messages