Administrators

Administrators

• Administrator roles documentation
• API documentation
• Definitions
• Display administrative privileges
• Display administrative roles
• Create an administrator
• Delete an administrator
• Display administrators

Administrator roles documentation

• https://support.google.com/a/answer/33325?ref_topic=4514341

API documentation

• https://developers.google.com/admin-sdk/directory/v1/reference/privileges
• https://developers.google.com/admin-sdk/directory/v1/reference/roles
• https://developers.google.com/admin-sdk/directory/v1/reference/roleAssignments

Definitions

<DomainName> ::= <String>(.<String>)+
<EmailAddress> ::= <String>@<DomainName>
<OrgUnitID> ::= id:<String>
<OrgUnitPath> ::= /|(/<String)+
<OrgUnitItem> ::= <OrgUnitID>|<OrgUnitPath>
<RoleAssignmentID> ::= <String>
<RoleItem> ::= id:<String>|uid:<String>|<String>
<UniqueID> ::= uid:<String>
<UserItem> ::= <EmailAddress>|<UniqueID>|<String>

Display administrative privileges

gam print privileges [todrive <ToDriveAttribute>*]
gam show privileges

Display administrative roles

gam print adminroles|roles [todrive <ToDriveAttribute>*] [privileges]
gam show adminroles|roles [todrive <ToDriveAttribute>*]

• privileges - show privileges associated with each role.

Create an administrator

gam create admin <UserItem> <RoleItem> customer|(org_unit <OrgUnitItem>)

• customer - The administrator can manage all organization units
• org_unit <OrgUnitItem> - The administrator can manage the specified organization unit

Delete an administrator

gam delete admin <RoleAssignmentId>

Display administrators

gam print admins [todrive <ToDriveAttribute>*] [user <UserItem>] [role <RoleItem>]
gam show admins [user <UserItem>] [role <RoleItem>]

By default, all administrators and roles are displayed.

• user <UserItem> - Display only this administrator
• role <RoleItem> - Display only administrators with this role