SuperAdmin where 2svEnrolled=FALSE

[Craig Harper]

Has anyone played with user "gam print" or "gam report" to display all SuperAdmin users who don't have 2svEnrolled?

Trying to find the initial list to pipe into another command to disable these accounts, then schedule this on a daily / weekly or so basis.

Thanks in advance for any pointers on the gam print / gam report line.

[Ross Scroggs]

Craig,

With Advanced GAM you could do the following:

gam print admins role _SEED_ADMIN_ROLE | gam redirect csv ./SuperAdmin2FA.csv multiprocess csv - gam user "~assignedToUser" print user fields isenrolledin2sv,isenforcedin2sv

Ross

--

ross.s...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/d3054625-2b69-4621-a2f9-3e4a12156bcfn%40googlegroups.com.

[Jay Lee]

It's quicker and cleaner to let Google do all the hard work:

gam print users query "isAdmin=true isEnforcedIn2Sv=false"

Jay Lee

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/EE11557D-A758-4D78-A27D-24385512A119%40gmail.com.

[Jay Lee]

Sorry, that should be:

gam print users query "isAdmin=true isEnrolledIn2Sv=false"

See:

https://developers.google.com/admin-sdk/directory/v1/guides/search-users

for help with user queries.

Jay Lee