Drive file permissions change issue

[Paul S]

Hello folks,

I am trying to change the owner on a user's drive file (sheet) using GAM7.  It changes the owner, but then the original owner can't be changed to viewer or removed. I ran the following commands to first change the owner and then to change the previous owner to viewer:

 gam user orig...@abc.org update drivefileacl 1PNlqJz4U2OB_TLF-DHD4 newo...@abc.org role owner            (works successfully)

 gam user newo...@abc.org update drivefileacl 1PNlqJz4U2OB_TLF-DHD4 orig...@abc.org role viewer              (throws the error below)

and get the following output:

Update Failed: Cannot modify a permission on an item to be less than the inherited access from a direct or indirect parent.

The file resides in user's drive on the root level. Am I doing something wrong?

Thank you for your help,

[Ross Scroggs]

Paul,

Send me a private Meet/Zoom invitation and I'll help.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

This e-mail communication (including attachments) contains confidential and privileged information which is intended for the individual(s) or entity(ies) to whom this e-mail is addressed. If you are not an intended recipient, you are notified that any forwarding, copying, disclosure, distribution, or use of this e-mail and any of its contents or attachments is prohibited. The recipient should check this e-mail and any attachments for the presence of malware. Twin Rivers Charter School has taken reasonable precautions to ensure no viruses are present in this e-mail, it accepts no liability for any loss or damage arising from the use of this e-mail or attachments.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/6e6f5143-39c2-4f31-ab2f-2a05726137c9n%40googlegroups.com.

[Paul S]

Ross,

Invitation sent to you. Sorry I had to go away for a while.

Thank you,

Paul

[Paul S]

Thank you for your help, Ross.

For the benefit of others with similar issue, read the Wiki on enforceexpansiveaccess. For me, adding the 'enforceexpansiveaccess false' to end did the trick. 

Using the transfer owner command should work better in certain situations than using this command so you don't have orphaned files. 

gam user newo...@abc.org update drivefileacl 1PNlqJz4U2OB_TLF-DHD4 orig...@abc.org role viewer enforceexpansiveaccess false