Find "last password change date" for specific user

284 views
Skip to first unread message

jco3

unread,
Apr 15, 2024, 12:36:48 PM4/15/24
to GAM for Google Workspace
Find "last password change date" for specific user

I know that I can get the entire list
https://sites.google.com/jis.edu.bn/gam-commands/people/users#h.x4u0iflx8man

but is it possible to retrieve this info for just a specific user?

Ross Scroggs

unread,
Apr 15, 2024, 1:23:40 PM4/15/24
to google-ap...@googlegroups.com
Are you trying to find when the admin changes the password or the user changed the password?

Ross
----
Ross Scroggs



--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/b2d86468-a8be-42f4-95f9-a4c250c62b49n%40googlegroups.com.

Ross Scroggs

unread,
Apr 15, 2024, 1:29:10 PM4/15/24
to google-ap...@googlegroups.com
To find when  a user changed their password do:

gam report login user us...@domain.com event password_edit

----
Ross Scroggs



On Apr 15, 2024, at 9:36 AM, jco3 <john.o...@cabrillopointacademy.org> wrote:

jco3

unread,
Apr 15, 2024, 2:08:09 PM4/15/24
to GAM for Google Workspace
Thanks for that.  But, I'm looking for Admin change.

We change password when Staff go on Leave or when Term w Manager access (leave account intact).

Ross Scroggs

unread,
Apr 15, 2024, 2:37:25 PM4/15/24
to google-ap...@googlegroups.com

# This should work but doesn't, it doesn't work in the API explorer either                                                                                                                                                                   

$ gam report admin user test...@domain.com event CHANGE_PASSWORD

Getting Activities for test...@domain.com

Got 0 Activities...


# Get all CHANGE_PASSWORD events and have GAM filter                                                                                                                                                                                         

$ gam config csv_output_row_filter "USER_EMAIL:text=test...@domain.com" report admin user all event CHANGE_PASSWORD

Getting Reports for all users

Got 14 Reports...

name,USER_EMAIL,actor.callerType,actor.email,actor.profileId,id.applicationName,id.customerId,id.time,id.uniqueQualifier,ipAddress,type

CHANGE_PASSWORD,test...@domain.com,USER,ad...@domain.com,108599625550854546789,admin,C03pmmxxx,2024-04-11T15:02:52-07:00,-9204075403740677620,104.59.221.234,USER_SETTINGS



Ross
----
Ross Scroggs



Ross Scroggs

unread,
Apr 15, 2024, 3:50:07 PM4/15/24
to google-ap...@googlegroups.com
I figured it out:

gam report admin event CHANGE_PASSWORD filter "USER_EMAIL==test...@domain.com"


Ross

----
Ross Scroggs


jco3

unread,
Apr 17, 2024, 1:27:26 PM4/17/24
to GAM for Google Workspace
Got it.  Thanks.  That works!  Appreciate it Ross.  Just auditing some of our offboarding.
Reply all
Reply to author
Forward
0 new messages