deepblue/GoogleDriveManagement
1
0
Fork 0
mirror of https://github.com/GAM-team/GAM.git synced 2025-05-12 04:07:21 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
GoogleDriveManagement/wiki/Administrators.md
Ross Scroggs b39a0efd83
Improved adminrole commands
2025-05-05 21:33:02 -07:00

1470 lines
53 KiB
Markdown
Raw Blame History

# Administrators
- [API documentation](#api-documentation)
- [Definitions](#definitions)
- [Display administrative privileges](#display-administrative-privileges)
- [Manage administrative roles](#manage-administrative-roles)
- [Display administrative roles](#display-administrative-roles)
- [Create an administrator](#create-an-administrator)
- [Delete an administrator](#delete-an-administrator)
- [Display administrators](#display-administrators)
- [Copy privileges from one role to a new role](#copy-privileges-from-one-role-to-a-new-role)
- [Copy roles from one administrator to another](#copy-roles-from-one-administrator-to-another)
## API documentation
* [About Administrator roles](https://support.google.com/a/answer/33325?ref_topic=4514341)
* [Directory API - Privileges](https://developers.google.com/admin-sdk/directory/reference/rest/v1/privileges)
* [Directory API - Roles](https://developers.google.com/admin-sdk/directory/reference/rest/v1/roles)
* [Directory API - Role Assignments](https://developers.google.com/admin-sdk/directory/reference/rest/v1/roleAssignments)
## Definitions
```
<DomainName> ::= <String>(.<String>)+
<EmailAddress> ::= <String>@<DomainName>
<GroupItem> ::= <EmailAddress>|<UniqueID>|<String>
<OrgUnitID> ::= id:<String>
<OrgUnitPath> ::= /|(/<String)+
<OrgUnitItem> ::= <OrgUnitID>|<OrgUnitPath>
<Privilege> ::= <String>
<PrivilegeList> ::= "<Privilege>(,<Privilege)*"
<RoleAssignmentID> ::= <String>
<RoleItem> ::= id:<String>|uid:<String>|<String>
<UniqueID> ::= id:<String>
<UserItem> ::= <EmailAddress>|<UniqueID>|<String>
```
## Display administrative privileges
```
gam print privileges [todrive <ToDriveAttribute>*]
gam show privileges
```
Here is the output from `gam show privileges`; use this to find a specific `<Privilege>`.
```
Show 111 Privileges
Privilege: REPORTS_ACCESS (1/111)
serviceId: 01fob9te2rj6rw9
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (2/111)
serviceId: 02et92p02l9sq0n
serviceName: Unknown
isOuScopable: True
Privilege: APP_ADMIN (3/111)
serviceId: 00tyjcwt30rsnw6
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_ENTERPRISE_PRIVATE_APPS (4/111)
serviceId: 00tyjcwt49hs5nq
serviceName: play_for_work
isOuScopable: False
Privilege: MANAGE_EXTERNALLY_HOSTED_APK_UPLOAD_IN_PLAY (5/111)
serviceId: 00tyjcwt49hs5nq
serviceName: play_for_work
isOuScopable: False
Privilege: MANAGE_PLAY_FOR_WORK_STORE (6/111)
serviceId: 00tyjcwt49hs5nq
serviceName: play_for_work
isOuScopable: False
Privilege: APP_ADMIN (7/111)
serviceId: 03dy6vkm2sk0pzo
serviceName: docs
isOuScopable: False
childPrivileges: 4
Privilege: DOCS_TEMPLATE_ADMIN (1/4)
serviceId: 03dy6vkm2sk0pzo
serviceName: docs
isOuScopable: False
Privilege: MANAGE_CLASSIC_GOOGLE_SITES (2/4)
serviceId: 03dy6vkm2sk0pzo
serviceName: docs
isOuScopable: False
Privilege: MIGRATE_TO_TEAM_DRIVE (3/4)
serviceId: 03dy6vkm2sk0pzo
serviceName: docs
isOuScopable: False
Privilege: VIEW_SITE_DETAILS (4/4)
serviceId: 03dy6vkm2sk0pzo
serviceName: docs
isOuScopable: False
Privilege: REVIEW_ALL_SENSITIVE_ACTIONS (8/111)
serviceId: 035nkun23a65bz3
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: REVIEW_SECURITY_ACTIONS
serviceId: 035nkun23a65bz3
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (9/111)
serviceId: 01ksv4uv2d2noaq
serviceName: sites
isOuScopable: False
Privilege: APP_ADMIN (10/111)
serviceId: 044sinio4cntx2o
serviceName: Unknown
isOuScopable: False
Privilege: DATA_REGIONS_SETTINGS (11/111)
serviceId: 02jxsxqh0hucks4
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: DATA_REGIONS_REPORTING
serviceId: 02jxsxqh0hucks4
serviceName: Unknown
isOuScopable: False
Privilege: LOGO_PRIVILEGE_GROUP (12/111)
serviceId: 03j2qqm31d4j55e
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (13/111)
serviceId: 04i7ojhp4kgosur
serviceName: Unknown
isOuScopable: True
Privilege: ADMIN_DASHBOARD (14/111)
serviceId: 01ci93xb3tmzyin
serviceName: admin
isOuScopable: True
Privilege: ADMIN_DOMAIN_SETTINGS (15/111)
serviceId: 01ci93xb3tmzyin
serviceName: admin
isOuScopable: False
Privilege: REPORTS (16/111)
serviceId: 01ci93xb3tmzyin
serviceName: admin
isOuScopable: False
Privilege: SERVICES (17/111)
serviceId: 01ci93xb3tmzyin
serviceName: admin
isOuScopable: False
Privilege: SECURITY_SETTINGS (18/111)
serviceId: 01ci93xb3tmzyin
serviceName: admin
isOuScopable: False
Privilege: APP_ADMIN (19/111)
serviceId: 01ci93xb43sd8me
serviceName: Unknown
isOuScopable: True
childPrivileges: 2
Privilege: DELEGATES_READ (1/2)
serviceId: 01ci93xb43sd8me
serviceName: Unknown
isOuScopable: True
Privilege: DELEGATES_WRITE (2/2)
serviceId: 01ci93xb43sd8me
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_DYNAMITE_SETTINGS (20/111)
serviceId: 03whwml44f3n4vd
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_DYNAMITE_SPACES (21/111)
serviceId: 03whwml44f3n4vd
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: READ_DYNAMITE_SPACES
serviceId: 03whwml44f3n4vd
serviceName: Unknown
isOuScopable: False
Privilege: MODERATE_DYNAMITE_REPORT (22/111)
serviceId: 03whwml44f3n4vd
serviceName: Unknown
isOuScopable: False
Privilege: CLOUD_PRINT_MANAGER (23/111)
serviceId: 02bn6wsx379ol8g
serviceName: cloud_print
isOuScopable: False
Privilege: APP_ADMIN (24/111)
serviceId: 03as4poj2zjehv7
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_DIRECTORY_SYNC_SETTINGS (25/111)
serviceId: 0147n2zr1ynkkmf
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: READ_DIRECTORY_SYNC_SETTINGS
serviceId: 0147n2zr1ynkkmf
serviceName: Unknown
isOuScopable: False
Privilege: SECURITY_SETTINGS (26/111)
serviceId: 00vx122734tbite
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: INBOUND_SSO_SETTINGS
serviceId: 00vx122734tbite
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (27/111)
serviceId: 03fwokq01e2ht7x
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: UDM_NETWORK_ADMIN
serviceId: 03fwokq01e2ht7x
serviceName: Unknown
isOuScopable: True
Privilege: APP_ADMIN (28/111)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
childPrivileges: 7
Privilege: MANAGE_BROWSERS (1/7)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
Privilege: MANAGE_DEVICES (2/7)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
Privilege: MANAGE_DEVICE_SETTINGS (3/7)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
Privilege: MANAGE_PRINTERS (4/7)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
Privilege: MANAGE_USER_SETTINGS (5/7)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
childPrivileges: 1
Privilege: MANAGE_APPLICATION_SETTINGS
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
Privilege: VIEW_EXTENSIONS_REPORT (6/7)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
Privilege: VIEW_VERSION_REPORT (7/7)
serviceId: 04f1mdlm0ki64aw
serviceName: cros
isOuScopable: True
Privilege: ADMIN_OVERSIGHT_MANAGE_CLASSES (29/111)
serviceId: 019c6y1840fzfkt
serviceName: classroom
isOuScopable: True
Privilege: APP_ADMIN (30/111)
serviceId: 019c6y1840fzfkt
serviceName: classroom
isOuScopable: True
Privilege: BACKFILL_DRIVE_READWRITE (31/111)
serviceId: 019c6y1840fzfkt
serviceName: classroom
isOuScopable: True
Privilege: EDU_ANALYTICS_DATA_ACCESS (32/111)
serviceId: 019c6y1840fzfkt
serviceName: classroom
isOuScopable: True
Privilege: MIGRATE_MANAGE_DEPLOYMENT (33/111)
serviceId: 03tbugp12newe5s
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: MIGRATE_ACCESS_DEPLOYMENT
serviceId: 03tbugp12newe5s
serviceName: Unknown
isOuScopable: False
Privilege: MODIFY_DASHER_ANALYTICS_APP_SETTINGS (34/111)
serviceId: 00nmf14n2rzq5a5
serviceName: Unknown
isOuScopable: False
Privilege: VIEW_DASHER_ANALYTICS_APP_SETTINGS (35/111)
serviceId: 00nmf14n2rzq5a5
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_TRUST_RULES (36/111)
serviceId: 00nmf14n34b7f81
serviceName: Unknown
isOuScopable: False
Privilege: VIEW_TRUST_RULES (37/111)
serviceId: 00nmf14n34b7f81
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (38/111)
serviceId: 00nmf14n14wtgcf
serviceName: app_maker
isOuScopable: False
Privilege: VIEW_ALL_PROJECTS (39/111)
serviceId: 00nmf14n14wtgcf
serviceName: app_maker
isOuScopable: False
Privilege: APP_ADMIN (40/111)
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
childPrivileges: 2
Privilege: CALENDAR_RESOURCE (1/2)
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
childPrivileges: 2
Privilege: CALENDAR_RESOURCE_MANAGE (1/2)
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
childPrivileges: 1
Privilege: CALENDAR_RESOURCE_READ
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
Privilege: ROOM_INSIGHTS_DASHBOARD_ACCESS (2/2)
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
Privilege: CALENDAR_SETTINGS (2/2)
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
childPrivileges: 1
Privilege: CALENDAR_SETTINGS_READ
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
Privilege: CALENDAR_SUPER_ADMIN (41/111)
serviceId: 037m2jsg3ckz96v
serviceName: calendar
isOuScopable: False
Privilege: APP_ADMIN (42/111)
serviceId: 037m2jsg46www3g
serviceName: Unknown
isOuScopable: False
Privilege: LDAP_MANAGER (43/111)
serviceId: 02lwamvv18la4iw
serviceName: ldap
isOuScopable: False
Privilege: LDAP_PASSWORD_REBIND (44/111)
serviceId: 02lwamvv18la4iw
serviceName: ldap
isOuScopable: True
childPrivileges: 1
Privilege: LDAP_PASSWORD_REBIND_READONLY
serviceId: 02lwamvv18la4iw
serviceName: ldap
isOuScopable: True
Privilege: ACCESS_ALL_LOGS (45/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: False
childPrivileges: 1
Privilege: AUDIT_SYSTEM
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: False
Privilege: ACCESS_ALL_MATTERS (46/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: False
Privilege: ADMIN_MATTER (47/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: True
Privilege: APPROVE_ACCELERATED_DELETION (48/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: True
childPrivileges: 1
Privilege: CREATE_ACCELERATED_DELETION
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: True
Privilege: MANAGE_EXPORTS (49/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: True
Privilege: MANAGE_RETENTION_POLICY (50/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: False
childPrivileges: 1
Privilege: VIEW_RETENTION_POLICY
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: False
Privilege: MANAGE_SEARCHES (51/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: True
Privilege: REMOVE_HOLD (52/111)
serviceId: 03l18frh45c63dw
serviceName: vault
isOuScopable: True
Privilege: APP_ADMIN (53/111)
serviceId: 02zbgiuw2wdxo5p
serviceName: youtube
isOuScopable: False
Privilege: ACTIVITY_RULES (54/111)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
childPrivileges: 2
Privilege: MANAGE_GSC_RULE (1/2)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: VIEW_GSC_RULE (2/2)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: APP_ADMIN (55/111)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
childPrivileges: 4
Privilege: AUDIT_INVESTIGATION_ACCESS (1/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
childPrivileges: 3
Privilege: SIT_MANAGE (1/3)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
childPrivileges: 9
Privilege: SIT_CHAT_UPDATE_DELETE (1/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CHROME_UPDATE_DELETE (2/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DEVICE_UPDATE_DELETE (3/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DRIVE_UPDATE_DELETE (4/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GMAIL_UPDATE_DELETE (5/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_MEET_UPDATE_DELETE (6/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_OAUTH_UPDATE_DELETE (7/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_RULE_UPDATE_DELETE (8/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_USER_UPDATE_DELETE (9/9)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_VIEW_METADATA (2/3)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
childPrivileges: 40
Privilege: SIT_ADMIN_VIEW_METADATA (1/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_AUDITOR_VIEW_METADATA (2/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_AXT_VIEW_METADATA (3/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CAA_VIEW_METADATA (4/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CALENDAR_VIEW_METADATA (5/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CHAT_VIEW_METADATA (6/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CHROME_SYNC_VIEW_METADATA (7/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CHROME_VIEW_METADATA (8/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CLASSROOM_VIEW_METADATA (9/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CLOUD_SEARCH_VIEW_METADATA (10/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CONTACTS_VIEW_METADATA (11/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_COURSEKIT_VIEW_METADATA (12/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CURRENTS_VIEW_METADATA (13/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DATASTUDIO_VIEW_METADATA (14/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DATA_LOCATION_VIEW_METADATA (15/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DATA_MIGRATION_VIEW_METADATA (16/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DEVICE_VIEW_METADATA (17/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DIRECTORY_SYNC_VIEW_METADATA (18/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_DRIVE_VIEW_METADATA (19/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GEN_AI_PLATFORM_APP_VIEW_METADATA (20/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GMAIL_VIEW_METADATA (21/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GOOGLE_PROFILES_VIEW_METADATA (22/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GRADUATION_VIEW_METADATA (23/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GROUPSALT_VIEW_METADATA (24/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GROUPS_VIEW_METADATA (25/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_HODOR_VIEW_METADATA (26/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_JAMBOARD_VIEW_METADATA (27/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_KEEP_VIEW_METADATA (28/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_LDAP_VIEW_METADATA (29/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_MEET_HARDWARE_VIEW_METADATA (30/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_MEET_VIEW_METADATA (31/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_OAUTH_VIEW_METADATA (32/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_PASSWORD_VAULT_VIEW_METADATA (33/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_RULE_VIEW_METADATA (34/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_SAML_VIEW_METADATA (35/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_SCIM_DS_VIEW_METADATA (36/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_TASKS_VIEW_METADATA (37/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_USER_LEVEL_TAKEOUT_VIEW_METADATA (38/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_USER_VIEW_METADATA (39/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_VOICE_VIEW_METADATA (40/40)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_VIEW_SENSITIVE_CONTENT (3/3)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
childPrivileges: 4
Privilege: SIT_CHAT_VIEW_DETAILED_CONTENT (1/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_CHROME_VIEW_DETAILED_CONTENT (2/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_GMAIL_VIEW_DETAILED_CONTENT (3/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SIT_RULE_VIEW_DETAILED_CONTENT (4/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: DASHBOARD_ACCESS (2/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: GSC_VIEW_VIRUSTOTAL_REPORT (3/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: SECURITY_HEALTH_DASHBOARD_ACCESS (4/4)
serviceId: 01egqt2p2p8gvae
serviceName: security_center
isOuScopable: False
Privilege: APP_ADMIN (56/111)
serviceId: 00sqyw642iersp7
serviceName: search
isOuScopable: False
childPrivileges: 1
Privilege: TOPAZ_INDEXING_ADMIN_PRIVILEGE
serviceId: 00sqyw642iersp7
serviceName: search
isOuScopable: False
childPrivileges: 1
Privilege: TOPAZ_INDEXING_READONLY_PRIVILEGE
serviceId: 00sqyw642iersp7
serviceName: search
isOuScopable: False
Privilege: APP_ACCESS (57/111)
serviceId: 03cqmetx1vygwki
serviceName: Unknown
isOuScopable: False
Privilege: ACCESS_LEVEL_ENFORCEMENT (58/111)
serviceId: 01rvwp1q4axizdr
serviceName: Unknown
isOuScopable: False
Privilege: ACCESS_LEVEL_MANAGEMENT (59/111)
serviceId: 01rvwp1q4axizdr
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_LABELS (60/111)
serviceId: 034g0dwd19r1crs
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: VIEW_LABELS
serviceId: 034g0dwd19r1crs
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (61/111)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
childPrivileges: 6
Privilege: MANAGE_CHROME_BROWSERS (1/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
childPrivileges: 1
Privilege: MANAGED_CHROME_BROWSERS_READ_ONLY
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_CHROME_USER_SETTINGS (2/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
childPrivileges: 2
Privilege: MANAGE_CHROME_APPLICATION_SETTINGS (1/2)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_CHROME_WEB_SETTINGS (2/2)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_DEVICES (3/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
childPrivileges: 5
Privilege: CHROME_DEVICE_ACTION_LOG_COLLECTION (1/5)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: DEVICE_ACTION_CRD (2/5)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: DEVICE_ACTION_REBOOT (3/5)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: DEVICE_ACTION_SCREENSHOT (4/5)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_DEVICES_READ_ONLY (5/5)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
childPrivileges: 1
Privilege: TELEMETRY_API
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
childPrivileges: 24
Privilege: TELEMETRY_API_APPS_REPORT (1/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_AUDIO_REPORT (2/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_BATTERY_INFO (3/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_BATTERY_REPORT (4/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_BUS_DEVICE_INFO (5/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_CPU_INFO (6/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_CPU_REPORT (7/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_CRASH_REPORT (8/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_DEVICE (9/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_DEVICE_ACTIVITY_REPORT (10/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_GRAPHICS_INFO (11/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_GRAPHICS_REPORT (12/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_KIOSK_VISION_INFO (13/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_KIOSK_VISION_REPORT (14/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_MEMORY_INFO (15/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_MEMORY_REPORT (16/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_NETWORK_INFO (17/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_NETWORK_REPORT (18/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_OS_REPORT (19/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_PERIPHERALS_REPORT (20/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_STORAGE_INFO (21/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_STORAGE_REPORT (22/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_USER (23/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: TELEMETRY_API_WEB_REPORT (24/24)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_DEVICE_SETTINGS (4/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: MANAGE_PRINTERS (5/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: VIEW_CHROME_REPORTS (6/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
childPrivileges: 6
Privilege: VIEW_CHROME_CRASH_REPORTS (1/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: VIEW_CHROME_EXTENSIONS_REPORT (2/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: VIEW_CHROME_INSIGHTS_REPORT (3/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: VIEW_CHROME_LEGACY_TECH_REPORT (4/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: VIEW_CHROME_PRINTERS_REPORT (5/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: VIEW_CHROME_VERSION_REPORT (6/6)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: True
Privilege: SERVICE_DATA_DOWNLOADER (62/111)
serviceId: 03hv69ve4bjwe54
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_CHROME_INSIGHT_SETTINGS (63/111)
serviceId: 01x0gk371sq486y
serviceName: Unknown
isOuScopable: False
Privilege: VIEW_AND_MANAGE_CHROME_OCR_SETTING (64/111)
serviceId: 01x0gk371sq486y
serviceName: Unknown
isOuScopable: False
Privilege: VIEW_CHROME_INSIGHT_SETTINGS (65/111)
serviceId: 01x0gk371sq486y
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_ENTERPRISE_PRIVATE_APPS (66/111)
serviceId: 02w5ecyt3pkeyqi
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_EXTERNALLY_HOSTED_APK_UPLOAD_IN_PLAY (67/111)
serviceId: 02w5ecyt3pkeyqi
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_PLAY_FOR_WORK_STORE (68/111)
serviceId: 02w5ecyt3pkeyqi
serviceName: Unknown
isOuScopable: False
Privilege: ENROLL_MEET_DEVICES (69/111)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_HANGOUTS_SERVICE (70/111)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
childPrivileges: 2
Privilege: MANAGE_CALENDARS (1/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
childPrivileges: 2
Privilege: MANAGE_PERSONAL_CALENDARS (1/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_ROOM_CALENDARS (2/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_HANGOUTS_SERVICE_WITHOUT_CALENDAR (2/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
childPrivileges: 4
Privilege: DEPROVISION_MEET_DEVICES (1/4)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_MEET_DEVICES (2/4)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: READ_MEET_DEVICES
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_MEET_DEVICE_SETTINGS (3/4)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
childPrivileges: 2
Privilege: MANAGE_MEET_DEVICE_SIGNAGE_SETTING (1/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: READ_MEET_DEVICE_SETTINGS (2/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: OPERATE_MEET_DEVICES (4/4)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
childPrivileges: 2
Privilege: MANAGE_MEET_DEVICE_MEETINGS (1/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: PERFORM_MEET_DEVICE_COMMANDS (2/2)
serviceId: 02w5ecyt3laroi5
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (71/111)
serviceId: 01baon6m1wv6b0p
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (72/111)
serviceId: 02afmg282jiquyg
serviceName: device_management
isOuScopable: True
Privilege: APP_ADMIN (73/111)
serviceId: 02afmg283v5nmx6
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: ADMIN_QUALITY_DASHBOARD_ACCESS
serviceId: 02afmg283v5nmx6
serviceName: Unknown
isOuScopable: False
Privilege: ACCESS_ADMIN_QUARANTINE (74/111)
serviceId: 039kk8xu49mji9t
serviceName: gmail
isOuScopable: False
Privilege: ACCESS_EMAIL_LOG_SEARCH (75/111)
serviceId: 039kk8xu49mji9t
serviceName: gmail
isOuScopable: False
Privilege: ACCESS_RESTRICTED_QUARANTINE (76/111)
serviceId: 039kk8xu49mji9t
serviceName: gmail
isOuScopable: False
Privilege: APP_ADMIN (77/111)
serviceId: 039kk8xu49mji9t
serviceName: gmail
isOuScopable: False
Privilege: APP_ADMIN (78/111)
serviceId: 03mzq4wv1nvgcwf
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_DLP_RULE (79/111)
serviceId: 02250f4o3hg8pg8
serviceName: Unknown
isOuScopable: False
Privilege: VIEW_DLP_RULE (80/111)
serviceId: 02250f4o3hg8pg8
serviceName: Unknown
isOuScopable: False
Privilege: ADMIN_REPORTING_ACCESS (81/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: REPORTING_AUDIT_ACCESS
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER (82/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 2
Privilege: API_APPS_ENTERPRISE_CUSTOMER_READ (1/2)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 6
Privilege: API_APPS_ENTERPRISE_CUSTOMER_READ_BRANDING_SETTINGS (1/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_READ_CONTACT_INFO (2/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_READ_ONBOARD_SETTINGS (3/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_READ_PROFILE_SETTINGS (4/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_READ_SUPPORT_SETTINGS (5/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_READ_TIME_ZONE_SETTINGS (6/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_UPDATE (2/2)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 6
Privilege: API_APPS_ENTERPRISE_CUSTOMER_UPDATE_BRANDING_SETTINGS (1/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_UPDATE_CONTACT_INFO (2/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_UPDATE_ONBOARD_SETTINGS (3/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_UPDATE_PROFILE_SETTINGS (4/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_UPDATE_SUPPORT_SETTINGS (5/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: API_APPS_ENTERPRISE_CUSTOMER_UPDATE_TIME_ZONE_SETTINGS (6/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: USER_SECURITY_ALL (83/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: BILLING (84/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: BILLING_READ
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: DATATRANSFER_API_PRIVILEGE_GROUP (85/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: DOMAIN_MANAGEMENT (86/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: DOMAIN_REGISTRATION_MANAGEMENT (87/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: FULL_MIGRATION_ACCESS (88/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: EXECUTE_MIGRATION
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: MODIFY_MIGRATION
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: VIEW_MIGRATION
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: GROUPS_ALL (89/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 4
Privilege: GROUPS_CREATE (1/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: GROUPS_DELETE (2/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: GROUPS_RETRIEVE (3/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: GROUPS_UPDATE (4/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: GROUPS_MANAGE_LOCKED_LABEL (90/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: GROUPS_MANAGE_SECURITY_LABEL (91/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: LICENSING (92/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: LICENSING_READ
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: ORGANIZATION_UNITS_ALL (93/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
childPrivileges: 4
Privilege: ORGANIZATION_UNITS_CREATE (1/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: ORGANIZATION_UNITS_DELETE (2/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: ORGANIZATION_UNITS_RETRIEVE (3/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: ORGANIZATION_UNITS_UPDATE (4/4)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: SAML2_SERVICE_PROVIDER (94/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: SCHEMA_MANAGEMENT (95/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: SCHEMA_RETRIEVE
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: SUPPORT_PRIVILEGE_GROUP (96/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: TRUSTED_DOMAIN_WHITELIST_WRITE (97/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
childPrivileges: 1
Privilege: TRUSTED_DOMAIN_WHITELIST_READ
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: UPGRADE_CONSUMER_CONVERSION (98/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: False
Privilege: USERS_ALL (99/111)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
childPrivileges: 5
Privilege: USERS_CREATE (1/5)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_DELETE (2/5)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_RETRIEVE (3/5)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_UPDATE_CUSTOM_ATTRIBUTES_USER_PRIVILEGE_GROUP (4/5)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_UPDATE (5/5)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
childPrivileges: 6
Privilege: USERS_ADD_NICKNAME (1/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_FORCE_PASSWORD_CHANGE (2/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_MOVE (3/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_ALIAS (4/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_RESET_PASSWORD (5/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: USERS_SUSPEND (6/6)
serviceId: 00haapch16h1ysv
serviceName: admin_apis
isOuScopable: True
Privilege: APP_ADMIN (100/111)
serviceId: 0319y80a15kueje
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (101/111)
serviceId: 00upglbi0qz687j
serviceName: takeout
isOuScopable: False
Privilege: APP_ADMIN (102/111)
serviceId: 01tuee744837sjz
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (103/111)
serviceId: 02szc72q20usrb6
serviceName: Unknown
isOuScopable: True
Privilege: APP_ADMIN (104/111)
serviceId: 0279ka651l5iy5q
serviceName: Unknown
isOuScopable: False
childPrivileges: 1
Privilege: ADMIN_QUALITY_DASHBOARD_ACCESS
serviceId: 0279ka651l5iy5q
serviceName: Unknown
isOuScopable: False
Privilege: ACCESS_ALL_STATS (105/111)
serviceId: 0279ka6513ygm10
serviceName: Unknown
isOuScopable: False
childPrivileges: 3
Privilege: ACCESS_GROUP_STATS (1/3)
serviceId: 0279ka6513ygm10
serviceName: Unknown
isOuScopable: False
Privilege: ACCESS_OU_STATS (2/3)
serviceId: 0279ka6513ygm10
serviceName: Unknown
isOuScopable: True
Privilege: ACCESS_TEAM_STATS (3/3)
serviceId: 0279ka6513ygm10
serviceName: Unknown
isOuScopable: False
Privilege: EDIT_WORK_INSIGHTS_SETTINGS (106/111)
serviceId: 0279ka6513ygm10
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (107/111)
serviceId: 01yyy98l4k9lq4l
serviceName: directory
isOuScopable: False
childPrivileges: 4
Privilege: CUSTOM_DIRECTORY_READWRITE (1/4)
serviceId: 01yyy98l4k9lq4l
serviceName: directory
isOuScopable: False
Privilege: DIRECTORY_SETTINGS_READONLY (2/4)
serviceId: 01yyy98l4k9lq4l
serviceName: directory
isOuScopable: False
childPrivileges: 2
Privilege: CUSTOM_DIRECTORY_READONLY (1/2)
serviceId: 01yyy98l4k9lq4l
serviceName: directory
isOuScopable: False
Privilege: PROFILE_EDITABILITY_READONLY (2/2)
serviceId: 01yyy98l4k9lq4l
serviceName: directory
isOuScopable: False
Privilege: PROFILE_EDITABILITY_READWRITE (3/4)
serviceId: 01yyy98l4k9lq4l
serviceName: directory
isOuScopable: False
Privilege: SHARED_CONTACTS_READWRITE (4/4)
serviceId: 01yyy98l4k9lq4l
serviceName: directory
isOuScopable: False
Privilege: MANAGE_SERVICE_ON_OFF (108/111)
serviceId: 04iylrwe1ih2v48
serviceName: Unknown
isOuScopable: False
Privilege: APPS_INCIDENTS_FULL_ACCESS (109/111)
serviceId: 02pta16n3efhw69
serviceName: Unknown
isOuScopable: False
childPrivileges: 2
Privilege: APPS_INCIDENTS_READONLY (1/2)
serviceId: 02pta16n3efhw69
serviceName: Unknown
isOuScopable: False
Privilege: APPS_INCIDENTS_VIEW_VIRUSTOTAL_REPORTS (2/2)
serviceId: 02pta16n3efhw69
serviceName: Unknown
isOuScopable: False
Privilege: MANAGE_CSE_SETTINGS (110/111)
serviceId: 02pta16n4hxgyp2
serviceName: Unknown
isOuScopable: False
Privilege: APP_ADMIN (111/111)
serviceId: 03oy7u290lj7dci
serviceName: Unknown
isOuScopable: False
```
## Manage administrative roles
```
gam create adminrole <String> [description <String>]
privileges all|all_ou|<PrivilegeList>|(select <FileSelector>|<CSVFileSelector>>)
gam update adminrole <RoleItem> [name <String>] [description <String>]
[privileges all|all_ou|<PrivilegeList>|(select <FileSelector>|<CSVFileSelector>>)]
gam delete adminrole <RoleItem>
```
* `privileges all` - All defined privileges
* `privileges all_ou` - All defined privileges than can be scoped to an OU
* `privileges <PrivilegeList>` - A specific list of privileges
* `privileges select <FileSelector>|<CSVFileSelector>>` - A collection of privileges from a flat or CSV file
## Display administrative roles
```
gam info adminrole <RoleItem> [privileges]
```
* `privileges` - Display privileges associated with role
```
gam print adminroles|roles [todrive <ToDriveAttribute>*]
[role <RoleItem>] [privileges] [oneitemperrow]
gam show adminroles|roles
[role <RoleItem>] [privileges]
```
By default, all roles are displayed, use `role <RoleItem>` to sisplay a specific role.
* `privileges` - Display privileges associated with each role
By default, with `print`, all privileges for a role are shown on one row as a repeating item.
When `oneitemperrow` is specified, each privilege is output on a separate row/line with the other role fields.
## Create an administrator
Add an administrator role to an administrator.
```
gam create admin <EmailAddress>|<UniqueID> <RoleItem> customer|(org_unit <OrgUnitItem>)
[condition securitygroup|nonsecuritygroup]
```
* `customer` - The administrator can manage all organization units
* `org_unit <OrgUnitItem>` - The administrator can manage the specified organization unit
The option `condition` limits the conditions for delegate admin access. This currently only works with the _GROUPS_EDITOR_ROLE and _GROUPS_READER_ROLE roles.
* `condition securitygroup` - limit the delegated admin to managing security groups
* `condition nonsecuritygroup` - limit the delegated admin to managing non-security groups
## Delete an administrator
Remove an administrator role from an administrator.
```
gam delete admin <RoleAssignmentId>
```
## Display administrators
```
gam print admins [todrive <ToDriveAttribute>*]
[user|group <EmailAddress>|<UniqueID>] [role <RoleItem>] [condition]
[privileges] [oneitemperrow]
gam show admins
[user|group <EmailAddress>|<UniqueID>] [role <RoleItem>] [condition] [privileges]
```
By default, all administrators and roles are displayed; choose from the following
options to limit the display:
* `user <UserItem>` - Display only this administrator
* `role <RoleItem>` - Display only administrators with this role
* `condition` - Display any conditions associated with a role assignment
* `privileges` - Display privileges associated with each role assignment
By default, all role privileges for an admin are shown on one row as a repeating item.
When `oneitemperrow` is specified, each role privilege is output on a separate row/line with the other admin fields.
## Copy privileges from one role to a new role
Get privileges for existing role; replace Role Name with actual role name
```
gam redirect csv ./RolePrivileges.csv print adminrole role 'Role Name' privileges oneitemperrow
# Create a new role with those privileges
gam create adminrole "New Role Name" privileges select csvfile RolePrivileges.csv:privilegeName
## Copy roles from one administrator to another
Get roles for current admin.
```
gam redirect csv ./CurrentAdminRoles.csv print admins user currentadmin@domain.com
```
Add roles to new admin.
```
gam config csv_input_row_filter "scopeType:regex:CUSTOMER" redirect stdout ./UpdateNewAdminCustomerRoles.txt multiprocess redirect stderr stdout csv CurrentAdminRoles.csv gam create admin newadmin@domain.com "id:~~roleId~~" customer
gam config csv_input_row_filter "scopeType:regex:ORG_UNIT" redirect stdout ./UpdateNewAdminOrgUnitRoles.txt multiprocess redirect stderr stdout csv CurrentAdminRoles.csv gam create admin newadmin@domain.com "id:~~roleId~~" org_unit "id:~~orgUnitId~~"
```
Reference in New Issue View Git Blame Copy Permalink