Gam ADV command to block users on mobile devices from using Google apps

[Brian Evans]

Hi all,

I have a command gam block mobile <mobile id> but this does not seem to work.

I am trying to find a command that will allow me to block mobile devices from using Google apps. Is there such a command?

I have the below, but not sure what to pick out of it to be able to run what I need.

gam update mobile <mobile id>|query:<query> action wipe|approve|block| cancel_remote_wipe_then_activate| cancel_remote_wipe_then_block [model <String>] [os <String>] [useragent <String>] gam info mobile <mobile id> gam print mobile [query <query>][basic|full] [orderby deviceid|email|lastsync| model|name|os|status|type] [ascending|descending] [todrive] gam delete mobile <mobile id> - This is what I think it will be, just replacing delete with block?

Many thanks,

Brian

[Jay Lee]

What is your use case in blocking access? Lost device? User's that shouldn't be allowed to use mobile devices?

Jay Lee

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/78786324-2070-49ce-91c6-b7abcf743717n%40googlegroups.com.

[Brian Evans]

We are looking to block phones below a certain Android and iOS version as CAA is not working the way we expect at the moment, so we are looking for a manual plan B to block mobile devices that are below a certain version from accessing Google apps.

Thanks,

Brian

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/h_h9Ys46MEs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp_QcY6_bs0FsJ2pRdDTxoakZyxCCtsO0tKm%2BCpktGP-qg%40mail.gmail.com.

[Jay Lee]

What's the issue with CAA? CAA would be the more dynamic way to handle this and introduced no external dependencies.

Id suggest using the device commands as opposed to the older mobile commands. The older mobile commands do not work with company-owned devices.

https://github.com/jay0lee/GAM/wiki/Managing-Devices#action-a-device-user-delete-wipe-cancel-wipe-approve-or-block

Jay

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAEG57pV3d5vZ6Mdd3AV5BCs4uxk75mdyQqHcs-qdv8KqYdK12Q%40mail.gmail.com.

[Brian Evans]

There is a bug at the minute where CAA will only work when you specify the windows and mac policies. This is incorrect and a Google engineer is looking at this.

So to answer my question, there isnt a command out there that will allow me to block older versions of phones from accessing Google apps?

Thanks,

Brian

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp9%2BWZuDgJCQQ%2BS7s69rtc7e5C8m4EAs%3DSgpXpbQg1e8ug%40mail.gmail.com.

[Kim Nilsson]

That's interesting.

Forbidding all but company owned phones doesn't work? Using Advanced Mobile Management?

I don't think tere is a way GAM can block it before the fact as GAM doesn't manage those settings.

But it seems as you can block it afterwards with the first command in your list?