Google now allows GCP service accounts to be granted delegated admin status for a G Suite domain.
To use this, admins can grant the service account email address delegated admin rights in the admin console
and then set some environment variables for GAM to use:
OAUTHFILE=oauth2service.json
GA_DOMAIN=example.com # your primary domain name in Google
CUSTOMER_ID=1d80dfc # admin.google.com > Account > Account settings > Customer ID
This allows pulling md5 and sha-1 passwords stored in OpenLDAP format into G Suite. This example commands set user password to "helloworld".
gam update user user@example.com password "{SHA}at+xg6SiyUovktq1redipHiJpaE=" base64-sha1
* include includeDerivedMembership option
in command gam course xxx sync students|teachers group yyyy
I add alternative option group_inde (INclude DErived)
* Avoid interference of new includeDerivedMembership
taers232c suggestion to avoid unexpected interference
```
$ gam calendar testsimple@rdschool.org addevent start 2020-05-17T08:00:00-07:00 end 2020-05-17T09:00:00-07:00 recurrence "RRULE:FREQ=WEEKLY;WKST=SU;COUNT=13;BYDAY=MO" summary "Monday Morning Meeting"
Traceback (most recent call last):
File "/Users/Ross/Documents/GoogleApps/GAMO/gam.py", line 11, in <module>
main(sys.argv)
File "/Users/Ross/Documents/GoogleApps/GAMO/gam/__main__.py", line 45, in main
sys.exit(gam.ProcessGAMCommand(sys.argv))
File "/Users/Ross/Documents/GoogleApps/GAMO/gam/__init__.py", line 14413, in ProcessGAMCommand
gapi_calendar.addOrUpdateEvent('add')
File "/Users/Ross/Documents/GoogleApps/GAMO/gam/gapi/calendar.py", line 350, in addOrUpdateEvent
sendUpdates, body = getEventAttributes(i, calendarId, cal, body, action)
File "/Users/Ross/Documents/GoogleApps/GAMO/gam/gapi/calendar.py", line 537, in getEventAttributes
if not timeZone:
UnboundLocalError: local variable 'timeZone' referenced before assignment
```
