Enable new GAM 7 APIs

145 views
Skip to first unread message

Steven Flanagan

unread,
Aug 17, 2026, 3:44:49 PMAug 17
to GAM for Google Workspace
We updated our GAMAdv install to GAM 7 using the copy / replace method.
We see there are several additional API scopes available that Check Service account shows as failed.
What is the process to get these enabled and passing?

Ross Scroggs

unread,
Aug 17, 2026, 3:48:36 PMAug 17
to google-ap...@googlegroups.com
gam user us...@domain.com update serviceaccount

Select the new scopes if not already selected

Ross
----
Ross Scroggs








The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential or privileged material. Any review, distribution, or other unauthorized use of the information by persons or entities other than the intended recipient is prohibited. If you received this communication in error, please contact the sender and delete the material from any computer.


*** Arvest Confidential ***


--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/193894b1-1fb7-4d2f-8f8c-326cfbe17301n%40googlegroups.com.

Steven Flanagan

unread,
Aug 17, 2026, 3:50:02 PMAug 17
to GAM for Google Workspace
The API scopes don't have to be added to the GCP project for GAM first?

Ross Scroggs

unread,
Aug 17, 2026, 3:52:48 PMAug 17
to google-ap...@googlegroups.com

Steven Flanagan

unread,
Aug 17, 2026, 3:56:53 PMAug 17
to GAM for Google Workspace
Sorry, I don't mean to be obtuse, I just want to make sure we do it correctly.
We do GAM update project to get the APIs added to the project, then do GAM someuseracct at domain.com to get the options to enable the new scopes.  Is that correct?
If we have our GCP team add the scopes before hand does this create an issue?
Also, do the Oauth credentials have to be recreated?

Ross Scroggs

unread,
Aug 17, 2026, 4:05:01 PMAug 17
to google-ap...@googlegroups.com
If new APIs get added either by gam update project or by the GCP team, do the following
and enable any new APIs that you want to access.
gam oauth create
gam user us...@domain.com update serviceaccount

Ross
----
Ross Scroggs


Steven Flanagan

unread,
Aug 18, 2026, 10:54:15 AMAug 18
to GAM for Google Workspace

Ross Scroggs

unread,
Aug 18, 2026, 10:59:54 AMAug 18
to google-ap...@googlegroups.com
Those are serviceaccount scopes, do: gam user us...@domain.com update serviceaccount

Ross
----
Ross Scroggs


Steven Flanagan

unread,
Aug 18, 2026, 11:08:24 AMAug 18
to GAM for Google Workspace
Does it matter what user we use in that command?

Steven Flanagan

unread,
Aug 18, 2026, 11:09:07 AMAug 18
to GAM for Google Workspace
And do we run that before Oauth create?

Ross Scroggs

unread,
Aug 18, 2026, 11:21:08 AMAug 18
to google-ap...@googlegroups.com
Do oauth create first, then update serviceaccont
Any vaild user email address can be used.

Ross
----
Ross Scroggs


Steven Flanagan

unread,
Aug 18, 2026, 11:30:47 AMAug 18
to GAM for Google Workspace
So when we run OAuth Create, we do not see those scopes listed to choose nor do we see them added in the Google Authentication popup.
Is this normal?

Ross Scroggs

unread,
Aug 18, 2026, 11:49:02 AMAug 18
to google-ap...@googlegroups.com
gam oauth create deals with client access scopes,things a super admin does.
gam user us...@domain.com update serviceaccount deals with serviceaccount scopes, things done on behalf of a user.

They are two separate workds.

Ross



--

Steven Flanagan

unread,
Aug 19, 2026, 9:53:57 AMAug 19
to GAM for Google Workspace
Thank you,

With the information in your answers I was able to figure out the steps necessary to do what we were wanting.


Reply all
Reply to author
Forward
0 new messages