Activity Log for GAM commands

3,301 views
Skip to first unread message

Brad Graham

unread,
Feb 13, 2015, 2:09:17 PM2/13/15
to google-ap...@googlegroups.com
Is it possible to report on the GAM commands that are issued against your domain?


Jay Lee

unread,
Feb 13, 2015, 3:07:47 PM2/13/15
to google-ap...@googlegroups.com
No, anyone can run GAM on any computer so there's no forced way to log/audit commands. However, the admin audit log should serve as a guide of admin actions:

gam report admin


Jay Lee

On Fri, Feb 13, 2015 at 2:09 PM, Brad Graham <gra...@vmcmail.com> wrote:
Is it possible to report on the GAM commands that are issued against your domain?


--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/a4a5db41-7da3-424b-b2f8-e855060c5b43%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Schmidt, Randal

unread,
Feb 13, 2015, 5:00:45 PM2/13/15
to google-ap...@googlegroups.com
It might be a wise enhancement.  We could have a config file that instructs GAM where to log incoming commands to and when they were executed and possibly the IP address of the source.  In the latest GCon, GAM was mentioned as a powerful tool but also a security risk.  If an admin could see the log of GAM requests, he/she could monitor its use.


Randy Schmidt

Information Technology
System Administrator Principal
-----------------------------------------------------------
Direct 641-357-2710 ext 2229
TeamQuest Corporation
www.teamquest.com
------------------------------------------------------------
Specializing in IT Capacity Management

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp8tCb9NeyM_p5ZQmtohCzLBij-A%2B-prUO5Pn9Y4%2ByMKKA%40mail.gmail.com.

Mark Fratto

unread,
May 6, 2020, 9:42:46 AM5/6/20
to GAM for G Suite
I did this in linux and send all to our syslog server manageengine eventlog analyzer.


On Friday, February 13, 2015 at 4:00:45 PM UTC-6, Randal Schmidt wrote:
It might be a wise enhancement.  We could have a config file that instructs GAM where to log incoming commands to and when they were executed and possibly the IP address of the source.  In the latest GCon, GAM was mentioned as a powerful tool but also a security risk.  If an admin could see the log of GAM requests, he/she could monitor its use.


Randy Schmidt

Information Technology
System Administrator Principal
-----------------------------------------------------------
Direct 641-357-2710 ext 2229
TeamQuest Corporation
www.teamquest.com
------------------------------------------------------------
Specializing in IT Capacity Management

On Fri, Feb 13, 2015 at 2:07 PM, Jay Lee <jay...@gmail.com> wrote:
No, anyone can run GAM on any computer so there's no forced way to log/audit commands. However, the admin audit log should serve as a guide of admin actions:

gam report admin


Jay Lee

On Fri, Feb 13, 2015 at 2:09 PM, Brad Graham <gra...@vmcmail.com> wrote:
Is it possible to report on the GAM commands that are issued against your domain?


--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

Mark Fratto

unread,
May 6, 2020, 9:52:39 AM5/6/20
to GAM for G Suite
Example attached

Untitled.jpg

Markus Frömmel

unread,
May 29, 2020, 9:39:53 AM5/29/20
to GAM for G Suite
Hi Mark, 

this looks very interesting!
would you mind sharing some more details how you set it up?

Cheers, Markus

Kranthi Pulukuri

unread,
Jun 1, 2020, 4:09:09 PM6/1/20
to GAM for G Suite
Dear Lee,

I would like to bring to your notice the issue that we've been facing while giving access the access to GAM from my G-suite. I had listed the error below for your reference. 

"Authorization Error: Error 400: admin_policy_enforced
Access to your account data is restricted by policies within your organization. Please contact the administrator for domainname.in for more information" 

I would like to seek your advice on this situation and take it further to run some important commands on urgent basis. Hope you'll be able help us with the same. Looking forward to your reply. Many thanks in advance.

On Saturday, February 14, 2015 at 1:37:47 AM UTC+5:30, Jay Lee wrote:
No, anyone can run GAM on any computer so there's no forced way to log/audit commands. However, the admin audit log should serve as a guide of admin actions:

gam report admin


Jay Lee

On Fri, Feb 13, 2015 at 2:09 PM, Brad Graham <gra...@vmcmail.com> wrote:
Is it possible to report on the GAM commands that are issued against your domain?


--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

Jay Lee

unread,
Jun 1, 2020, 4:14:33 PM6/1/20
to GAM for G Suite
I already answered you on the first thread you created on this topic:


please don't start / reply on multiple threads for your issue, it leads to confusion and duplicate posting / answering.

Jay
Reply all
Reply to author
Forward
0 new messages