Error when trying to update GAL status

[Ben Strawson]

Hi,

I'm trying to update our GAL using GAM. When I try the following command:

gam user us...@example.com update user gal off

I receive the error:

User: us...@example.com, Update Failed: Not Authorized to access this resource/api

Any ideas?

Version info:

gam version
GAMADV-XTD3 6.64.08 - https://github.com/taers232c/GAMADV-XTD3 - pyinstaller
Ross Scroggs <ross.s...@gmail.com>
Python 3.11.5 64-bit final
MacOS Sonoma 14.0 arm64
Path: /Users/ben/bin/gamadv-xtd3
Config File: /Users/ben/.gam/gam.cfg, Section: DEFAULT, customer_id: my_customer, domain:
Time: 2023-10-09T20:36:00+00:00

OAuth info:
gam oauth info
Client OAuth2 File: /Users/ben/.gam/oauth2.txt
Client ID: <clientID>
Scopes: 50
  https://apps-apis.google.com/a/feeds/compliance/audit/
  https://sites.google.com/feeds
  https://www.google.com/m8/feeds
  https://www.googleapis.com/auth/admin.chrome.printers
  https://www.googleapis.com/auth/admin.contact.delegation
  https://www.googleapis.com/auth/admin.datatransfer
  https://www.googleapis.com/auth/admin.directory.customer
  https://www.googleapis.com/auth/admin.directory.device.chromebrowsers
  https://www.googleapis.com/auth/admin.directory.device.chromeos
  https://www.googleapis.com/auth/admin.directory.device.mobile
  https://www.googleapis.com/auth/admin.directory.domain
  https://www.googleapis.com/auth/admin.directory.group
  https://www.googleapis.com/auth/admin.directory.orgunit
  https://www.googleapis.com/auth/admin.directory.resource.calendar
  https://www.googleapis.com/auth/admin.directory.rolemanagement
  https://www.googleapis.com/auth/admin.directory.user
  https://www.googleapis.com/auth/admin.directory.user.security
  https://www.googleapis.com/auth/admin.directory.userschema
  https://www.googleapis.com/auth/admin.reports.audit.readonly
  https://www.googleapis.com/auth/admin.reports.usage.readonly
  https://www.googleapis.com/auth/apps.groups.migration
  https://www.googleapis.com/auth/apps.groups.settings
  https://www.googleapis.com/auth/apps.licensing
  https://www.googleapis.com/auth/apps.order
  https://www.googleapis.com/auth/calendar
  https://www.googleapis.com/auth/chrome.management.policy
  https://www.googleapis.com/auth/chrome.management.reports.readonly
  https://www.googleapis.com/auth/chrome.management.telemetry.readonly
  https://www.googleapis.com/auth/classroom.announcements
  https://www.googleapis.com/auth/classroom.courses
  https://www.googleapis.com/auth/classroom.coursework.students
  https://www.googleapis.com/auth/classroom.courseworkmaterials
  https://www.googleapis.com/auth/classroom.guardianlinks.students
  https://www.googleapis.com/auth/classroom.profile.emails
  https://www.googleapis.com/auth/classroom.profile.photos
  https://www.googleapis.com/auth/classroom.rosters
  https://www.googleapis.com/auth/classroom.topics
  https://www.googleapis.com/auth/cloud-identity.groups
  https://www.googleapis.com/auth/cloud-identity.inboundsso
  https://www.googleapis.com/auth/cloud-identity.orgunits
  https://www.googleapis.com/auth/cloud-identity.userinvitations
  https://www.googleapis.com/auth/contacts
  https://www.googleapis.com/auth/devstorage.read_write
  https://www.googleapis.com/auth/directory.readonly
  https://www.googleapis.com/auth/ediscovery
  https://www.googleapis.com/auth/pubsub
  https://www.googleapis.com/auth/siteverification
  https://www.googleapis.com/auth/userinfo.email
  https://www.googleapis.com/auth/userinfo.profile
  openid
Google Workspace Admin: Ben.St...@futureplatforms.com
Expires: 2023-10-09T22:01:52+00:00

futureplatforms.com

Future Platforms Ltd is a company registered in England and Wales. Registered number: 04056500.

Registered office: West Bush House, Hailey Lane, Hertford Heath, Herts, SG13 7NY, United Kingdom.

[Maj Marshall Giguere]

$> gam update user us...@example.com gal off

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/46a9fada-c70b-4a97-adcc-feab639ce351n%40googlegroups.com.

[Ben Strawson]

Thanks for your response.

I've tried this with a test user as below, not still getting the same error:

$ gam print gal | grep tess
Getting all Contacts for futureplatforms.com
Got 186 Contacts for futureplatforms.com...
futureplatforms.com,C.a762654b7d2e7acf,Tess Tuser,,,,,,,,1,tess....@example.com,primary,work,Tuser,Tess,,,,,,,,,,,,,,2023-10-10T07:56:57Z

$ gam update user tess....@example.com gal off
User: tess....@example.com, Update Failed: Not Authorized to access this resource/api

[Ross Scroggs]

In a GAL listing, the ContactID column contains three type:

P.1234 - A domain user

G.1234 - A domain group

C.1234 - A domain contact

You can turn gal off for users and groups, not domain contacts.

Send me a Meet/Zoom invitation and we can discuss

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/8e3839d0-c192-425b-88c5-758029723209n%40googlegroups.com.