From e88e2f0d7fd566629591a09740d577d08d6e6e33 Mon Sep 17 00:00:00 2001 From: Ross Scroggs Date: Fri, 8 Aug 2025 17:29:43 -0700 Subject: [PATCH] Doc updates --- wiki/Users-Drive-Permissions.md | 8 ++++---- wiki/Using-GAM7-with-a-delegated-admin-service-account.md | 5 ++++- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/wiki/Users-Drive-Permissions.md b/wiki/Users-Drive-Permissions.md index 4fd5ceec..3cfbf02c 100644 --- a/wiki/Users-Drive-Permissions.md +++ b/wiki/Users-Drive-Permissions.md @@ -400,7 +400,7 @@ gam config auto_batch_min 1 num_threads 20 redirect csv ./MyDriveShares.csv mult Delete those My Drive ACLs. ``` -gam config num_threads 20 redirect stdout ./DeleteMyDriveShares.txt multiprocess redirect stderr stdout csv MyDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permissions.id~~" +gam config num_threads 20 redirect stdout ./DeleteMyDriveShares.txt multiprocess redirect stderr stdout csv MyDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permission.id~~" ``` Add My Drive ACLs with a different email address and the same role. @@ -423,7 +423,7 @@ gam config num_threads 20 csv_input_row_filter "organizers:regex:^.+$" redirect Delete those Shared Drive ACLs. ``` -gam config num_threads 20 redirect stdout ./DeleteSharedDriveShares.txt multiprocess redirect stderr stdout csv SharedDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permissions.id~~" +gam config num_threads 20 redirect stdout ./DeleteSharedDriveShares.txt multiprocess redirect stderr stdout csv SharedDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permission.id~~" ``` Add Shared Drive ACLs with a different email address and the same role. @@ -447,7 +447,7 @@ gam config auto_batch_min 1 num_threads 20 redirect csv ./MyDriveShares.csv mult Delete those My Drive ACLs. ``` -gam config num_threads 20 redirect stdout ./DeleteMyDriveShares.txt multiprocess redirect stderr stdout csv MyDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permissions.id~~" +gam config num_threads 20 redirect stdout ./DeleteMyDriveShares.txt multiprocess redirect stderr stdout csv MyDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permission.id~~" ``` ### Shared Drives @@ -463,7 +463,7 @@ gam config num_threads 20 csv_input_row_filter "organizers:regex:^.+$" redirect Delete those Shared Drive ACLs. ``` -gam config num_threads 20 redirect stdout ./DeleteSharedDriveShares.txt multiprocess redirect stderr stdout csv SharedDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permissions.id~~" +gam config num_threads 20 redirect stdout ./DeleteSharedDriveShares.txt multiprocess redirect stderr stdout csv SharedDriveShares.csv gam user "~Owner" delete drivefleacl "~id" "id:~~permission.id~~" ``` diff --git a/wiki/Using-GAM7-with-a-delegated-admin-service-account.md b/wiki/Using-GAM7-with-a-delegated-admin-service-account.md index 1ec122d0..75363dfb 100644 --- a/wiki/Using-GAM7-with-a-delegated-admin-service-account.md +++ b/wiki/Using-GAM7-with-a-delegated-admin-service-account.md @@ -16,7 +16,10 @@ Delegated admin service accounts (DASA) are regular [GCP service accounts](https ## Disadvantages * DASA accounts can only be delegated admins. [If a task requires super admin rights to perform](https://support.google.com/a/answer/2405986#:~:text=Only%20super%20administrators%20can...), DASA accounts won’t be able to do it. -Not all Google Admin APIs work with DASA right now. For example, Google Vault API calls will fail with a DASA account; Classroom API calls do not return data. +Not all Google Admin APIs work with DASA right no: + * Google Vault API calls will fail with a DASA account + * Classroom API calls do not return data + * Cloud Identity Policies are not available * DASA is a delegated admin and can make Workspace / Cloud Identity admin API calls, it does not replace domain-wide delegation (DwD) when using GAM7 commands that interact with Gmail, Drive and Calendar user data. * GAM7 support for DASA is still experimental and some things may fail. Please report your findings to the [GAM group](https://groups.google.com/g/google-apps-manager).