How can I see the permissions a custom admin role has ?
90 views
Skip to first unread message
Nadia Marina Ramasawmy
Mar 7, 2023, 9:34:18 AM3/7/23
to GAM for Google Workspace
In other words - I need to list that custom admin role is allowed to do:
- read OUs
- delete Users globally
- read Groups
Ross Scroggs
Mar 7, 2023, 10:21:05 AM3/7/23
to google-ap...@googlegroups.com
Nadia,
With Advanced GAM you can do:
gam show adminroles privileges
Find the role of interest and yo can verify its privileges
Ross
--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/e7a03f34-019a-477d-b342-d376367299d2n%40googlegroups.com.
Ross Scroggs
Ross Scroggs
Mar 7, 2023, 9:40:47 PM3/7/23
to google-ap...@googlegroups.com
Nadia,
With the latest version of Advanced GAM you can do:
$ gam info adminrole TestRole privileges
Role: TestRole
roleId: 597407939166247
roleDescription:
isSuperAdminRole: False
isSystemRole: False
rolePrivileges: 3
privilegeName: USERS_DELETE
serviceId: 00haapch16h1ysv
privilegeName: GROUPS_RETRIEVE
serviceId: 00haapch16h1ysv
privilegeName: ORGANIZATION_UNITS_RETRIEVE
serviceId: 00haapch16h1ysv
Ross
Reply all
Reply to author
Forward
0 new messages