Updated print filecounts and update filerevisions

Added build for ubuntu-22.04, it is my most common Linux download

.github/workflows/build.yml

@@ -31,68 +31,68 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: ubuntu-20.04
+          - os: ubuntu-22.04
             jid: 1
             goal: build
             arch: x86_64
             openssl_archs: linux-x86_64
-          - os: [self-hosted, linux, arm64]
+          - os: ubuntu-20.04
             jid: 2
             goal: build
+            arch: x86_64
+            openssl_archs: linux-x86_64
+          - os: [self-hosted, linux, arm64]
+            jid: 3
+            goal: build
             arch: aarch64
             openssl_archs: linux-aarch64
           - os: ubuntu-20.04
-            jid: 3
+            jid: 4
             goal: build
             arch: x86_64
             openssl_archs: linux-x86_64
             staticx: yes
           - os: [self-hosted, linux, arm64]
-            jid: 4
+            jid: 5
             goal: build
             arch: aarch64
             openssl_archs: linux-aarch64
             staticx: yes
           - os: macos-12
-            jid: 5
+            jid: 6
             goal: build
             arch: x86_64
             openssl_archs: darwin64-x86_64
           - os: macos-14
-            jid: 6
+            jid: 7
             goal: build
             arch: aarch64
             openssl_archs: darwin64-arm64
-          - os: macos-14
-            jid: 7
-            goal: build
-            arch: universal2
-            openssl_archs: darwin64-arm64 darwin64-x86_64
           - os: windows-2022
-            jid: 8
+            jid: 9
             goal: build
             arch: Win64
             openssl_archs: VC-WIN64A
           - os: ubuntu-22.04
             goal: test
             python: "3.8"
-            jid: 9
-            arch: x86_64
-          - os: ubuntu-22.04
-            goal: test
-            python: "3.9"
             jid: 10
             arch: x86_64
           - os: ubuntu-22.04
             goal: test
-            python: "3.10"
+            python: "3.9"
             jid: 11
             arch: x86_64
           - os: ubuntu-22.04
             goal: test
-            python: "3.11"
+            python: "3.10"
             jid: 12
             arch: x86_64
+          - os: ubuntu-22.04
+            goal: test
+            python: "3.11"
+            jid: 8
+            arch: x86_64
 
     steps:
 
@@ -115,7 +115,7 @@ jobs:
         with:
           path: |
             cache.tar.xz
-          key: gam-${{ matrix.jid }}-20240828
+          key: gam-${{ matrix.jid }}-20240916
 
       - name: Untar Cache archive
         if: matrix.goal == 'build' && steps.cache-python-ssl.outputs.cache-hit == 'true'
@@ -353,8 +353,7 @@ jobs:
       - name: Run OpenSSL
         if: matrix.goal == 'build'
         run: |
-          "${OPENSSL_INSTALL_PATH}/bin/openssl" version
-          "${OPENSSL_INSTALL_PATH}/bin/openssl" version -f
+          "${OPENSSL_INSTALL_PATH}/bin/openssl" version -a
           file "${OPENSSL_INSTALL_PATH}/bin/openssl"
 
       - name: Get latest stable Python source
@@ -450,6 +449,7 @@ jobs:
       - name: Run Python
         run: |
           "${PYTHON}" -V
+          "${PYTHON}" -c "import ssl; print(f'Using {ssl.OPENSSL_VERSION}')"
 
       - name: Upgrade pip, wheel, etc
         run: |
@@ -530,6 +530,8 @@ jobs:
           fi
           mkdir -p -v "${gampath}"
           if [[ "${RUNNER_OS}" == "macOS" ]]; then
+            # brew OpenSSL gets picked up by PyInstaller breaking our self-compiled version
+            brew uninstall --ignore-dependencies openssl
             export gampath=$($PYTHON -c "import os; print(os.path.realpath('$gampath'))")
           elif [[ "${RUNNER_OS}" == "Windows" ]]; then
             # Work around issue where PyInstaller picks up python3.dll from other Python versions
@@ -545,13 +547,18 @@ jobs:
           export distpath="./dist/gam"
           export gampath="${distpath}"
           "${PYTHON}" -m PyInstaller --clean --noconfirm --distpath="${distpath}" gam.spec
+          echo "WARNINGS FROM build/gam/warn-gam.txt"
           cat build/gam/warn-gam.txt
+          echo "Analysis FROM build/gam/Analysis-00.toc"
+          cat build/gam/Analysis-00.toc
+          echo "EXE data FROM build/gam/EXE-00.toc"
+          cat build/gam/EXE-00.toc
           if [ -x "$(command -v realpath)" ]; then
-               realpath=realpath
-             else
-               brew install coreutils
-               realpath=grealpath
-             fi
+            realpath=realpath
+          else
+            brew install coreutils
+            realpath=grealpath
+          fi
           export gam=$(realpath "$gam")
           if [[ "${RUNNER_OS}" == "Windows" ]]; then
             export gam=$(cygpath -w "$gam")
@@ -841,12 +848,14 @@ jobs:
           $gam user $gam_user show shareddrives asadmin
           $gam user $gam_user update shareddrive "${driveid}" ou "aaaGithub Actions" # so we can delete our OU...
           $gam user $gam_user delete shareddrive "${driveid}" nukefromorbit
+          ssoprofile=$($gam config debug_level 1 create inboundssoprofile name "El Goog ${newbase}" loginurl https://www.google.com logouturl https://www.google.com changepasswordurl https://www.google.com entityid ElGoog return_name_only)
+          if [ ${ssoprofile} != 'inProgress' ]; then
+            $gam create inboundssocredential profile "id:${ssoprofile}" generate_key
+            #$gam create inboundssoassignment profile "id:${ssoprofile}" orgunit "${newou}" mode SAML_SSO
+            #$gam delete inboundssoassignment "orgunit:${newou}"
+            $gam delete inboundssoprofile "id:${ssoprofile}"
+          fi
           echo "printer model count:"
-          ssoprofile=$($gam create inboundssoprofile name "El Goog ${newbase}" loginurl https://www.google.com logouturl https://www.google.com changepasswordurl https://www.google.com entityid ElGoog return_name_only)
-          $gam create inboundssocredential profile "id:${ssoprofile}" generate_key
-          #$gam create inboundssoassignment profile "id:${ssoprofile}" orgunit "${newou}" mode SAML_SSO
-          #$gam delete inboundssoassignment "orgunit:${newou}"
-          $gam delete inboundssoprofile "id:${ssoprofile}"
           $gam print printermodels | wc -l
           $gam print printers
           printerid=$($gam create printer displayname "${newbase}" uri ipp://localhost:631 driverless description "made by $(gam_user)" ou "${newou}" nodetails | awk '{print substr($2, 1, length($2)-1)}')

docs/Authorization.md

@@ -1088,6 +1088,9 @@ You can limit both client and service account access.
 You can repeat these steps if you want to configure multiple limited users;
 substitute a unique value for `limited` in each of the steps.
 
+In the Admin console, define a new Admin role with the desired privileges,
+assign it to the limited user and indicate whether it is for all Org Units or a specific Org Unit.
+
 On your computer, perform these initial steps:
 
 Make a subdirectory `limited` under the directory specified in `gam.cfg config_dir`

docs/Basic-Items.md

@@ -391,6 +391,8 @@
 <Marker> ::= <String>
 <MatterItem> ::= <UniqueID>|<String>
 <MatterState> ::= open|closed|deleted
+<MeetConferenceName> ::= conferenceRecords/<String>
+<MeetSpaceName> ::= spaces/<String> | <String>
 <MessageContent> ::=
         (message|textmessage|htmlmessage <String>)|
         (file|textfile|htmlfile <FileName> [charset <Charset>])|

docs/CSV-Output-Filtering.md

@@ -122,7 +122,7 @@ where you get more columns than is desirable.
 * `csv_output_header_filter` - Used to select the column headers to include in the output
 * `csv_output_header_drop_filter` - Used to select the column headers to exclude from the output
 
-Typically, you would use the option that involes typing the fewest column names but both options can be used.
+Typically, you would use the option that involves typing the fewest column names but both options can be used.
 When both options are used, `csv_output_header_drop_filter` is processed first, then `csv_output_header_filter`.
 
 Field names are specified by regular expressions; at its simplest, you specify a complete field name.

docs/Chrome-Policies.md

@@ -14,6 +14,10 @@
   - [Display Chrome policies](#display-chrome-policies)
   - [Copy simple policies set directly in one OU to another OU](#copy-simple-policies-set-directly-in-one-ou-to-another-ou)
   - [Copy simple and complex policies set directly in one OU to another OU](#copy-simple-and-complex-policies-set-directly-in-one-ou-to-another-ou)
+  - [Copy simple and complex policies set directly in one OU to multiple other OUs](#copy-simple-and-complex-policies-set-directly-in-one-ou-to-multiple-other-ous)
+  - [Copy simple policies in one Group to another Group](#copy-simple-policies-in-one-group-to-another-group)
+  - [Copy simple and complex policies in one Group to another Group](#copy-simple-and-complex-policies-in-one-group-to-another-group)
+  - [Copy simple and complex policies in one Group to multiple other Groups](#copy-simple-and-complex-policies-in-one-group-to-multiple-other-groups)
   - [Create Chrome network](#create-chrome-network)
   - [Delete Chrome network](#delete-chrome-network)
   - [Chrome Policy Schema Table](#chrome-policy-schema-table)
@@ -154,11 +158,12 @@ gam create chromepolicyimage <ChromePolicyImageSchemaName> <FileName>
 ```
 
 ## Update Chrome policy
-You can update a policy for all devices/users within an OU or for a specific printer or application within an OU.
+You can update a policy for all devices/users within an OU, users with a group or for a specific printer or application within an OU.
 ```
 gam update chromepolicy [convertcrnl]
         (<SchemaName> ((<Field> <Value>)+ | <JSONData>))+
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
+        ((ou|orgunit <OrgUnitItem>)|(group <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
 ```
 You update a schema by specifying its name and one or more fields and values or by using
 JSON data to specify the field values. 
@@ -235,31 +240,32 @@ gam update chromepolicy chrome.users.ManagedBookmarksSetting  json file bookmark
 ```
 
 ## Delete Chrome policy
-You can delete a policy for all devices/users within an OU or for a specific printer or application within an OU.
+You can delete a policy for all devices/users within an OU, users with a group  or for a specific printer or application within an OU.
 ```
 gam delete chromepolicy
         (<SchemaName> [<JSONData>])+
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
+        ((ou|orgunit <OrgUnitItem>)|(group <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
 ```
 ## Display Chrome policies
-You can display policies for all devices/users within an OU or for a specific printer or application within an OU.
+You can display policies for all devices/users within an OU, users with a group or for a specific printer or application within an OU.
 
 ### Display as an indented list of keys and values.
 ```
 gam show chromepolicies
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
-        [filter <String>] [namespace <NamespaceList>]
-        [show all|direct|inherited]
+        ((ou|orgunit <OrgUnitItem> [show all|direct|inherited])|(group <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
+        [filter <StringList>] [namespace <NamespaceList>]
         [formatjson]
 ```
-By default, all Chrome policies for the OU are displayed.
+By default, all Chrome policies for the OU or group are displayed.
 * `filter <String>` - Display policies based on fields like its resource name, description and additionalTargetKeyNames.
-* `show all` - Display policies regardless of where set; this is the default
-* `show direct` - Display policies set directly in the OU
-* `show inherited` - Display policies set in a parent OU
+* `show all` - For OUs, display policies regardless of where set; this is the default
+* `show direct` - For OUs, display policies set directly in the OU
+* `show inherited` - For OUs, display policies set in a parent OU
 
 These are the default namespaces; use `namespace <NamespaceList>` to override.
-* `default`
+* `default` - When OU specified
   * chrome.users
   * chrome.users.apps
   * chrome.users.appsconfig
@@ -276,6 +282,12 @@ These are the default namespaces; use `namespace <NamespaceList>` to override.
   * chrome.networks.wifi
   * chrome.printers
   * chrome.printservers
+* `default` - When group specified
+  * chrome.users
+  * chrome.users.apps
+  * chrome.users.appsconfig
+  * chrome.printers
+  * chrome.printservers
 * `appid <AppID>`
   * chrome.users.apps
   * chrome.devices.kiosk.apps
@@ -289,16 +301,16 @@ By default, Gam displays the information as an indented list of keys and values.
 ### Display as a CSV file.
 ```
 gam print chromepolicies [todrive <ToDriveAttribute>*]
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
+        ((ou|orgunit <OrgUnitItem> [show all|direct|inherited])|(group <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
         [filter <String>] [namespace <NamespaceList>]
-        [show all|direct|inherited]
         [[formatjson [quotechar <Character>]]
 ```
-By default, all Chrome policies for the OU are displayed.
+By default, all Chrome policies for the OU or group are displayed.
 * `filter <String>` - Display policies based on fields like its resource name, description and additionalTargetKeyNames.
-* `show all` - Display policies regardless of where set; this is the default
-* `show direct` - Display policies set directly in the OU
-* `show inherited` - Display policies set in a parent OU
+* `show all` - For OUs, display policies regardless of where set; this is the default
+* `show direct` - For OUs, display policies set directly in the OU
+* `show inherited` - For OUs, display policies set in a parent OU
 
 These are the default namespaces; use `namespace <NamespaceList>` to override.
 * `default`
@@ -335,8 +347,6 @@ gam redirect csv ChromePolicies.csv print chromepolicies ou "/Path/To/OU1"
 gam config csv_input_row_filter "direct:boolean:true" csv ChromePolicies.csv gam update chromepolicy "~name" "~fields.0.name" "~fields.0.value" "~fields.1.name" "~fields.1.value" ou "/Path/To/OU2"
 ```
 ## Copy simple and complex policies set directly in one OU to another OU
-Version `6.21.02` is required.
-
 Display direct policies, update all
 ```
 gam redirect csv ChromePolicies.csv print chromepolicies ou "/Path/To/OU1" show direct formatjson quotechar "'"
@@ -348,6 +358,51 @@ gam redirect csv ChromePolicies.csv print chromepolicies ou "/Path/To/OU1" forma
 gam config csv_input_row_filter "direct:boolean:true" csv ChromePolicies.csv quotechar "'" gam update chromepolicy "~name" json "~JSON" ou "/Path/To/OU2"
 ```
 
+## Copy simple and complex policies set directly in one OU to multiple other OUs
+Display direct policies, update all
+```
+gam redirect csv ChromePolicies.csv print chromepolicies ou "/Path/To/OU1" show direct formatjson quotechar "'"
+```
+Make a batch file (SetPolicies.bat) with a line for each target OU
+```
+gam csv ChromePolicies.csv quotechar "'" gam update chromepolicy "~name" json "~JSON" ou "/Path/To/OU2"
+gam csv ChromePolicies.csv quotechar "'" gam update chromepolicy "~name" json "~JSON" ou "/Path/To/OU3"
+...
+```
+Execute batch
+```
+gam redirect stdout ./SetPolicies.log multiprocess redirect stderr stdout tbatch SetPolicies.bat
+```
+
+## Copy simple policies in one Group to another Group
+Display all policies, update all
+```
+gam redirect csv ChromePolicies.csv print chromepolicies group group1@domain.com
+gam csv ChromePolicies.csv gam update chromepolicy "~name" "~fields.0.name" "~fields.0.value" "~fields.1.name" "~fields.1.value" group group2@domain.com
+```
+## Copy simple and complex policies in one Group to another Group
+Display all policies, update all
+```
+gam redirect csv ChromePolicies.csv print chromepolicies group group1@domain.com formatjson quotechar "'"
+gam csv ChromePolicies.csv quotechar "'" gam update chromepolicy "~name" json "~JSON" group group2@domain.com
+```
+
+## Copy simple and complex policies in one Group to multiple other Groups
+Display all policies, update all
+```
+gam redirect csv ChromePolicies.csv print chromepolicies group group1@domain.com formatjson quotechar "'"
+```
+Make a batch file (SetPolicies.bat) with a line for each target group
+```
+gam csv ChromePolicies.csv quotechar "'" gam update chromepolicy "~name" json "~JSON" group group2@domain.com
+gam csv ChromePolicies.csv quotechar "'" gam update chromepolicy "~name" json "~JSON" group group3@domain.com
+...
+```
+Execute batch
+```
+gam redirect stdout ./SetPolicies.log multiprocess redirect stderr stdout tbatch SetPolicies.bat
+```
+
 ## Create Chrome network
 See: [Chrome Policy Schema Table](#chrome-policy-schema-table) for the allowed network settings.
 * chrome.networks.ethernet.Details: Ethernet network configuration details.
@@ -516,6 +571,11 @@ chrome.devices.ContentProtection: Allow web services to request proof that the d
     true: Ensures ChromeOS devices in your organization will verify their identity to content providers.
     false: Does not ensure ChromeOS devices in your organization will verify their identity to content providers. Some premium content may be unavailable to your users.
 
+chrome.devices.DeviceAllowEnterpriseRemoteAccessConnections: Enterprise remote access connections.
+  deviceAllowEnterpriseRemoteAccessConnections: TYPE_BOOL
+    true: Enable remote access connections from enterprise admins.
+    false: Prevent remote access connections from enterprise admins.
+
 chrome.devices.DeviceAuthenticationUrlAllowlist: Blocked URL exceptions on the sign-in / lock screens.
   deviceAuthenticationUrlAllowlist: TYPE_LIST
     Blocked URL exceptions. Any URL that matches an entry in this exception list will be allowed, even if it matches a line in the blocked URLs. Wildcards ("*") are allowed when appended to a URL, but cannot be entered alone. Maximum of 1000 URLs.
@@ -614,11 +674,6 @@ chrome.devices.DeviceLoginScreenExtensionManifestVTwoAvailability: Manifest v2 e
     ENABLE: Enable manifest V2 extensions on the sign-in screen.
     ENABLE_FOR_FORCED_EXTENSIONS: Enable force-installed manifest V2 extensions on the sign-in screen.
 
-chrome.devices.DeviceLoginScreenGeolocationAccessLevel: Geolocation on the login screen.
-  deviceLoginScreenGeolocationAccessLevel: TYPE_ENUM
-    DISALLOWED: Do not allow geolocation access on log-in screen.
-    ALLOWED: Allow geolocation access on log-in screen.
-
 chrome.devices.DeviceLoginScreenPrivacyScreenEnabled: Privacy screen on sign-in screen.
   deviceLoginScreenPrivacyScreenEnabled: TYPE_ENUM
     UNSET: Allow the user to decide.
@@ -656,6 +711,12 @@ chrome.devices.DevicePciPeripheralDataAccessEnabled: Data access protection for
     FALSE: Enable data access protection.
     TRUE: Disable data access protection.
 
+chrome.devices.DevicePostQuantumKeyAgreementEnabled: Post-quantum TLS.
+  devicePostQuantumKeyAgreementEnabled: TYPE_ENUM
+    UNSET: Use the default Chrome setting.
+    FALSE: Do not allow post-quantum key agreement in TLS connections.
+    TRUE: Allow post-quantum key agreement in TLS connections.
+
 chrome.devices.DevicePowerwashAllowed: Powerwash.
   devicePowerwashAllowed: TYPE_BOOL
     true: Allow powerwash to be triggered.
@@ -1033,6 +1094,12 @@ chrome.devices.kiosk.CursorHighlightEnabled: Kiosk cursor highlight.
     ACCESSIBILITY_DISABLED: Disable cursor highlight.
     ACCESSIBILITY_ENABLED: Enable cursor highlight.
 
+chrome.devices.kiosk.DeviceWeeklyScheduledSuspend: Device sleep mode.
+  hours: TYPE_INT32
+  minutes: TYPE_INT32
+  seconds: TYPE_INT32
+  nanos: TYPE_INT32
+
 chrome.devices.kiosk.DictationEnabled: Kiosk dictation.
   dictationEnabled: TYPE_ENUM
     DEFAULT_USER_CHOICE: Allow the user to decide.
@@ -1415,12 +1482,15 @@ chrome.devices.managedguest.apps.PermissionsAndUrlAccess: Allows setting of allo
   blockedPermissions: TYPE_LIST
     {'value': '', 'description': 'Allow all permissions. If empty string is set, it must be the only value set for the policy.'}
   allowedPermissions: TYPE_LIST
-    {'value': 'alarms', 'description': 'Alarms.'}
+    {'value': 'activeTab', 'description': 'Active tab.'}
   blockedHosts: TYPE_LIST
     Sets extension hosts that should be blocked.
   allowedHosts: TYPE_LIST
     Sets extension hosts that should be allowed. Allowed hosts override blocked hosts.
 
+chrome.devices.managedguest.apps.SkipDocumentScanConfirmation: Allows the app to skip the confirmation dialog when using the Document Scan API.
+  skipDocumentScanConfirmation: TYPE_BOOL
+
 chrome.devices.managedguest.apps.SkipPrintConfirmation: Allows the app to skip the confirmation dialog when sending print jobs via the Chrome Printing API.
   skipPrintConfirmation: TYPE_BOOL
 
@@ -1564,6 +1634,11 @@ chrome.devices.managedguest.CpuTaskScheduler: CPU task scheduler.
     CONSERVATIVE: Optimize for stability.
     PERFORMANCE: Optimize for performance.
 
+chrome.devices.managedguest.CssCustomStateDeprecatedSyntaxEnabled: CSS custom state deprecated syntax.
+  cssCustomStateDeprecatedSyntaxEnabled: TYPE_BOOL
+    true: Allow deprecated syntax.
+    false: Do not allow deprecated syntax.
+
 chrome.devices.managedguest.CursorHighlightEnabled: Cursor highlight.
   cursorHighlightEnabled: TYPE_ENUM
     UNSET: Allow the user to decide.
@@ -1628,9 +1703,6 @@ chrome.devices.managedguest.DeleteKeyModifier: Control the shortcut used to trig
     NONE: Setting a shortcut for the "Delete" action is disabled.
     ALT: Delete shortcut setting uses the shortcut that contains the alt modifier.
     SEARCH: Delete shortcut setting uses the shortcut that contains the search modifier.
-  deleteKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.devices.managedguest.DeletePrintJobHistoryAllowed: Print job history deletion.
   deletePrintJobHistoryAllowed: TYPE_BOOL
@@ -1642,6 +1714,10 @@ chrome.devices.managedguest.DeveloperTools: Developer tools.
     ALWAYS_ALLOW_DEVELOPER_TOOLS: Always allow use of built-in developer tools.
     ALLOW_DEVELOPER_TOOLS_EXCEPT_FORCE_INSTALLED: Allow use of built-in developer tools except for force-installed extensions and component extensions.
     NEVER_ALLOW_DEVELOPER_TOOLS: Never allow use of built-in developer tools.
+  extensionDeveloperModeSettings: TYPE_ENUM
+    UNSET: Use 'developer tools availability' selection.
+    ALLOW: Allow use of developer tools on extensions page.
+    DISALLOW: Do not allow use of developer tools on extensions page.
 
 chrome.devices.managedguest.DeviceAllowMgsToStoreDisplayProperties: Persist display settings.
   deviceAllowMgsToStoreDisplayProperties: TYPE_BOOL
@@ -1728,10 +1804,10 @@ chrome.devices.managedguest.EncryptedClientHelloEnabled: TLS encrypted ClientHel
     true: Enable the TLS Encrypted ClientHello experiment.
     false: Disable the TLS Encrypted ClientHello experiment.
 
-chrome.devices.managedguest.EnhancedNetworkVoicesInSelectToSpeakAllowed: Allow the enhanced network text-to-speech voices in Select-to-speak.
+chrome.devices.managedguest.EnhancedNetworkVoicesInSelectToSpeakAllowed: Select-to-speak.
   enhancedNetworkVoicesInSelectToSpeakAllowed: TYPE_BOOL
-    true: Allow the user to decide.
-    false: Disallow enhanced network text-to-speech voices when using Select-to-Speak.
+    true: Allow sending text to Google servers for enhanced Select-to-speak.
+    false: Do not allow sending text to Google servers for enhanced Select-to-speak.
 
 chrome.devices.managedguest.EnterpriseHardwarePlatformApiEnabled: Enterprise Hardware Platform API.
   enterpriseHardwarePlatformApiEnabled: TYPE_BOOL
@@ -1782,9 +1858,6 @@ chrome.devices.managedguest.FElevenKeyModifier: Control the shortcut used to tri
     ALT: F11 settings use the shortcut that contains the alt modifier.
     SHIFT: F11 settings use the shortcut that contains the shift modifier.
     CTRL_SHIFT: F11 settings use the shortcut that contains the modifiers ctrl and shift.
-  fElevenKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.devices.managedguest.FileOrDirectoryPickerWithoutGestureAllowedForOrigins: File/directory picker without user gesture.
   fileOrDirectoryPickerWithoutGestureAllowedForOrigins: TYPE_LIST
@@ -1843,9 +1916,6 @@ chrome.devices.managedguest.FTwelveKeyModifier: Control the shortcut used to tri
     SHIFT: F12 settings use the shortcut that contains the shift modifier.
     CTRL_SHIFT: F12 settings use the shortcut that contains the modifiers ctrl and shift.
     UNSET: Allow the user to decide.
-  fTwelveKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.devices.managedguest.FullscreenAllowed: Fullscreen mode.
   fullscreenAllowed: TYPE_BOOL
@@ -1891,9 +1961,6 @@ chrome.devices.managedguest.HomeAndEndKeysModifier: Control the shortcut used to
     NONE: Home/End settings are disabled.
     ALT: Home/End settings use the shortcut that contains the alt modifier.
     SEARCH: Home/End settings use the shortcut that contains the search modifier.
-  homeAndEndKeysModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.devices.managedguest.HomeButton: Home button.
   showHomeButton: TYPE_ENUM
@@ -1913,20 +1980,6 @@ chrome.devices.managedguest.HstsPolicyBypassList: HSTS policy bypass list.
   hstsPolicyBypassList: TYPE_LIST
     List of hostnames that will bypass the HSTS policy check . Enter a list of hostnames that will be exempt from the HSTS policy check.
 
-chrome.devices.managedguest.IdleSettings: Idle settings.
-  mgsActionOnDeviceIdle: TYPE_ENUM
-    SLEEP: Sleep.
-    LOGOUT: Logout.
-    SHUTDOWN: Shutdown.
-    DO_NOTHING: Do nothing.
-  mgsIdleTimeoutMinutes: TYPE_STRING
-    Idle time in minutes. Leave empty for system default.
-  mgsActionOnLidClose: TYPE_ENUM
-    SLEEP: Sleep.
-    LOGOUT: Logout.
-    SHUTDOWN: Shutdown.
-    DO_NOTHING: Do nothing.
-
 chrome.devices.managedguest.IdleSettingsExtended: Idle settings.
   lidCloseAction: TYPE_ENUM
     SLEEP: Sleep.
@@ -1985,9 +2038,6 @@ chrome.devices.managedguest.InsertKeyModifier: Control the shortcut used to trig
   insertKeyModifier: TYPE_ENUM
     NONE: Setting a shortcut for the "Insert" action is disabled.
     SEARCH: Insert shortcut setting uses the shortcut that contains the search modifier.
-  insertKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.devices.managedguest.IntensiveWakeUpThrottlingEnabled: Javascript IntensiveWakeUpThrottling.
   intensiveWakeUpThrottlingEnabled: TYPE_ENUM
@@ -2031,6 +2081,11 @@ chrome.devices.managedguest.KerberosTickets: Kerberos tickets.
     true: Enable kerberos.
     false: Disable kerberos.
 
+chrome.devices.managedguest.KeyboardFocusableScrollersEnabled: Keyboard focusable scrollers.
+  keyboardFocusableScrollersEnabled: TYPE_BOOL
+    true: Allow scrollers to be focusable by default.
+    false: Do not allow scrollers to be focusable by default.
+
 chrome.devices.managedguest.KeyboardFocusHighlightEnabled: Keyboard focus highlighting.
   keyboardFocusHighlightEnabled: TYPE_ENUM
     UNSET: Allow the user to decide.
@@ -2053,6 +2108,14 @@ chrome.devices.managedguest.LensDesktopNtpSearchEnabled: New Tab page Google Len
     true: Show the Google Lens button in the search box on the New Tab page.
     false: Do not show the Google Lens button in the search box on the New Tab page.
 
+chrome.devices.managedguest.LensOnGalleryEnabled: Lens Gallery App integration.
+  lensOnGalleryEnabled: TYPE_BOOL
+    true: Enable Lens integration.
+    false: Disable Lens integration.
+  lensOnGalleryEnabledSettingGroupPolicyMode: TYPE_ENUM
+    MANDATORY: Do not allow users to override.
+    RECOMMENDED: Allow users to override.
+
 chrome.devices.managedguest.LensRegionSearchEnabled: Google Lens region search.
   lensRegionSearchEnabled: TYPE_BOOL
     true: Enable Google Lens region search.
@@ -2200,9 +2263,6 @@ chrome.devices.managedguest.PageUpAndPageDownKeysModifier: Control the shortcut
     NONE: PageUp/PageDown settings are disabled.
     ALT: PageUp/PageDown settings use the shortcut that contains the alt modifier.
     SEARCH: PageUp/PageDown settings use the shortcut that contains the search modifier.
-  pageUpAndPageDownKeysModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.devices.managedguest.PaymentMethodQueryEnabled: Payment methods.
   paymentMethodQueryEnabled: TYPE_BOOL
@@ -2242,8 +2302,8 @@ chrome.devices.managedguest.Popups: Pop-ups.
 chrome.devices.managedguest.PostQuantumKeyAgreementEnabled: Post-quantum TLS.
   postQuantumKeyAgreementEnabled: TYPE_ENUM
     UNSET: Use the default Chrome setting.
-    FALSE: Do not allow Kyber key agreement for TLS.
-    TRUE: Allow Kyber key agreement for TLS.
+    FALSE: Do not allow post-quantum key agreement in TLS connections.
+    TRUE: Allow post-quantum key agreement in TLS connections.
 
 chrome.devices.managedguest.PpapiSharedImagesForVideoDecoderAllowed: Allow Pepper to use shared images for video decoding.
   ppapiSharedImagesForVideoDecoderAllowed: TYPE_BOOL
@@ -2353,6 +2413,11 @@ chrome.devices.managedguest.PromptForDownloadLocation: Download location prompt.
     FALSE: Do not ask the user (downloads start immediately).
     TRUE: Ask the user where to save the file before downloading.
 
+chrome.devices.managedguest.QrCodeGeneratorEnabled: QR Code Generator.
+  qrCodeGeneratorEnabled: TYPE_BOOL
+    true: Enable QR Code Generator.
+    false: Disable QR Code Generator.
+
 chrome.devices.managedguest.QuickAnswersEnabled: Quick Answers.
   quickAnswersEnabled: TYPE_BOOL
     true: Enable Quick Answers.
@@ -2612,6 +2677,7 @@ chrome.devices.managedguest.SimpleProxySettings: Proxy mode.
   simpleProxyMode: TYPE_ENUM
     USER_CONFIGURED: Allow user to configure.
     DIRECT: Never use a proxy.
+    SYSTEM: Use system proxy settings.
     AUTO_DETECT: Always auto detect the proxy.
     FIXED_SERVERS: Always use the proxy specified in 'simpleProxyServerUrl'.
     PAC_SCRIPT: Always use the proxy auto-config specified in 'simpleProxyPacUrl'.
@@ -2660,6 +2726,11 @@ chrome.devices.managedguest.SslVersionMin: Minimum SSL version enabled.
     TL_SV_1_2: TLS 1.2.
     SSL_V_3: SSL3.
 
+chrome.devices.managedguest.StandardizedBrowserZoomEnabled: Zoom Behavior.
+  standardizedBrowserZoomEnabled: TYPE_BOOL
+    true: Standard CSS zoom.
+    false: Legacy CSS zoom.
+
 chrome.devices.managedguest.StartupBrowserLaunch: Browser launch on startup.
   startupBrowserWindowLaunchSuppressed: TYPE_BOOL
     true: Do not launch the browser on startup.
@@ -2715,6 +2786,12 @@ chrome.devices.managedguest.SystemFeaturesDisableMode: Disabled system features
     BLOCKED: Show disabled app icons.
     HIDDEN: Hide app icons.
 
+chrome.devices.managedguest.SystemShortcutBehavior: Override system shortcuts.
+  systemShortcutBehavior: TYPE_ENUM
+    DEFAULT: Do not override system shortcuts.
+    SHOULD_IGNORE_COMMON_VDI_SHORTCUTS: Override some system shortcuts.
+    SHOULD_IGNORE_COMMON_VDI_SHORTCUTS_FULLSCREEN_ONLY: Override some system shortcuts while in fullscreen.
+
 chrome.devices.managedguest.TabDiscardingExceptions: Exceptions to tab discarding.
   tabDiscardingExceptions: TYPE_LIST
     URL pattern exceptions to tab discarding. Specifies URL patterns where any URL matching one or more of these patterns will never be discarded by the browser.
@@ -3529,12 +3606,15 @@ chrome.users.apps.PermissionsAndUrlAccess: Allows setting of allowed and blocked
   blockedPermissions: TYPE_LIST
     {'value': '', 'description': 'Allow all permissions. If empty string is set, it must be the only value set for the policy.'}
   allowedPermissions: TYPE_LIST
-    {'value': 'alarms', 'description': 'Alarms.'}
+    {'value': 'activeTab', 'description': 'Active tab.'}
   blockedHosts: TYPE_LIST
     Sets extension hosts that should be blocked.
   allowedHosts: TYPE_LIST
     Sets extension hosts that should be allowed. Allowed hosts override blocked hosts.
 
+chrome.users.apps.SkipDocumentScanConfirmation: Allows the app to skip the confirmation dialog when using the Document Scan API.
+  skipDocumentScanConfirmation: TYPE_BOOL
+
 chrome.users.apps.SkipPrintConfirmation: Allows the app to skip the confirmation dialog when sending print jobs via the Chrome Printing API.
   skipPrintConfirmation: TYPE_BOOL
 
@@ -3565,7 +3645,7 @@ chrome.users.appsconfig.AppExtensionInstallSources: App and extension install so
 
 chrome.users.appsconfig.BlockExtensionsByPermission: Permissions and URLs.
   extensionBlockedPermissions: TYPE_LIST
-    {'value': 'alarms', 'description': 'Alarms.'}
+    {'value': 'activeTab', 'description': 'Active tab.'}
   runtimeBlockedHosts: TYPE_LIST
     Runtime blocked hosts. This is a list of patterns for matching against hostnames. URLs that match one of these patterns cannot be modified by apps and extensions. This includes injecting Javascript, altering and viewing webRequests / webNavigation, viewing and altering cookies, exceptions to the same-origin policy, etc. The format is similar to full URL patterns except no paths may be defined. e.g. "*://*.example.com". Maximum of 100 URLs.
   runtimeAllowedHosts: TYPE_LIST
@@ -4146,6 +4226,11 @@ chrome.users.CrossOriginWebAssemblyModuleSharingEnabled: Allow WebAssembly cross
     true: Allow WebAssembly modules to be sent cross-origin.
     false: Prevent WebAssembly modules to be sent cross-origin.
 
+chrome.users.CssCustomStateDeprecatedSyntaxEnabled: CSS custom state deprecated syntax.
+  cssCustomStateDeprecatedSyntaxEnabled: TYPE_BOOL
+    true: Allow deprecated syntax.
+    false: Do not allow deprecated syntax.
+
 chrome.users.CursorHighlightEnabled: Cursor highlight.
   cursorHighlightEnabled: TYPE_ENUM
     UNSET: Allow the user to decide.
@@ -4219,15 +4304,17 @@ chrome.users.DeleteKeyModifier: Control the shortcut used to trigger the Delete
     NONE: Setting a shortcut for the "Delete" action is disabled.
     ALT: Delete shortcut setting uses the shortcut that contains the alt modifier.
     SEARCH: Delete shortcut setting uses the shortcut that contains the search modifier.
-  deleteKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.users.DeletePrintJobHistoryAllowed: Print job history deletion.
   deletePrintJobHistoryAllowed: TYPE_BOOL
     true: Allow print job history to be deleted.
     false: Do not allow print job history to be deleted.
 
+chrome.users.DeletingUndecryptablePasswordsEnabled: Delete undecryptable passwords.
+  deletingUndecryptablePasswordsEnabled: TYPE_BOOL
+    true: Enable deleting undecryptable passwords.
+    false: Disable deleting undecryptable passwords.
+
 chrome.users.DeskApi: Desk API for third-party ChromeOS desk control.
   deskApiThirdPartyAccessEnabled: TYPE_BOOL
     true: Enable Desk API for third-party ChromeOS desk control.
@@ -4245,6 +4332,10 @@ chrome.users.DeveloperTools: Developer tools.
     ALWAYS_ALLOW_DEVELOPER_TOOLS: Always allow use of built-in developer tools.
     ALLOW_DEVELOPER_TOOLS_EXCEPT_FORCE_INSTALLED: Allow use of built-in developer tools except for force-installed extensions and component extensions.
     NEVER_ALLOW_DEVELOPER_TOOLS: Never allow use of built-in developer tools.
+  extensionDeveloperModeSettings: TYPE_ENUM
+    UNSET: Use 'developer tools availability' selection.
+    ALLOW: Allow use of developer tools on extensions page.
+    DISALLOW: Do not allow use of developer tools on extensions page.
 
 chrome.users.DeviceEnrollment: Device enrollment.
   autoDevicePlacementEnabled: TYPE_BOOL
@@ -4342,6 +4433,11 @@ chrome.users.DriveFileSyncAvailable: ChromeOS file sync.
     DISABLED: Do not show the ChromeOS file sync feature.
     VISIBLE: Show the ChromeOS file sync feature.
 
+chrome.users.DynamicCodeSettings: Dynamic Code.
+  dynamicCodeSettings: TYPE_ENUM
+    DEFAULT: Use the default Chrome setting.
+    DISABLED_FOR_BROWSER: Do not create dynamic code.
+
 chrome.users.EcheAllowed: App Streaming.
   echeAllowed: TYPE_BOOL
     true: Allow users to launch App Streaming.
@@ -4443,9 +4539,6 @@ chrome.users.FElevenKeyModifier: Control the shortcut used to trigger F11.
     ALT: F11 settings use the shortcut that contains the alt modifier.
     SHIFT: F11 settings use the shortcut that contains the shift modifier.
     CTRL_SHIFT: F11 settings use the shortcut that contains the modifiers ctrl and shift.
-  fElevenKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.users.FetchKeepaliveDurationSecondsOnShutdown: Keepalive duration.
   duration: TYPE_STRING
@@ -4524,9 +4617,6 @@ chrome.users.FTwelveKeyModifier: Control the shortcut used to trigger F12.
     SHIFT: F12 settings use the shortcut that contains the shift modifier.
     CTRL_SHIFT: F12 settings use the shortcut that contains the modifiers ctrl and shift.
     UNSET: Allow the user to decide.
-  fTwelveKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.users.FullscreenAlertEnabled: Fullscreen alert.
   fullscreenAlertEnabled: TYPE_BOOL
@@ -4594,8 +4684,8 @@ chrome.users.GssapiLibraryName: GSSAPI library name.
 
 chrome.users.HardwareAccelerationModeEnabled: GPU.
   hardwareAccelerationModeEnabled: TYPE_BOOL
-    true: Enable hardware acceleration.
-    false: Disable hardware acceleration.
+    true: Enable graphics acceleration.
+    false: Disable graphics acceleration.
 
 chrome.users.HelpMeWriteSettings: Help me write.
   helpMeWriteSettings: TYPE_ENUM
@@ -4615,14 +4705,17 @@ chrome.users.HighEfficiencyModeEnabled: High efficiency mode.
     FALSE: Disable high efficiency mode.
     TRUE: Enable high efficiency mode.
 
+chrome.users.HistorySearchSettings: History search settings.
+  historySearchSettings: TYPE_ENUM
+    ALLOWED: Allow using AI-powered history search.
+    ALLOWED_WITHOUT_LOGGING: Allow using AI-powered history search without data collection.
+    DISABLED: Fully disable AI-powered history search.
+
 chrome.users.HomeAndEndKeysModifier: Control the shortcut used to trigger the Home/End "six pack" keys.
   homeAndEndKeysModifier: TYPE_ENUM
     NONE: Home/End settings are disabled.
     ALT: Home/End settings use the shortcut that contains the alt modifier.
     SEARCH: Home/End settings use the shortcut that contains the search modifier.
-  homeAndEndKeysModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.users.HomeButton: Home button.
   showHomeButton: TYPE_ENUM
@@ -4657,21 +4750,6 @@ chrome.users.HttpsUpgradesEnabled: Automatic HTTPS upgrades.
     true: Allow HTTPS upgrades.
     false: Do not allow HTTPS upgrades.
 
-chrome.users.IdleSettings: Idle settings.
-  idleTimeoutMinutes: TYPE_STRING
-    Idle time in minutes. Leave empty for system default.
-  actionOnDeviceIdle: TYPE_ENUM
-    SLEEP: Sleep.
-    LOGOUT: Logout.
-    LOCK: Lock Screen.
-  actionOnLidClose: TYPE_ENUM
-    SLEEP: Sleep.
-    LOGOUT: Logout.
-  lockOnSleep: TYPE_ENUM
-    UNSET: Allow the user to decide.
-    FALSE: Don't lock screen.
-    TRUE: Lock screen.
-
 chrome.users.IdleSettingsExtended: Idle settings.
   lidCloseAction: TYPE_ENUM
     SLEEP: Sleep.
@@ -4780,9 +4858,6 @@ chrome.users.InsertKeyModifier: Control the shortcut used to trigger the Insert
   insertKeyModifier: TYPE_ENUM
     NONE: Setting a shortcut for the "Insert" action is disabled.
     SEARCH: Insert shortcut setting uses the shortcut that contains the search modifier.
-  insertKeyModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.users.IntegratedWebAuthenticationAllowed: Login credentials for network authentication.
   integratedWebAuthenticationAllowed: TYPE_BOOL
@@ -4881,6 +4956,11 @@ chrome.users.KerberosTickets: Kerberos tickets.
     true: Customize Kerberos configuration.
     false: Use default Kerberos configuration.
 
+chrome.users.KeyboardFocusableScrollersEnabled: Keyboard focusable scrollers.
+  keyboardFocusableScrollersEnabled: TYPE_BOOL
+    true: Allow scrollers to be focusable by default.
+    false: Do not allow scrollers to be focusable by default.
+
 chrome.users.KeyboardFocusHighlightEnabled: Keyboard focus highlighting.
   keyboardFocusHighlightEnabled: TYPE_ENUM
     UNSET: Allow the user to decide.
@@ -4918,6 +4998,14 @@ chrome.users.LensDesktopNtpSearchEnabled: New Tab page Google Lens button.
     true: Show the Google Lens button in the search box on the New Tab page.
     false: Do not show the Google Lens button in the search box on the New Tab page.
 
+chrome.users.LensOnGalleryEnabled: Lens Gallery App integration.
+  lensOnGalleryEnabled: TYPE_BOOL
+    true: Enable Lens integration.
+    false: Disable Lens integration.
+  lensOnGalleryEnabledSettingGroupPolicyMode: TYPE_ENUM
+    MANDATORY: Do not allow users to override.
+    RECOMMENDED: Allow users to override.
+
 chrome.users.LensRegionSearchEnabled: Google Lens region search.
   lensRegionSearchEnabled: TYPE_BOOL
     true: Enable Google Lens region search.
@@ -4943,6 +5031,11 @@ chrome.users.LockScreen: Lock screen.
     true: Allow locking screen.
     false: Do not allow locking screen.
 
+chrome.users.LockScreenAutoStartOnlineReauth: Lock screen online reauthentication.
+  lockScreenAutoStartOnlineReauth: TYPE_BOOL
+    true: Show users the online reauthentication screen.
+    false: Show users interstitial screens prior to online reauthentication.
+
 chrome.users.LockScreenMediaPlaybackEnabled: Lock screen media playback.
   lockScreenMediaPlaybackEnabled: TYPE_BOOL
     true: Allow users to play media when the device is locked.
@@ -4972,7 +5065,7 @@ chrome.users.ManagedBookmarksSetting: Managed bookmarks.
 
 chrome.users.MaxConnectionsPerProxy: Max connections per proxy.
   maxConnectionsPerProxy: TYPE_INT64
-    Maximium number of concurrent connections to the proxy server. Specifies the maximal number of simultaneous connections to the proxy server. The value of this policy should be lower than 100 and higher than 6 and the default value is 32.
+    Maximum number of concurrent connections to the proxy server. Specifies the maximal number of simultaneous connections to the proxy server. The value of this policy should be lower than 100 and higher than 6 and the default value is 32.
 
 chrome.users.MaxInvalidationFetchDelay: Policy fetch delay.
   duration: TYPE_STRING
@@ -5166,9 +5259,6 @@ chrome.users.PageUpAndPageDownKeysModifier: Control the shortcut used to trigger
     NONE: PageUp/PageDown settings are disabled.
     ALT: PageUp/PageDown settings use the shortcut that contains the alt modifier.
     SEARCH: PageUp/PageDown settings use the shortcut that contains the search modifier.
-  pageUpAndPageDownKeysModifierSettingGroupPolicyMode: TYPE_ENUM
-    MANDATORY: Do not allow users to override.
-    RECOMMENDED: Allow users to override.
 
 chrome.users.ParcelTrackingEnabled: Parcel tracking.
   parcelTrackingEnabled: TYPE_BOOL
@@ -5222,6 +5312,11 @@ chrome.users.PdfUseSkiaRendererEnabled: Renderer for PDF files.
     FALSE: Use AGG renderer for PDF files.
     TRUE: Use Skia renderer for PDF files.
 
+chrome.users.PdfViewerOutOfProcessIframeEnabled: PDF viewer.
+  pdfViewerOutOfProcessIframeEnabled: TYPE_BOOL
+    true: PDF viewer uses out-of-process iframe.
+    false: PDF viewer uses guest view.
+
 chrome.users.PersistentQuotaEnabled: Persistent quota for webkitRequestFileSystem.
   persistentQuotaEnabled: TYPE_BOOL
     true: Enable persistent quota.
@@ -5298,8 +5393,8 @@ chrome.users.Popups: Pop-ups.
 chrome.users.PostQuantumKeyAgreementEnabled: Post-quantum TLS.
   postQuantumKeyAgreementEnabled: TYPE_ENUM
     UNSET: Use the default Chrome setting.
-    FALSE: Do not allow Kyber key agreement for TLS.
-    TRUE: Allow Kyber key agreement for TLS.
+    FALSE: Do not allow post-quantum key agreement in TLS connections.
+    TRUE: Allow post-quantum key agreement in TLS connections.
 
 chrome.users.PpapiSharedImagesForVideoDecoderAllowed: Allow Pepper to use shared images for video decoding.
   ppapiSharedImagesForVideoDecoderAllowed: TYPE_BOOL
@@ -5355,6 +5450,11 @@ chrome.users.PrintingBackgroundGraphicsDefault: Background graphics printing def
     DISABLED: Disable background graphics printing mode by default.
     ENABLED: Enable background graphics printing mode by default.
 
+chrome.users.PrintingLpacSandboxEnabled: Printing LPAC Sandbox.
+  printingLpacSandboxEnabled: TYPE_BOOL
+    true: Run printing services in LPAC sandbox when available.
+    false: Run printing services in a less secure sandbox.
+
 chrome.users.PrintingMaxSheetsAllowed: Maximum sheets.
   value: TYPE_INT64
 
@@ -5469,6 +5569,11 @@ chrome.users.PromptOnMultipleMatchingCertificates: Prompt when multiple certific
     true: Prompt the user to select the client certificate whenever the auto-selection policy matches multiple certificates.
     false: Only prompt the user when no certificate matches the auto-selection.
 
+chrome.users.QrCodeGeneratorEnabled: QR Code Generator.
+  qrCodeGeneratorEnabled: TYPE_BOOL
+    true: Enable QR Code Generator.
+    false: Disable QR Code Generator.
+
 chrome.users.QuickAnswersEnabled: Quick Answers.
   quickAnswersEnabled: TYPE_BOOL
     true: Enable Quick Answers.
@@ -5813,7 +5918,7 @@ chrome.users.ShowCastSessionsStartedByOtherDevices: Show media controls for Goog
     FALSE: Do not show media controls for Google Cast sessions started by other devices.
     TRUE: Show media controls for Google Cast sessions started by other devices.
 
-chrome.users.ShowDisplaySizeScreenEnabled: Controls whether display size setting screen is displayed during sign-in.
+chrome.users.ShowDisplaySizeScreenEnabled: Display size setting during sign-in.
   showDisplaySizeScreenEnabled: TYPE_ENUM
     UNSET: Use the default Chrome setting.
     FALSE: Do not display the display size setting screen during sign-in.
@@ -5830,7 +5935,7 @@ chrome.users.ShowLogoutButton: Show sign-out button in tray.
     true: Show sign-out button in tray.
     false: Do not show sign-out button in tray.
 
-chrome.users.ShowTouchpadScrollScreenEnabled: Controls whether touchpad scroll direction screen is displayed during sign-in.
+chrome.users.ShowTouchpadScrollScreenEnabled: Touchpad scroll setting during sign-in.
   showTouchpadScrollScreenEnabled: TYPE_BOOL
     true: Display the touchpad scroll direction screen during sign-in.
     false: Do not display the touchpad scroll direction screen during sign-in.
@@ -5854,6 +5959,7 @@ chrome.users.SimpleProxySettings: Proxy mode.
   simpleProxyMode: TYPE_ENUM
     USER_CONFIGURED: Allow user to configure.
     DIRECT: Never use a proxy.
+    SYSTEM: Use system proxy settings.
     AUTO_DETECT: Always auto detect the proxy.
     FIXED_SERVERS: Always use the proxy specified in 'simpleProxyServerUrl'.
     PAC_SCRIPT: Always use the proxy auto-config specified in 'simpleProxyPacUrl'.
@@ -5945,6 +6051,11 @@ chrome.users.SslVersionMin: Minimum SSL version enabled.
     TL_SV_1_2: TLS 1.2.
     SSL_V_3: SSL3.
 
+chrome.users.StandardizedBrowserZoomEnabled: Zoom Behavior.
+  standardizedBrowserZoomEnabled: TYPE_BOOL
+    true: Standard CSS zoom.
+    false: Legacy CSS zoom.
+
 chrome.users.StartupPages: Pages to load on startup.
   restoreOnStartupUrls: TYPE_LIST
     Startup pages. Example: https://example.com.
@@ -5992,6 +6103,9 @@ chrome.users.SyncSettingsCbcm: Chrome Sync and Roaming Profiles (Chrome Browser
     {'value': 'browsing_history', 'description': 'Browsing history.'}
   roamingProfileLocationCbcm: TYPE_STRING
     Roaming profile directory. Configures the directory that Google Chrome will use for storing the roaming copy of the profiles.
+  profileReauthPrompt: TYPE_ENUM
+    DO_NOT_PROMPT: Do not prompt for re-authentication after authentication expiration.
+    PROMPT_IN_TAB: Prompt for re-authentication in a tab after authentication expiration.
 
 chrome.users.SyncSettingsCros: Chrome Sync (ChromeOS).
   syncDisabledCros: TYPE_BOOL
@@ -6006,6 +6120,12 @@ chrome.users.SystemFeaturesDisableList: Disabled system features.
   systemFeaturesDisableList: TYPE_LIST
     {'value': 'camera', 'description': 'Camera.'}
 
+chrome.users.SystemShortcutBehavior: Override system shortcuts.
+  systemShortcutBehavior: TYPE_ENUM
+    DEFAULT: Do not override system shortcuts.
+    SHOULD_IGNORE_COMMON_VDI_SHORTCUTS: Override some system shortcuts.
+    SHOULD_IGNORE_COMMON_VDI_SHORTCUTS_FULLSCREEN_ONLY: Override some system shortcuts while in fullscreen.
+
 chrome.users.SystemTerminalSshAllowed: SSH in terminal system app.
   systemTerminalSshAllowed: TYPE_ENUM
     UNSET: Use the default Chrome setting.
@@ -6179,8 +6299,6 @@ chrome.users.UserDownloadDirectory: Download location.
     LOCAL_FOLDER_DEFAULT: Set local Downloads folder as default, but allow user to change.
     GOOGLE_DRIVE_DEFAULT: Set Google Drive as default, but allow user to change.
     GOOGLE_DRIVE_FORCED: Force Google Drive.
-    ONEDRIVE_DEFAULT: Set OneDrive as default, but allow user to change.
-    ONEDRIVE_FORCED: Force OneDrive.
 
 chrome.users.UserEnrollmentNudging: Initial sign-in.
   userEnrollmentNudging: TYPE_ENUM
@@ -6387,4 +6505,5 @@ chrome.users.ZstdContentEncodingEnabled: Zstd compression.
   zstdContentEncodingEnabled: TYPE_BOOL
     true: Allow zstd-compressed web content.
     false: Do not allow zstd-compressed web content.
-```
+
+```

docs/ChromeOS-Devices.md

@@ -391,7 +391,7 @@ given if invalid CrOS deviceIds are specified.
 ### Example: Add ChromeOS devices to a single OU
 Suppose you have a CSV file cros.csv with a single column: deviceId
 ```
-gam update ou /Students/2022 add cros_csvfile cros.csv:deviceId quickcrosmove
+gam update ou /Students/2022 add croscsvfile cros.csv:deviceId quickcrosmove
 ```
 
 ### Example: Add ChromeOS devices to multiple OUs

docs/Classroom-Courses.md

@@ -495,8 +495,9 @@ gam print course-announcements [todrive <ToDriveAttribute>*]
         (course|class <CourseEntity>)*|([teacher <UserItem>] [student <UserItem>] states <CourseStateList>])
         (courseannouncementids <CourseAnnouncementIDEntity>)|(announcementstates <CourseAnnouncementStateList>)*
         (orderby <CourseAnnouncementOrderByFieldName> [ascending|descending])*)
-        [creatoremail] [fields <CourseAnnouncementFieldNameList>] [formatjson [quotechar <Character>]]
+        [creatoremail] [fields <CourseAnnouncementFieldNameList>]
         [timefilter creationtime|updatetime|scheduledtime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 ```
 By default, the `print course-announcements` command displays course announcement information for all courses.
 
@@ -525,6 +526,8 @@ By default, all course announcement fields are displayed; use the following opti
 * `creatoremail` - Display course announcement creator email; requires an additional API call per course announcement.
 * `fields <CourseAnnouncementFieldNameList>` - Select specific fields to display.
 
+Use the `countsonly` option to display the number of announcements in a course but not their details.
+
 By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
 * `formatjson` - Display the fields in JSON format.
 
@@ -540,8 +543,9 @@ gam print course-materials [todrive <ToDriveAttribute>*]
         (course|class <CourseEntity>)*|([teacher <UserItem>] [student <UserItem>] states <CourseStateList>])
         (materialids <CourseMaterialIDEntity>)|(materialstates <CourseMaterialStateList>)*
         (orderby <CourseMaterialOrderByFieldName> [ascending|descending])*)
-        [showcreatoremails|creatoremail] [showtopicnames] [fields <CourseMaterialFieldNameList>] [formatjson [quotechar <Character>]]
+        [showcreatoremails|creatoremail] [showtopicnames] [fields <CourseMaterialFieldNameList>]
         [timefilter creationtime|updatetime|scheduledtime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 ```
 By default, the `print course-materials` command displays course materials information for all courses.
 
@@ -571,6 +575,8 @@ By default, all course materials fields are displayed; use the following options
 * `showtopicnames` - Display topic names; requires and additional API call per course.
 * `fields <CourseMaterialsFieldNameList>` - Select specific fields to display.
 
+Use the `countsonly` option to display the number of course materials in a course but not their details.
+
 By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
 * `formatjson` - Display the fields in JSON format.
 
@@ -585,8 +591,8 @@ The `quotechar <Character>` option allows you to choose an alternate quote chara
 gam print course-topics [todrive <ToDriveAttribute>*]
         (course|class <CourseEntity>)*|([teacher <UserItem>] [student <UserItem>] states <CourseStateList>])
         (coursetopicids <CourseTopicIDEntity>)
-        [formatjson [quotechar <Character>]]
         [timefilter updatetime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 ```
 By default, the `print course-topics` command displays course topic information for all courses.
 
@@ -611,6 +617,8 @@ To get information about course topics updated within a particular time frame, u
 * `end|endtime <Date>|<Time>` - specify the end of the time frame; if not specified, the time frame will be open ended at the end
 For the filter to apply, `timefilter` and at least one of `start|starttime` and `end|endtime` must be specified.
 
+Use the `countsonly` option to display the number of topics in a course but not their details.
+
 By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
 * `formatjson` - Display the fields in JSON format.
 
@@ -628,8 +636,8 @@ gam print course-work [todrive <ToDriveAttribute>*]
         (orderby <CourseWorkOrderByFieldName> [ascending|descending])*)
         [showcreatoremails] [showtopicnames] [fields <CourseWorkFieldNameList>]
         [showstudentsaslist [<Boolean>]] [delimiter <Character>]
-        [formatjson [quotechar <Character>]]
         [timefilter creationtime|updatetime|scheduledtime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 ```
 By default, the `print course-work` command displays course work information for all courses.
 
@@ -662,6 +670,8 @@ By default, all course work fields are displayed; use the following options to m
 By default, when course work is assigned to individual students, the student IDs are displayed in multiple indexed columns.
 Use options `showstudentsaslist [<Boolean>]` and `delimiter <Character>` to display the student IDs is a single column as a delimited list.
 
+Use the `countsonly` option to display the number of course works in a course but not their details.
+
 By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
 * `formatjson` - Display the fields in JSON format.
 
@@ -678,8 +688,9 @@ gam print course-submissions [todrive <ToDriveAttribute>*]
         (workids <CourseWorkIDEntity>)|(workstates <CourseWorkStateList>)*
         (orderby <CourseWorkOrderByFieldName> [ascending|descending])*)
         (submissionids <CourseSubmissionIDEntity>)|(submissionstates <CourseSubmissionStateList>)*) [late|notlate]
-        [fields <CourseSubmissionFieldNameList>] [showuserprofile] [formatjson [quotechar <Character>]]
+        [fields <CourseSubmissionFieldNameList>] [showuserprofile]
         [timefilter creationtime|updatetime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 ```
 By default, the `print course-submissions` command displays course submission information for all course work for all courses.
 
@@ -704,7 +715,7 @@ By default, all course submissions for a course work is displayed; use the follo
 * `late` - Display course submissions marked late.
 * `notlate` - Display course submissions not marked late.
 
-To get information about course submissionss created/updated within a particular time frame, use the following options.
+To get information about course submissions created/updated within a particular time frame, use the following options.
 * `timefilter creationtime|updatetime` - select which event to filter
 * `start|starttime <Date>|<Time>` - specify the start of the time frame; if not specified, the time frame will be open ended at the start
 * `end|endtime <Date>|<Time>` - specify the end of the time frame; if not specified, the time frame will be open ended at the end
@@ -717,6 +728,8 @@ By default, only the numeric userId is displayed; use the `showuserprofile` opti
 You can only get profile information if the scope `https://www.googleapis.com/auth/classroom.profile.emails` is enabled
 for service account access; verify with `gam <UserTypeEntity> update serviceaccount`.
 
+Use the `countsonly` option to display the number of submissions in a course but not their details.
+
 By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
 * `formatjson` - Display the fields in JSON format.
 

docs/GamUpdates.md

@@ -10,6 +10,77 @@ Add the `-s` option to the end of the above commands to suppress creating the `g
 
 See [Downloads-Installs](https://github.com/taers232c/GAMADV-XTD3/wiki/Downloads-Installs) for Windows or other options, including manual installation
 
+### 7.00.02
+
+Added option `showlastmodification` to `gam <UserTypeEntity> print|show filecounts` that adds
+the following fields to the output: `lastModifiedFileId,lastModifiedFileName,lastModifyingUser,lastModifiedTime`;
+these are for the most recently modified file.
+
+Added option `keepforever [<Boolean>]` to `gam <UserTypeEntity> update filerevisions` that allows setting
+`Keep forever` in revisions.
+
+Upgraded to Python 3.12.6 where possible.
+
+### 7.00.01
+
+Added option `shownames` to `gam <UserTypeEntity> print|show sheet` that causes GAM
+to make an additional API call to get and display the sheet file name that is not supplied by the Sheets API.
+
+### 7.00.00
+
+Merged GAM-Team version
+
+### 6.81.02
+
+Updated `gam update group postmaster@domain.com` to handle the error that is generated.
+
+### 6.81.01
+
+Fixed bug in `gam <UserTypeEntity> create meetspace` that caused errors
+due to Developer Preview options being included.
+
+### 6.81.00
+
+Added support for groups when defining Chrome policies.
+
+Added support for the Meet API.
+
+* See: https://github.com/taers232c/GAMADV-XTD3/wiki/Users-Meet
+
+Added option `countsonly` to the following course commands that displays
+the number of items in a course but not the details of the items.
+```
+gam print course-announcements
+gam print course-materials
+gam print course-submissions
+gam print course-topics
+gam print course-work
+```
+
+### 6.80.21
+
+Updated `gam <UserTypeEntity> archive messages` to handle the following error:
+```
+googleapiclient.errors.MediaUploadSizeError: Media larger than: 26214400
+```
+
+### 6.80.20
+
+Updated `gam report usage user` and `gam report users`  to handle the following error:
+```
+ERROR: 503: serviceNotAvailable - The service is currently unavailable.
+```
+
+### 6.80.19
+
+Fixed bug in `gam create inboundssoprofile` that caused a trap due to
+an unexpected API result.
+
+Updated `gam create inboundssoprofile ... returnnameonly` to return `inProgress` if the API
+does not return a complete result.
+
+Upgraded to OpenSSL 3.3.2 where possible.
+
 ### 6.80.18
 
 Updated `gam print|show admins` to handle the following error:

docs/How-to-Upgrade-from-Standard-GAM.md

@@ -251,7 +251,7 @@ writes the credentials into the file oauth2.txt.
 admin@server:/Users/admin$ rm -f /Users/admin/GAMConfig/oauth2.txt
 admin@server:/Users/admin$ gam version
 WARNING: Config File: /Users/admin/GAMConfig/gam.cfg, Section: DEFAULT, Item: oauth2_txt, Value: /Users/admin/GAMConfig/oauth2.txt, Not Found
-GAMADV-XTD3 6.80.18 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
+GAMADV-XTD3 7.00.02 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
 Ross Scroggs <ross.scroggs@gmail.com>
 Python 3.12.5 64-bit final
 MacOS Sonoma 14.5 x86_64
@@ -923,7 +923,7 @@ writes the credentials into the file oauth2.txt.
 C:\>del C:\GAMConfig\oauth2.txt
 C:\>gam version
 WARNING: Config File: C:\GAMConfig\gam.cfg, Section: DEFAULT, Item: oauth2_txt, Value: C:\GAMConfig\oauth2.txt, Not Found
-GAMADV-XTD3 6.80.18 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
+GAMADV-XTD3 7.00.02 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
 Ross Scroggs <ross.scroggs@gmail.com>
 Python 3.12.5 64-bit final
 Windows-10-10.0.17134 AMD64

docs/Inbound-SSO.md

@@ -53,6 +53,8 @@ use the `returnnameonly` option to have GAM display just the profile name of the
 This will be useful in scripts that create|update a profile and then want to perform subsequent GAM commands that
 reference the profile.
 
+If `returnnameonly is specified, `inProgress` is returned if the API does not return a complete result.
+
 ```
 gam delete inboundssoprofile <SSOProfileItem>
 ```

docs/Reports.md

@@ -2,6 +2,7 @@
 - [API documentation](#api-documentation)
 - [Collections of Users](Collections-of-Users)
 - [Definitions](#definitions)
+- [Special quoting](#special-quoting)
 - [Activity reports](#activity-reports)
   - [Find Shared Drives with no activity](#find-shared-drives-with-no-activity)
 - [Customer and user reports parameters](#customer-and-user-reports-parameters)
@@ -24,6 +25,17 @@
         never|
         now|today
 ```
+## Special quoting
+If you are going to use `config csv_output_row_filter` when printing reports,
+you'll need special quoting in the filter because of the `:` characters in the parameter names.
+
+See: https://github.com/taers232c/GAMADV-XTD3/wiki/CSV-Output-Filtering#quoting-rules
+
+For example:
+```
+config csv_output_row_filter "'\"accounts:used_quota_in_mb\":count>15000'"
+```
+
 ## Activity reports
 ```
 <ActivityApplicationName> ::=

docs/Shared-Drives.md

@@ -12,7 +12,9 @@
   - [Delete a Shared Drive](#delete-a-shared-drive)
   - [Change Shared Drive visibility](#change-shared-drive-visibility)
 - [Display Shared Drives](#display-shared-drives)
+- [Display List of Shared Drives in an Organizational Unit other than /](#display-list-of-shared-drives-in-an-organizational-unit-other-than-)
 - [Display List of Shared Drives in an Organizational Unit](#display-list-of-shared-drives-in-an-organizational-unit)
+- [Display all Shared Drives with no organizers](#display-all-shared-drives-with-no-organizers)
 - [Display all Shared Drives with a specific organizer](#display-all-shared-drives-with-a-specific-organizer)
 - [Display all Shared Drives without a specific organizer](#display-all-shared-drives-without-a-specific-organizer)
 - [Manage Shared Drive access](#manage-shared-drive-access)
@@ -389,15 +391,15 @@ Print information about all Shared Drives in the organization.
 gam print teamdrives
 gam user admin@domain.com print teamdrives adminaccess
 ```
-Print information about all Shared Drives in the organization with no organizers.
-```
-gam print teamdrives query "organizerCount = 0"
-gam user admin@domain.com print teamdrives adminaccess teamdriveadminquery "organizerCount = 0"
-```
 Print information about Shared Drives that have admin@domain.com as a member.
 ```
 gam user admin@domain.com print teamdrives
 ```
+## Display all Shared Drives with no organizers
+```
+gam print teamdrives query "organizerCount = 0"
+```
+
 ## Display all Shared Drives with a specific organizer
 Substitute actual email address for `organizer@domain.com`.
 ```
@@ -410,40 +412,20 @@ Substitute actual email address for `organizer@domain.com`.
 gam config csv_output_header_filter "id,name" print teamdriveacls pm emailaddress organizer@domain.com role organizer em pma skip pmselect
 ```
 
+## Display List of Shared Drives in an Organizational Unit other than /
+Get the orgUnitID of OU / and use it (without the id:) in the print|show command. Adjust fields as desired.
+```
+gam info ou / nousers
+gam show teamdrives query "orgUnitId!='00gjdgxs2p9cxyz'" fields id,name,orgunit,createdtime
+gam print teamdrives query "orgUnitId!='00gjdgxs2p9cxyz'" fields id,name,orgunit,createdtime
+```
+
 ## Display List of Shared Drives in an Organizational Unit
-To use this command you must add the `Cloud Identity API` to your project and authorize
-the appropriate scope: `Cloud Identity OrgUnits API`.
-
-You'll have to do `gam update project` and `gam oauth create` to enable this command.
-
+Get the orgUnitID of the desired OU and use it (without the id:) in the print|show command. Adjust fields as desired.
 ```
-gam show oushareddrives
-        [ou|org|orgunit <OrgUnitPath>]                                                                                                                                                                                                                                             
-        [formatjson]
-```
-If `ou|org|orgunit <OrgUnitPath>` is not specified, `/` is used.
-
-By default, Gam displays the information as an indented list of keys and values.
-* `formatjson` - Display the fields in JSON format.
-```
-gam print oushareddrives [todrive <ToDriveAttribute>*]
-        [ou|org|orgunit <OrgUnitPath>]
-        [formatjson [quotechar <Character>]]
-```
-If `ou|org|orgunit <OrgUnitPath>` is not specified, `/` is used.
-
-By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
-* `formatjson` - Display the fields in JSON format.
-
-By default, when writing CSV files, Gam uses a quote character of double quote `"`. The quote character is used to enclose columns that contain
-the quote character itself, the column delimiter (comma by default) and new-line characters. Any quote characters within the column are doubled.
-When using the `formatjson` option, double quotes are used extensively in the data resulting in hard to read/process output.
-The `quotechar <Character>` option allows you to choose an alternate quote character, single quote for instance, that makes for readable/processable output.
-`quotechar` defaults to `gam.cfg/csv_output_quote_char`. When uploading CSV files to Google, double quote `"` should be used.
-
-### Get clean, simple output
-```
-gam config csv_output_header_filter "driveId,driveName,orgUnitPath" print oushareddrives [ou <OrgUnitPath>]
+gam info ou <OrgUnitPath> nousers
+gam show teamdrives query "orgUnitId='03ph8a2z21rexy'" fields id,name,orgunit,createdtime
+gam print teamdrives query "orgUnitId='03ph8a2z21rexy'" fields id,name,orgunit,createdtime
 ```
 
 ## Manage Shared Drive access

docs/Users-Drive-Files-Display.md

@@ -693,7 +693,8 @@ gam <UserTypeEntity> print filecounts [todrive <ToDriveAttribute>*]
         [filenamematchpattern <RegularExpression>]
         <PermissionMatch>* [<PermissionMatchMode>] [<PermissionMatchAction>]
         [excludetrashed]
-        [showsize] [showmimetypesize] (addcsvdata <FieldName> <String>)*
+        [showsize] [showmimetypesize] [showlastmodification]
+        (addcsvdata <FieldName> <String>)*
         [summary none|only|plus] [summaryuser <String>]
 gam <UserTypeEntity> show filecounts
         [((query <QueryDriveFile>) | (fullquery <QueryDriveFile>) | <DriveFileQueryShortcut>)
@@ -707,13 +708,13 @@ gam <UserTypeEntity> show filecounts
         [filenamematchpattern <RegularExpression>]
         <PermissionMatch>* [<PermissionMatchMode>] [<PermissionMatchAction>]
         [excludetrashed]
-        [showsize] [showmimetypesize]
+        [showsize] [showmimetypesize] [showlastmodification]
         [summary none|only|plus] [summaryuser <String>]
 ```
 
 By default, print filecounts displays counts of all files owned by the specified [`<UserTypeEntity>`](Collections-of-Users).
 
-The option `continueoninvalidquery [<Boolean>] can be used in special cases where a query  of the form
+The option `continueoninvalidquery [<Boolean>] can be used in special cases where a query of the form
 `query "'labels/mRoha85IbwCRl490E00xGLvBsSbkwIiuZ6PRNNEbwxyz' in labels" causes Google to issue an error
 saying that the query is invalid when, in fact, it is but the user does not have a license that suppprts drive file labels.
 When `continueoninvalidquery` is true, GAM prints an error message and proceeds to the next user rather that terminating
@@ -723,6 +724,10 @@ The `showsize` option displays the total size (in bytes) of the files counted.
 
 The showmimetypesize' displays the total size (in bytes) of each MIME type counted.
 
+The option `showlastmodification` displays the following fields:
+`lastModifiedFileId,lastModifiedFileName,lastModifyingUser,lastModifiedTime`;
+these are for the most recently modified file.
+
 For print filecouts, add additional columns of data from the command line to the output:
 * `addcsvdata <FieldName> <String>` - Add additional columns of data from the command line to the output
 

docs/Users-Drive-Revisions.md

@@ -85,6 +85,8 @@ gam <UserTypeEntity> update filerevisions <DriveFileEntity> select <DriveFileRev
 ```
 When `select <DriveFileRevisionIDEntity>` is omitted, all revisions are updated. 
 
+* `keepforever true` - Keep revision forever, even if it is no longer the head revision
+* `keepforever false` - Do not keep revision forever
 * `published true` - Publish these revision to the web
 * `published false` - Do not publish these revision to the web
 * `publishauto true` - Automaticaly publish subsequent revisions to the web

docs/Users-Looker-Studio.md

@@ -17,6 +17,8 @@ To use these commands you must add the 'Looker Studio API' to your project and u
 ```
 gam update project
 gam user user@domain.com check serviceaccount
+...
+[*] 35)  Looker Studio API (supports readonly)
 ```
 ## Definitions
 * [`<UserTypeEntity>`](Collections-of-Users)

docs/Users-Meet.md

@@ -0,0 +1,174 @@
+# Users - Meet
+- [API documentation](#api-documentation)
+- [Query documentation](#query-documentation)
+- [Introduction](#introduction)
+- [Definitions](#definitions)
+- [Manage Meet Spaces](#manage-meet-spaces)
+- [Display Meet Conferences](#display-meet-conferences)
+- [Display Meet Participants](#display-meet-participants)
+- [Display Meet Recordings](#display-meet-recordings)
+- [Display Meet Transcripts](#display-meet-transcripts)
+
+## API documentation
+* https://developers.google.com/meet/api/reference/rest/v2
+* https://developers.google.com/meet/api/reference/rest/v2/spaces
+* https://developers.google.com/meet/api/reference/rest/v2/conferenceRecords
+* https://developers.google.com/meet/api/reference/rest/v2/conferenceRecords.participants
+* https://developers.google.com/meet/api/reference/rest/v2/conferenceRecords.recordings
+* https://developers.google.com/meet/api/reference/rest/v2/conferenceRecords.transcripts
+
+## Query documentation
+* https://developers.google.com/meet/api/reference/rest/v2/conferenceRecords/list
+* https://developers.google.com/meet/api/reference/rest/v2/conferenceRecords.participants/list
+
+## Introduction
+These features were added in version 6.81.00.
+
+To use these commands you must add the 'Meet API' to your project and update your service account authorization.
+```
+gam update project
+gam user user@domain.com update serviceaccount
+...
+[*] 36)  Meet API (supports readonly)
+
+```
+## Definitions
+* [`<UserTypeEntity>`](Collections-of-Users)
+```
+<MeetConferenceName> ::= conferenceRecords/<String>
+<MeetSpaceName> ::= spaces/<String> | <String>
+<MeetSpaceOptions> ::=
+        accesstype open|trusted|restricted |
+        entrypointaccess all|creatorapponly
+```
+
+## Manage Meet Spaces
+### Create a meet space
+```
+gam <UserTypeEntity> create meetspace
+        <MeetSpaceOptions>*
+        [formatjson|returnidonly]
+```
+By default, Gam displays the information about the created meetspace as an indented list of keys and values.
+* `formatjson` - Display the fields in JSON format.
+* `returnidonly` - Display the meetspace name only
+
+### Update a meet space
+```
+gam <UserTypeEntity> update meetspace <MeetSpaceName>
+        <MeetSpaceOptions>*
+        [formatjson]
+```
+By default, Gam displays the information about the created meetspace as an indented list of keys and values.
+* `formatjson` - Display the fields in JSON format.
+
+### Display information about a specific meet space for a user
+```
+gam <UserTypeEntity> info meetspace <MeetSpaceName>
+        [formatjson]
+```
+By default, Gam displays the information as an indented list of keys and values.
+* `formatjson` - Display the fields in JSON format.
+
+### End a meet space conference
+```
+gam <UserTypeEntity> end meetconference <MeetSpaceName>
+```
+
+## Display Meet Conferences
+```
+gam <UserItem> show meetconferences
+        [space <MeetSpaceName>] [code <String>]
+        [andquery|orquery <String>] [querytime<String> <Time>]
+        [formatjson]
+```
+By default, conferences are shown for all of a user's meet spaces. To limit the display use:
+  * `space <MeetSpaceName>` - Display conferences for a specifc space by giving its name
+  * `code <String>` - Display conferences for a specifc space by giving its code
+  
+By default, Gam displays the information about the meet conferences as an indented list of keys and values.
+* `formatjson` - Display the fields in JSON format.
+```
+gam <UserItem> print meetconferences [todrive <ToDriveAttribute>*]
+        [space <MeetSpaceName>] [code <String>]
+        [andquery|orquery <String>] [querytime<String> <Time>]
+        [formatjson [quotechar <Character>]]
+```
+By default, conferences are shown for all of a user's meet spaces. To limit the display use:
+  * `space <MeetSpaceName>` - Display conferences for a specifc space by giving its name
+  * `code <String>` - Display conferences for a specifc space by giving its code
+  
+By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
+* `formatjson` - Display the fields in JSON format.
+
+By default, when writing CSV files, Gam uses a quote character of double quote `"`. The quote character is used to enclose columns that contain
+the quote character itself, the column delimiter (comma by default) and new-line characters. Any quote characters within the column are doubled.
+When using the `formatjson` option, double quotes are used extensively in the data resulting in hard to read/process output.
+The `quotechar <Character>` option allows you to choose an alternate quote character, single quote for instance, that makes for readable/processable output.
+`quotechar` defaults to `gam.cfg/csv_output_quote_char`. When uploading CSV files to Google, double quote `"` should be used.
+
+
+## Display Meet Participants
+```
+gam <UserItem> show meetparticipants <MeetConferenceName>
+        [query <String>] [querytime<String> <Time>]
+        [formatjson]
+```
+By default, Gam displays the information about the meet participants as an indented list of keys and values.
+* `formatjson` - Display the fields in JSON format.
+```
+gam <UserItem> print meetparticipants <MeetConferenceName> [todrive <ToDriveAttribute>*]
+        [query <String>] [querytime<String> <Time>]
+        [formatjson [quotechar <Character>]]
+```
+By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
+* `formatjson` - Display the fields in JSON format.
+
+By default, when writing CSV files, Gam uses a quote character of double quote `"`. The quote character is used to enclose columns that contain
+the quote character itself, the column delimiter (comma by default) and new-line characters. Any quote characters within the column are doubled.
+When using the `formatjson` option, double quotes are used extensively in the data resulting in hard to read/process output.
+The `quotechar <Character>` option allows you to choose an alternate quote character, single quote for instance, that makes for readable/processable output.
+`quotechar` defaults to `gam.cfg/csv_output_quote_char`. When uploading CSV files to Google, double quote `"` should be used.
+
+
+## Display Meet Recordings
+```
+gam <UserItem> show meetrecordings <MeetConferenceName>
+        [formatjson]
+```
+By default, Gam displays the information about the meet recordings as an indented list of keys and values.
+* `formatjson` - Display the fields in JSON format.
+```
+gam <UserItem> print meetrecordings <MeetConferenceName> [todrive <ToDriveAttribute>*]
+        [formatjson [quotechar <Character>]]
+```
+By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
+* `formatjson` - Display the fields in JSON format.
+
+By default, when writing CSV files, Gam uses a quote character of double quote `"`. The quote character is used to enclose columns that contain
+the quote character itself, the column delimiter (comma by default) and new-line characters. Any quote characters within the column are doubled.
+When using the `formatjson` option, double quotes are used extensively in the data resulting in hard to read/process output.
+The `quotechar <Character>` option allows you to choose an alternate quote character, single quote for instance, that makes for readable/processable output.
+`quotechar` defaults to `gam.cfg/csv_output_quote_char`. When uploading CSV files to Google, double quote `"` should be used.
+
+
+## Display Meet Transcripts
+```
+gam <UserItem> show meettranscripts <MeetConferenceName>
+        [formatjson]
+```
+By default, Gam displays the information about the meet transcripts as an indented list of keys and values.
+* `formatjson` - Display the fields in JSON format.
+```
+gam <UserItem> print meettranscripts <MeetConferenceName> [todrive <ToDriveAttribute>*]
+        [formatjson [quotechar <Character>]]
+```
+By default, Gam displays the information as columns of fields; the following option causes the output to be in JSON format,
+* `formatjson` - Display the fields in JSON format.
+
+By default, when writing CSV files, Gam uses a quote character of double quote `"`. The quote character is used to enclose columns that contain
+the quote character itself, the column delimiter (comma by default) and new-line characters. Any quote characters within the column are doubled.
+When using the `formatjson` option, double quotes are used extensively in the data resulting in hard to read/process output.
+The `quotechar <Character>` option allows you to choose an alternate quote character, single quote for instance, that makes for readable/processable output.
+`quotechar` defaults to `gam.cfg/csv_output_quote_char`. When uploading CSV files to Google, double quote `"` should be used.
+

docs/Users-Spreadsheets.md

@@ -231,18 +231,24 @@ gam user testuser@domain.com update sheet <DriveFileItem> json file Sheet.json
 gam <UserTypeEntity> info|show sheet <DriveFileEntity>
         [fields <SpreadsheetFieldList>] [sheetsfields <SpreadsheetSheetsFieldList>]
         (range <SpreadsheetRange>)* (rangelist <SpreadsheetRangeList>)*
-        [includegriddata [<Boolean>]]
+        [includegriddata [<Boolean>]] [shownames]
         [formatjson]
 ```
+By default, the Sheets API does not return the sheet file name, use the `shownames` option to have GAM
+make an additional API call to get and display the sheet file name.
+
 The output is formatted for human readability. Use the following option to produce JSON output for program parsing.
 * `formatjson` - Display output in JSON format.
 ```
 gam <UserTypeEntity> print sheet <DriveFileEntity> [todrive <ToDriveAttribute>*]
         [fields <SpreadsheetFieldList>] [sheetsfields <SpreadsheetSheetsFieldList>]
         (range <SpreadsheetRange>)* (rangelist <SpreadsheetRangeList>)*
-        [includegriddata [<Boolean>]]
+        [includegriddata [<Boolean>]] [shownames]
         [formatjson [quotechar <Character>]]
 ```
+By default, the Sheets API does not return the sheet file name, use the `shownames` option to have GAM
+make an additional API call to get and display the sheet file name.
+
 By default, when writing CSV files, Gam uses a quote character of double quote `"`. The quote character is used to enclose columns that contain
 the quote character itself, the column delimiter (comma by default) and new-line characters. Any quote characters within the column are doubled.
 When using the `formatjson` option, double quotes are used extensively in the data resulting in hard to read/process output.

docs/Users.md

@@ -1,7 +1,7 @@
 # Users
 - [API documentation](#api-documentation)
-- [Name guidelines](#name-guidelines)
 - [Query documentation](#query-documentation)
+- [Name guidelines](#name-guidelines)
 - [Quoting rules](#quoting-rules)
 - [Python Regular Expressions](Python-Regular-Expressions) Match function and Search function
 - [Definitions](#definitions)
@@ -46,12 +46,12 @@
 * https://developers.google.com/admin-sdk/directory/reference/rest/v1/users
 * https://developers.google.com/admin-sdk/directory/reference/rest/v1/schemas
 
-## Name guidelines
-* https://support.google.com/a/answer/9193374
-
 ## Query documentation
 * https://developers.google.com/admin-sdk/directory/v1/guides/search-users
 
+## Name guidelines
+* https://support.google.com/a/answer/9193374
+
 ## Quoting rules
 Items in a list can be separated by commas or spaces; if an item itself contains a comma, a space or a single quote, special quoting must be used.
 Typically, you will enclose the entire list in double quotes and quote each item in the list as detailed below.

docs/Version-and-Help.md

@@ -3,7 +3,7 @@
 Print the current version of Gam with details
 ```
 gam version
-GAMADV-XTD3 6.80.18 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
+GAMADV-XTD3 7.00.02 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
 Ross Scroggs <ross.scroggs@gmail.com>
 Python 3.12.5 64-bit final
 MacOS Sonoma 14.5 x86_64
@@ -15,7 +15,7 @@ Time: 2023-06-02T21:10:00-07:00
 Print the current version of Gam with details and time offset information
 ```
 gam version timeoffset
-GAMADV-XTD3 6.80.18 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
+GAMADV-XTD3 7.00.02 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
 Ross Scroggs <ross.scroggs@gmail.com>
 Python 3.12.5 64-bit final
 MacOS Sonoma 14.5 x86_64
@@ -27,7 +27,7 @@ Your system time differs from www.googleapis.com by less than 1 second
 Print the current version of Gam with extended details and SSL information
 ```
 gam version extended
-GAMADV-XTD3 6.80.18 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
+GAMADV-XTD3 7.00.02 - https://github.com/taers232c/GAMADV-XTD3 - pythonsource
 Ross Scroggs <ross.scroggs@gmail.com>
 Python 3.12.5 64-bit final
 MacOS Sonoma 14.5 x86_64
@@ -64,7 +64,7 @@ MacOS High Sierra 10.13.6 x86_64
 Path: /Users/Admin/bin/gamadv-xtd3
 Version Check:
   Current: 5.35.08
-   Latest: 6.80.18
+   Latest: 7.00.02
 echo $?
 1
 ```
@@ -72,7 +72,7 @@ echo $?
 Print the current version number without details
 ```
 gam version simple
-6.80.18
+7.00.02
 ```
 In Linux/MacOS you can do:
 ```
@@ -82,7 +82,7 @@ echo $VER
 Print the current version of Gam and address of this Wiki
 ```
 gam help
-GAM 6.80.18 - https://github.com/taers232c/GAMADV-XTD3
+GAM 7.00.02 - https://github.com/taers232c/GAMADV-XTD3
 Ross Scroggs <ross.scroggs@gmail.com>
 Python 3.12.5 64-bit final
 MacOS Sonoma 14.5 x86_64

docs/_Sidebar.md

@@ -155,6 +155,8 @@ Service Account Access
 * [Users - Group Membership](Users-Group-Membership)
 * [Users - Keep](Users-Keep)
 * [Users - Looker Studio](Users-Looker-Studio)
+* [Users - Meet](Users-Meet)
+* [Users - Classroom - Profile](Users-Classroom-Profile)
 * [Users - People - Contacts & Profiles](Users-People-Contacts-Profiles)
 * [Users - Photo](Users-Photo)
 * [Users - Profile Sharing](Users-Profile-Sharing)

src/GamCommands.txt

@@ -2599,19 +2599,21 @@ gam create chromepolicyimage <ChromePolicyImageSchemaName> <FileName>
 
 gam update chromepolicy [convertcrnl]
         (<SchemaName> ((<Field> <Value>)+ | <JSONData>))+
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
+        ((ou|orgunit <OrgUnitItem>)|(cigroup <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
 gam delete chromepolicy
         (<SchemaName> [<JSONData>])+
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
+        ((ou|orgunit <OrgUnitItem>)|(cigroup <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
 gam show chromepolicies
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
-        [filter <String>] [namespace <NamespaceList>]
-        [show all|direct|inherited]
+        ((ou|orgunit <OrgUnitItem> [show all|direct|inherited])|(cigroup <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
+        (filter <StringList>)* (namespace <NamespaceList>)*
         [formatjson]
 gam print chromepolicies [todrive <ToDriveAttribute>*]
-        ou|org|orgunit <OrgUnitItem> [(printerid <PrinterID>)|(appid <AppID>)]
-        [filter <String>] [namespace <NamespaceList>]
-        [show all|direct|inherited]
+        ((ou|orgunit <OrgUnitItem> [show all|direct|inherited])|(cigroup <GroupItem>))
+        [(printerid <PrinterID>)|(appid <AppID>)]
+        (filter <StringList>)* (namespace <NamespaceList>)*
         [[formatjson [quotechar <Character>]]
 
 <ChromePolicySchemaFieldName> ::=
@@ -3144,36 +3146,36 @@ gam print course-announcements [todrive <ToDriveAttribute>*]
         (announcementids <CourseAnnouncementIDEntity>)|((announcementstates <CourseAnnouncementStateList>)*
         (orderby <CourseAnnouncementOrderByFieldName> [ascending|descending])*)
         [showcreatoremails|creatoremail] [fields <CourseAnnouncementFieldNameList>]
-        [formatjson [quotechar <Character>]]
         [timefilter creationtime|updatetime|scheduledtime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 gam print course-materials [todrive <ToDriveAttribute>*]
         (course|class <CourseEntity>)*|([teacher <UserItem>] [student <UserItem>] states <CourseStateList>])
         (materialids <CourseMaterialIDEntity>)|((materialstates <CourseMaterialStateList>)*
         (orderby <CourseMaterialOrderByFieldName> [ascending|descending])*)
         [showcreatoremails|creatoremail] [showtopicnames] [fields <CourseMaterialFieldNameList>]
-        [formatjson [quotechar <Character>]]
         [timefilter creationtime|updatetime|scheduledtime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 gam print course-submissions [todrive <ToDriveAttribute>*]
         (course|class <CourseEntity>)*|([teacher <UserItem>] [student <UserItem>] states <CourseStateList>])
         (workids <CourseWorkIDEntity>)|((workstates <CourseWorkStateList>)*
         (orderby <CourseWorkOrderByFieldName> [ascending|descending])*)
         (submissionids <CourseSubmissionIDEntity>)|((submissionstates <CourseSubmissionStateList>)*) [late|notlate]
         [fields <CourseSubmissionFieldNameList>]
-        [formatjson [quotechar <Character>]] [showuserprofile]
         [timefilter creationtime|updatetime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 gam print course-topics [todrive <ToDriveAttribute>*]
         (course|class <CourseEntity>)*|([teacher <UserItem>] [student <UserItem>] states <CourseStateList>])
         [topicids <CourseTopicIDEntity>]
-        [formatjson [quotechar <Character>]]
         [timefilter updatetime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 gam print course-works [todrive <ToDriveAttribute>*]
         (course|class <CourseEntity>)*|([teacher <UserItem>] [student <UserItem>] states <CourseStateList>])
         (workids <CourseWorkIDEntity>)|((workstates <CourseWorkStateList>)*
         (orderby <CourseWorkOrderByFieldName> [ascending|descending])*)
         [showcreatoremails|creatoremail] [showtopicnames] [fields <CourseWorkFieldNameList>]
         [showstudentsaslist [<Boolean>]] [delimiter <Character>]
-        [formatjson [quotechar <Character>]]
         [timefilter creationtime|updatetime|scheduledtime] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>]
+        [countsonly] [formatjson [quotechar <Character>]]
 
 # Classroom - Invitations
 
@@ -3539,11 +3541,11 @@ gam [<UserTypeEntity>] show drivelabels
         [formatjson] [adminaccess|asadmin]
 `
 gam [<UserTypeEntity>] create drivelabelpermission <DriveLabelNameEntity>
-        (user <UserItem>) | (group <GroupItem) | (audience <String>)
+        (user <UserItem>) | (group <GroupItem>) | (audience <String>)
         role applier|editor|organizer|reader
         [formatjson] [adminaccess|asadmin]
 gam [<UserTypeEntity>] delete drivelabelpermission <DriveLabelNameEntity>
-        (user <UserItem>) | (group <GroupItem) | (audience <String>)
+        (user <UserItem>) | (group <GroupItem>) | (audience <String>)
         [adminaccess|asadmin]
 gam [<UserTypeEntity>] remove drivelabelpermission <DriveLabelPermissionNameEntity>
         [adminaccess|asadmin]
@@ -6062,7 +6064,7 @@ gam <UserTypeEntity> print focustime|outofoffice|workinglocation
         [showdayofweek]
         [formatjson [quotechar <Character>]] [todrive <ToDriveAttribute>*]
 
-# Users Chat
+# Users - Chat
 
 <ChatContent> ::=
         ((text <String>)|
@@ -7041,7 +7043,8 @@ gam <UserTypeEntity> print filecounts [todrive <ToDriveAttribute>*]
         [filenamematchpattern <RegularExpression>]
         <PermissionMatch>* [<PermissionMatchMode>] [<PermissionMatchAction>]
         [excludetrashed]
-        [showsize] [showmimetypesize] (addcsvdata <FieldName> <String>)*
+        [showsize] [showmimetypesize] [showlastmodification]
+        (addcsvdata <FieldName> <String>)*
         [summary none|only|plus] [summaryuser <String>]
 gam <UserTypeEntity> show filecounts
         [((query <QueryDriveFile>) | (fullquery <QueryDriveFile>) | <DriveFileQueryShortcut>)
@@ -7050,12 +7053,12 @@ gam <UserTypeEntity> show filecounts
         [corpora <CorporaAttribute>]
         [select <SharedDriveEntity>]
         [anyowner|(showownedby any|me|others)]
-        [showmimetype [not] <MimeTypeList>] [`<showmimetype category <MimeTypeNameList>]
+        [showmimetype [not] <MimeTypeList>] [showmimetype category <MimeTypeNameList>]
         [sizefield quotabytesused|size] [minimumfilesize <Integer>] [maximumfilesize <Integer>]
         [filenamematchpattern <RegularExpression>]
         <PermissionMatch>* [<PermissionMatchMode>] [<PermissionMatchAction>]
         [excludetrashed]
-        [showsize] [showmimetypesize]
+        [showsize] [showmimetypesize] [showlastmodification]
         [summary none|only|plus] [summaryuser <String>]
 
 gam <UserTypeEntity> print filesharecounts [todrive <ToDriveAttribute>*]
@@ -7794,6 +7797,52 @@ gam <UserTypeEntity> show lookerstudiopermissions
         [role editor|owner|viewer]
         [formatjson]
 
+# Users - Meet
+
+<MeetConferenceName> ::= conferenceRecords/<String>
+<MeetSpaceName> ::= spaces/<String> | <String>
+<MeetSpaceOptions> ::=
+        accesstype open|trusted|restricted |
+        entrypointaccess all|creatorapponly
+
+gam <UserTypeEntity> create meetspace
+        <MeetSpaceOptions>*
+        [formatjson]
+
+gam <UserTypeEntity> update meetspace <MeetSpaceName>
+        <MeetSpaceOptions>*
+        [formatjson]
+
+gam <UserTypeEntity> info meetspace <MeetSpaceName>
+        [formatjson]
+
+gam <UserTypeEntity> end meetconference <MeetSpaceName>
+
+gam <UserItem> show meetconferences
+        [space <MeetSpaceName>] [code <String>]
+        [andquery|orquery <String>] [querytime<String> <Time>]
+        [formatjson]
+gam <UserItem> print meetconferences [todrive <ToDriveAttribute>*]
+        [andquery|orquery <String>] [querytime<String> <Time>]
+        [formatjson [quotechar <Character>]]
+
+gam <UserItem> show meetparticipants <MeetConferenceName>
+        [query <String>] [querytime<String> <Time>]
+        [formatjson]
+gam <UserItem> print meetparticipants <MeetConferenceName> [todrive <ToDriveAttribute>*]
+        [query <String>] [querytime<String> <Time>]
+        [formatjson [quotechar <Character>]]
+
+gam <UserItem> show meetrecordings <MeetConferenceName>
+        [formatjson]
+gam <UserItem> print meetrecordings <MeetConferenceName> [todrive <ToDriveAttribute>*]
+        [formatjson [quotechar <Character>]]
+
+gam <UserItem> show meettranscripts <MeetConferenceName>
+        [formatjson]
+gam <UserItem> print meettranscripts <MeetConferenceName> [todrive <ToDriveAttribute>*]
+        [formatjson [quotechar <Character>]]
+
 # Users - Contacts and Profiles
 
 <PeopleContactAttribute> ::=
@@ -8196,12 +8245,12 @@ gam <UserTypeEntity> update sheet <DriveFileEntity>
 gam <UserTypeEntity> info|show sheet <DriveFileEntity>
         [fields <SpreadsheetFieldList>] [sheetsfields <SpreadsheetSheetsFieldList>]
         (range <SpreadsheetRange>)* (rangelist <SpreadsheetRangeList>)*
-        [includegriddata [<Boolean>]]
+        [includegriddata [<Boolean>]] [shownames]
         [formatjson]
 gam <UserTypeEntity> print sheet <DriveFileEntity> [todrive <ToDriveAttribute>*]
         [fields <SpreadsheetFieldList>] [sheetsfields <SpreadsheetSheetsFieldList>]
         (range <SpreadsheetRange>)* (rangelist <SpreadsheetRangeList>)*
-        [includegriddata [<Boolean>]]
+        [includegriddata [<Boolean>]] [shownames]
         [formatjson [quotechar <Character>]]
 
 See: https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values#ValueRange

src/GamUpdate.txt

@@ -1,7 +1,74 @@
+7.00.02
+
+Added option `showlastmodification` to `gam <UserTypeEntity> print|show filecounts` that adds
+the following fields to the output: `lastModifiedFileId,lastModifiedFileName,lastModifyingUser,lastModifiedTime`;
+these are for the most recently modified file.
+
+Added option `keepforever [<Boolean>]` to `gam <UserTypeEntity> update filerevisions` that allows setting
+`Keep forever` in revisions.
+
+Upgraded to Python 3.12.6 where possible.
+
+7.00.01
+
+Added option `shownames` to `gam <UserTypeEntity> print|show sheet` that causes GAM
+to make an additional API call to get and display the sheet file name that is not supplied by the Sheets API.
+
 7.00.00
 
 Merged GAM-Team version
 
+6.81.02
+
+Updated `gam update group postmaster@domain.com` to handle the error that is generated.
+
+6.81.01
+
+Fixed bug in `gam <UserTypeEntity> create meetspace` that caused errors
+due to Developer Preview options being included.
+
+6.81.00
+
+Added support for groups when defining Chrome policies.
+
+Added support for the Meet API.
+
+* See: https://github.com/taers232c/GAMADV-XTD3/wiki/Users-Meet
+
+Added option `countsonly` to the following course commands that displays
+the number of items in a course but not the details of the items.
+```
+gam print course-announcements
+gam print course-materials
+gam print course-submissions
+gam print course-topics
+gam print course-work
+```
+
+6.80.21
+
+Updated `gam <UserTypeEntity> archive messages` to handle the following error:
+```
+googleapiclient.errors.MediaUploadSizeError: Media larger than: 26214400
+```
+
+6.80.20
+
+Updated `gam report usage user` and `gam report users` to handle the following error:
+```
+ERROR: 503: serviceNotAvailable - The service is currently unavailable.
+```
+
+6.80.19
+
+Fixed bug in `gam create inboundssoprofile` that caused a trap due to
+an unexpected API result.
+
+Updated `gam create inboundssoprofile ... returnnameonly` to return `inProgress` if the API
+does not return a complete result.
+
+Upgraded to OpenSSL 3.3.2 where possible.
+
 6.80.18
 
 Updated `gam print|show admins` to handle the following error:

src/gam-install.sh

@@ -16,7 +16,7 @@ OPTIONS:
    -u      Admin user email address to use with GAM. Default is to prompt.
    -r      Regular user email address. Used to test service account access to user data. Default is to prompt.
    -v      Version to install (latest, prerelease, draft, 3.8, etc). Default is latest.
-   -s      Strip gam7 component from extracted files, files will be downloaded directly to $target_dir
+   -s      Strip gam component from extracted files, files will be downloaded directly to $target_dir
 EOF
 }
 
@@ -30,7 +30,7 @@ upgrade_only=false
 gamversion="latest"
 adminuser=""
 regularuser=""
-gam_x86_64_glibc_vers="2.31"
+gam_x86_64_glibc_vers="2.35 2.31"
 gam_arm64_glibc_vers="2.31"
 strip_gam="--strip-components 0"
 
@@ -141,7 +141,25 @@ case $gamos in
     ;;
   [Mm]ac[Oo][sS]|[Dd]arwin)
     gamos="macos"
-    gamfile="macos-universal2.tar.xz"
+    case $gamarch in
+      x86_64)
+        fullversion=$(sw_vers -productVersion)
+        osversion=${fullversion:0:2}
+        case ${osversion:0:2} in
+          11|12|13|14)
+            gamfile="macos-x86_64.tar.xz";;
+          *)
+	    echo_red "Sorry, this version ($fullversion) of MacOS is not supported. Exiting."
+	    exit
+            ;;
+        esac
+        ;;
+      arm|arm64|aarch64)
+        gamfile="macos-aarch64.tar.xz";;
+      *)
+        echo_red "ERROR: this installer currently only supports x86_64 and arm64 MacOS. Looks like you're running on $gamarch. Exiting."
+        exit
+    esac
     ;;
   MINGW64_NT*)
     gamos="windows"
@@ -154,7 +172,9 @@ case $gamos in
     ;;
 esac
 
-if [ "$gamversion" == "latest" -o "$gamversion" == "prerelease" -o "$gamversion" == "draft" ]; then
+if [ "$gamversion" == "latest" ]; then
+  release_url="https://api.github.com/repos/GAM-team/GAM/releases/latest"
+elif [ "$gamversion" == "prerelease" -o "$gamversion" == "draft" ]; then
   release_url="https://api.github.com/repos/GAM-team/GAM/releases"
 else
   release_url="https://api.github.com/repos/GAM-team/GAM/releases/tags/v$gamversion"

src/gam.spec

@@ -21,6 +21,7 @@ hiddenimports = [
      'gam.gamlib.yubikey',
      ]
 
+print(f"datas before analysis:\n{datas}")
 a = Analysis(
     ['gam/__main__.py'],
     pathex=[],
@@ -36,10 +37,12 @@ a = Analysis(
     cipher=None,
     noarchive=False,
     )
+print(f"datas from analysis:\n{a.datas}")
 for d in a.datas:
     if 'pyconfig' in d[0]:
         a.datas.remove(d)
         break
+print(f"datas after pyconfig cleanup:\n{a.datas}")
 pyz = PYZ(a.pure,
           a.zipped_data,
           cipher=None)

src/gam/gamlib/glaction.py

@@ -56,6 +56,7 @@ class GamAction():
   DRAFT = 'draf'
   EMPTY = 'empt'
   ENABLE = 'enbl'
+  END = 'end '
   EXISTS = 'exis'
   EXPORT = 'expo'
   EXTRACT = 'extr'
@@ -174,6 +175,7 @@ class GamAction():
     DRAFT: ['Drafted', 'Draft'],
     EMPTY: ['Emptied', 'Empty'],
     ENABLE: ['Enabled', 'Enable'],
+    END: ['Ended', 'End'],
     EXISTS: ['Exists', 'Exists'],
     EXPORT: ['Exported', 'Export'],
     EXTRACT: ['Extracted', 'Extract'],

src/gam/gamlib/glapi.py

@@ -74,6 +74,7 @@ IAP = 'iap'
 KEEP = 'keep'
 LICENSING = 'licensing'
 LOOKERSTUDIO = 'datastudio'
+MEET = 'meet'
 OAUTH2 = 'oauth2'
 ORGPOLICY = 'orgpolicy'
 PEOPLE = 'people'
@@ -186,6 +187,7 @@ PROJECT_APIS = [
   'iap.googleapis.com',
   'keep.googleapis.com',
   'licensing.googleapis.com',
+  'meet.googleapis.com',
   'people.googleapis.com',
   'pubsub.googleapis.com',
   'reseller.googleapis.com',
@@ -250,6 +252,7 @@ _INFO = {
   KEEP: {'name': 'Keep API', 'version': 'v1', 'v2discovery': True},
   LICENSING: {'name': 'License Manager API', 'version': 'v1', 'v2discovery': True},
   LOOKERSTUDIO: {'name': 'Looker Studio API', 'version': 'v1', 'v2discovery': True, 'localjson': True},
+  MEET: {'name': 'Meet API', 'version': 'v2', 'v2discovery': True},
   OAUTH2: {'name': 'OAuth2 API', 'version': 'v2', 'v2discovery': False},
   ORGPOLICY: {'name': 'Organization Policy API', 'version': 'v2', 'v2discovery': True},
   PEOPLE: {'name': 'People API', 'version': 'v1', 'v2discovery': True},
@@ -652,6 +655,10 @@ _SVCACCT_SCOPES = [
    'api': LOOKERSTUDIO,
    'subscopes': READONLY,
    'scope': 'https://www.googleapis.com/auth/datastudio'},
+  {'name': 'Meet API',
+   'api': MEET,
+   'subscopes': READONLY,
+   'scope': 'https://www.googleapis.com/auth/meetings.space.created'},
   {'name': 'OAuth2 API',
    'api': OAUTH2,
    'subscopes': [],

src/gam/gamlib/glclargs.py

@@ -651,6 +651,16 @@ class GamCLArgs():
   ARG_LICENSES = 'licenses'
   ARG_MATTER = 'matter'
   ARG_MATTERS = 'matters'
+  ARG_MEETSPACE = 'meetspace'
+  ARG_MEETSPACES = 'meetspaces'
+  ARG_MEETCONFERENCE = 'meetconference'
+  ARG_MEETCONFERENCES = 'meetconferences'
+  ARG_MEETPARTICIPANT = 'meetparticipant'
+  ARG_MEETPARTICIPANTS = 'meetparticipants'
+  ARG_MEETRECORDING = 'meetrecording'
+  ARG_MEETRECORDINGS = 'meetrecordings'
+  ARG_MEETTRANSCRIPT = 'meettranscript'
+  ARG_MEETTRANSCRIPTS = 'meettranscripts'
   ARG_MEMBER = 'member'
   ARG_MEMBERS = 'members'
   ARG_MESSAGE = 'message'
@@ -936,6 +946,7 @@ class GamCLArgs():
   OB_LOOKERSTUDIO_PERMISSION_ENTITY = 'LookerStudioPermissionEntity'
   OB_MATTER_ITEM = 'MatterItem'
   OB_MATTER_ITEM_LIST = 'MatterItemList'
+  OB_MEET_CONFERENCE_NAME = 'MeetConferenceName'
   OB_MESSAGE_ID = 'MessageID'
   OB_MIMETYPE = 'MimeType'
   OB_MIMETYPE_LIST = 'MimeTypeList'

src/gam/gamlib/glentity.py

@@ -260,6 +260,11 @@ class GamEntity():
   LOOKERSTUDIO_ASSET_REPORT = 'lsar'
   LOOKERSTUDIO_PERMISSION = 'lspe'
   MD5HASH = 'md5h'
+  MEET_SPACE = 'mesp'
+  MEET_CONFERENCE = 'msco'
+  MEET_PARTICIPANT = 'msps'
+  MEET_RECORDING = 'msre'
+  MEET_TRANSCRIPT = 'mstr'
   MEMBER = 'memb'
   MEMBER_NOT_ARCHIVED = 'mena'
   MEMBER_ARCHIVED = 'mear'
@@ -605,6 +610,11 @@ class GamEntity():
     LOOKERSTUDIO_ASSET_REPORT: ['Looker Studio REPORT Assets', 'Looker Studio REPORT Asset'],
     LOOKERSTUDIO_PERMISSION: ['Looker Studio Permissions', 'Looker Studio Permission'],
     MD5HASH: ['MD5 hash', 'MD5 Hash'],
+    MEET_SPACE: ['Meet Spaces', 'Meet Space'],
+    MEET_CONFERENCE: ['Meet Conferences', 'Meet Conference'],
+    MEET_PARTICIPANT: ['Meet Participants', 'Meet Participant'],
+    MEET_RECORDING: ['Meet Recordings', 'Meet Recording'],
+    MEET_TRANSCRIPT: ['Meet Transcripts', 'Meet Transcript'],
     MEMBER: ['Members', 'Member'],
     MEMBER_NOT_ARCHIVED: ['Members (Not Archived)', 'Member (Not Archived)'],
     MEMBER_ARCHIVED: ['Members (Archived)', 'Member (Archived)'],

src/gam/gamlib/glmsgs.py

@@ -78,7 +78,7 @@ Please go to:
 
   https://admin.google.com/ac/owl/list?tab=configuredApps
 
-1. Click on: Add app > OAuth App Name Or Client ID.
+1. Click on: Configure new app > OAuth App Name Or Client ID.
 2. Enter the following Client ID value:
 
   {1}