gam: baixar versions anteriors

- 7.49.00
Use the Chrome Management API to manage/display Chrome Browers and Chrome Browser Enrollment Tokens
rather then the Chrome Enterprise Core API and the Chrome Browser Token Enrollment API.
- See: https://github.com/GAM-team/GAM/wiki/Chrome-Browsers-and-Enrollment-Tokens
- See Update History

- 7.48.34
Added option (addcsvdata <FieldName> <String>)* to gam <UserTypeEntity> print drivefileacls
that adds additional columns of data to the CSV file output.
Fixed bug in gam print devices ... checkforapibug ... fields <DeviceFieldNameList>.
- See Update History

- 7.48.33
Added option checkforapibug to gam print devices that can be used to work around a Cloud Identity API bug
that is returning duplicate devices.
- See Update History

- 7.48.16
Added option comments default|included|omitted to gam <UserTypeEntity> get document
to enable display of document comments.
- See Update History

- 7.48.15
Addded showownorganizationonly to <CalendarSelectProperty> that is by used by commands that list
a user's calendars to show only entries for calendars from the organization.
Updated gam delete|print|show policies to handle the following error:
ERROR: 503: serviceNotAvailable - The service is currently unavailable.
- See Update History

- 7.48.14
Updated gam whatis user@domain.com to replace this error message:
ERROR: There are no scopes authorized for the API(s): Cloud Identity API - User Invitations
with this error message:
Email Address: user@domain.com, Does not exist
when no Cloud Identity scopes are enabled other than Cloud Identity API - User Invitations.
All other userinvitation commands are also fixed.
- See Update History

- 7.48.13
Updated gam create admin ... expires <DateTime> to display the expiration time in the result message.
- See Update History

- 7.48.12
Fixed bug in gam print orgs allfields that caused a trap.
KeyError: 'blockinheritance'
Added field expirationTime to gam info|print|show chromeprofilecommand output
which is issueTime + validDuration.
- See Update History

- 7.48.11
Added option extensionupdatecheck to gam create chromeprofilecommand.
- See Update History

- 7.48.10
Updated Looker Studio references to Data Studio references; all functionality remains the same.
For backwards compatability, in all commands the following synonyms apply:
- lookerstudioassets is a synonym for datastudioassets
- lookerstudiopermissions is a synonym for datastudiopermissions
- See Update History

- 7.48.09
Updated gam calendars <CalendarEntity> modify <CalendarSettings> to handle the following error:
ERROR: 403: requiredAccessLevel - You need to have owner access to this calendar.
- See Update History

- 7.48.08
Updated gam version extended for macOS Golden Gate 27.0.
- See Update History

- 7.48.07
Updated GAM to allow 20 million cells when creating/updating sheets with todrive.
- See: https://us.list-manage.com/4cGS8LG3mAB?e=baa211e38e&c2id=934399a2c72577ccc05c42d924dd344b
- See Update History

- 7.48.06
Added option expires <DateTime> to gam create admin that specifies when the role assignment expires.
- See Update History

- 7.48.05
Updated gam print|show policies to handle the following (inappropriate I believe) error:
ERROR: 404: notFound - Requested entity was not found.
Fixed bug in gam print|show policies group <REMatchPattern> that mistakenly displayed orgUnit policies.
Updated gam print policies to improve column name sorting.
Updated gam version extended and gam <UserTypeEntity> check|update serviceaccount to handle
the following error when a proxy is being used:
ERROR: Socket error: 403: Forbidden
- See Update History

- 7.48.04
Updated gam [<UserTypeEntity>] create|update shareddrive to handle API changes and the following error:
ERROR: 403: insufficientFilePermissions - The user does not have sufficient permissions for this file.
- See Update History

- 7.48.03
Updated gam [<UserTypeEntity>] create shareddrive to improve performance and handle the following error:
ERROR: 403: insufficientFilePermissions - The user does not have sufficient permissions for this file.
- See Update History

- 7.48.02
Fixed bug in gam create|update policy that caused the following error:
Policy: New Policy, Create Failed: Error(7016): Request contains invalid argument(s)..
- See Update History

- 7.48.01
Updated gam create datatransfer to handle the following error:
ERROR: Invalid choice (looker studio): Expected <drive and docs|calendar|data studio>
Upgraded to OpenSSL 4.0.2.
- See Update History

- 7.48.00
Added support for Allowlisted Domains.
- See: https://github.com/GAM-team/GAM/wiki/Cloud-Identity-Allowlisted-Domains
- See Update History

- 7.47.06
Updated gam print cigroups to handle the following error:
ERROR: 500: internalError - Internal error encountered.
- See Update History

- 7.47.05
Added option showorgunits to gam print shareddriveorganizers that adds
columns orgUnit,orgUnitId to the output. This is only available to system administrators.
- See Update History

- 7.47.04
Added clientencryptiondetails to <DriveFieldName>.
- See Update History

- 7.47.03
Added support for externalIds in Cloud Identity Groups.
Upgraded to Python 3.14.7.
- See Update History

- 7.47.02
Added option threadid <String> to gam <UserTypeEntity> draft|import|insert message.
- See Update History

- 7.47.01
Fixed bug in gam <UserTypeEntity> create shareddrive where GAM was unnecessarily
waiting for the shared drive creation to complete when not required.
- See Update History

- 7.47.00
Added commands to update|display a user's chat availability.
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#manage-chat-user-availability
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#display-chat-user-availability
You'll need to run gam user user@domain.com update serviceaccount and
select 12) Chat API - User Availability (supports readonly).
- See Update History

- 7.46.11
Updated gam <UserTypeEntity> update user to handle the following error:
ERROR: 404: resourceNotFound - Does not exist
- See Update History

- 7.46.10
Updated gam calendars <CalendarEntity> create event and gam <UserTypeEntity> create event
to handle a trap ending in gamlib.glgapi.serviceNotAvailable: The service is currently unavailable.
- See Update History

- 7.46.09
Added option showmembertypes to gam print cigroup|groups that expands Members fields
to include type information.
Members -> MembersTypeCustomer, MembersTypeGroup, MembersTypeUser
MembersCount -> MembersTypeCustomerCount, MembersTypeGroupCount, MembersTypeUserCount
InternalMembers -> InternalMembersTypeCustomer, InternalMembersTypeGroup, InternalMembersTypeUser
InternalMembersCount -> InternalMembersTypeCustomerCount, InternalMembersTypeGroupCount, InternalMembersTypeUserCount
ExternalMembers -> ExternalMembersTypeGroup, ExternalMembersTypeUser
ExternalMembersCount -> ExternalMembersTypeGroupCount, ExternalMembersTypeUserCount
- See Update History

- 7.46.08
Added option (addcsvdata <FieldName> <String>)* to gam <UserTypeEntity> print calendars
that adds additional columns of data to the CSV file output.
Added option ownedsecondary to gam <UserTypeEntity> print|show calendars that causes
GAM to only display secondary calendars where <UserTypeEntity> is the dataOwner.
Added option showenabled to gam <UserTypeEntity> print|show forwardingaddresses that causes
GAM to display the enabled status for each forwarding address.
Disabled unnecessary Regional Access Boundary (trust boundary) lookups to improve performance.
- See Update History

- 7.46.07
Added command gam show configlicenseskus that can be used to generate a command
that sets the list of used license SKUs in gam.cfg; this improves performance of gam info user.
gam show configlicenseskus
Got 0 Licenses for 1010010001 (Cloud Identity Free)...
Got 0 Licenses for 1010050001 (Cloud Identity Premium)...
...
Got 2 Licenses for 1010340007 (Google Workspace for Education Fundamentals - Archived User)...
...
Got 100 Licenses for 1010070001 (Google Workspace for Education Fundamentals)...
Got 200 Licenses for 1010070001 (Google Workspace for Education Fundamentals)...
Got 300 Licenses for 1010070001 (Google Workspace for Education Fundamentals)...
Got 358 Licenses for 1010070001 (Google Workspace for Education Fundamentals)...
Got 2 Licenses for 1010070004 (Google Workspace for Education Gmail Only)...
...
Got 0 Licenses for Google-Vault (Google Vault)...
Got 0 Licenses for Google-Vault-Former-Employee (Google Vault - Former Employee)...
To set license_skus in gam.cfg, execute the following command:
gam config license_skus "1010340007,1010070001,1010070004" save verify variables license_skus
- See: https://github.com/GAM-team/GAM/wiki/Licenses#info-user-performance
- See Update History

- 7.46.06
Updated GAM to suppress the following message:
Regional Access Boundary HTTP request failed after retries: response_data={'error': {'code': 403, 'message': 'Permission denied on the service account.', 'status': 'PERMISSION_DENIED'}}, retryable_error=False
- See Update History

- 7.46.05
Fixed bug in gam <UserTypeEntity> print sheet where an extra line of output
was displayed before the CSV data.
- See Update History

- 7.46.04
Added the following command to transfer secondary calendar ownership.
gam <CalendarEntity> transfer ownership <UserItem>
- See Update History

- 7.46.03
Updated all Vault related commands to handle the following error: ERROR: 403: permissionDenied
- See Update History

- 7.46.02
Updated gam calendars <CalendarEntity> show settings to display dataOwner field;
it is labelled Owner.
- See Update History

- 7.46.01
Fixed bug in gam <CrOSTypeEntity> issuecommand command <CrOSCommand> ... csv where
command execution status lines were improperly indented.
Upgraded to Python 3.14.6.
- See Update History

- 7.46.00
Added commands to create, update and delete Cloud Identity policies for data loss prevention (DLP) rules and detectors.
- See: https://github.com/GAM-team/GAM/wiki/Cloud-Identity-Policies
- See: https://workspaceupdates.googleblog.com/2026/06/introducing-workspace-policy-api-mutate-endpoints-for-DLP.html
- See Update History

- 7.45.00
Added options isdisabled [<Boolean>], disabledafter <DateTime> and disabledbefore <DateTime>
to gam print users. These options along with issuspended [<Boolean>] and isarchived [<Boolean>]
are useful when identifying users to deprovision.
Added option movefilepermissions [<Boolean>]] to gam <UserTypeEntity> move drivefile that, when False,
causes GAM to remove ACLs from a file before moving it; this will be most useful when moving files to
Shared Drives so that only the Shared Drive ACls apply. When not specified or set True, file permissions
are not removed; this is the current GAM behavior.
Upgraded to OpenSSL 4.0.1.
- See Update History

- 7.44.03
Added writerwithoutprivateaccess to <CalendarACLRole>; this will become effective 2026-06-29.
- See: https://developers.google.com/workspace/calendar/release-notes#June_01_2026
- See Update History

- 7.44.02
Added fields bluetoothadapterinfo and osversioncompliance to <CrOSFieldName> for use
in gam info|print cros.
- See Update History

- 7.44.01
Added option oneitemperrow to gam print crostelemetry to have each of a device's
report field entries displayed on a separate row with all of the other device fields.
Added additional fields to <CrOSTelemetryFieldName>and <CrOSTelemetryListFieldName>:
appreport
heartbeatstatusreport
kioskappstatusreport
networkbandwidthreport
runtimecountersreport
- See Update History

- 7.44.00
Added support for User data archivalTime and suspensionTime that is available
when fields archived and suspended are requested in gam info user and gam print users.
Added the following options to gam <UserTypeEntity> show chatmessages to simplify specifying a filter.
start|starttime <Date>|<Time>
end|endtime <Date>|<Time>
range <Date>|<Time> <Date>|<Time>
thread <ChatThread>
Added commands to search for and display chat messages.
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#display-chat-messages-by-searching
These commands are in Developer Preview; to use them you must have these values set in gam.cfg.
developer_preview_apis = chat
developer_preview_api_key = <DeveloperPreviewKey>
Upgraded to Python 3.14.5.
- See Update History

- 7.43.10
Updated gam <UserTypeEntity> forward message|thread [recipient|to] <RecipientEntity> to not forward messages
to the Bcc recipients of the original message.
Fixed bug in gam <UserTypeEntity> forward message|thread [recipient|to] <RecipientEntity> addorigfieldstosubject
where the recipient of the forwarded message was added to the subject line instead of the recipient of the original message.
- See Update History

- 7.43.09
Fixed bug in gam <UserTypeEntity> print filelist that caused a trap.
- See Update History

- 7.43.08
Fixed bug and formatting issues in gam info device <DeviceEntity>.
- See Update History

- 7.43.07
Improved validation of <QueryCrOS>, <QueryDevice> and <QueryMobile>.
- 7.43.06
Updated commands that use <QueryCrOS>, <QueryDevice> or <QueryMobile> to validate
that it is of the form field:value and that value does not contain a '?'.
Without validation, Google can return many more devices than are expected.
- See Update History

- 7.43.06
Updated commands that use <QueryCrOS>, <QueryDevice> or <QueryMobile> to validate
that it is of the form field:value and that value does not contain a '?'.
Without validation, Google can return many more devices than are expected.
- See Update History

- 7.43.05
Added option matchfield attendeesorganizer <Boolean> <EmailAddressEntity> to <EventMatchProperty>
that is used in commands that process events. The match is true if all of the addresses in <EmailAddressEntity>
are present as attendees in the event and are an organizer or not based on <Boolean>.
Added option max_to_deprov <Integer> to gam update cros <CrOSEntity> action <CrOSAction>
that is used when <CrOSAction> is any of the following:
deprovision_different_model_replace|
deprovision_different_model_replacement|
deprovision_retiring_device|
deprovision_same_model_replace|
deprovision_same_model_replacement|
deprovision_upgrade_transfer
max_to_deprov <Integer> - No deprovisions are processed if the number of devices in <CrOSEntity> exceeds <Integer>;
the default value is one; set <Integer> to 0 for no limit.
- See Update History

- 7.43.04
Added option include_suspended_zeros [<Boolean>] to gam print vaultcounts that causes
GAM to generate zero count lines for suspended users with zero items as well as non-suspended users.
- See Update History

- 7.43.03
Added option parentpathonly [<Boolean>] to the following commands that causes GAM
to display only the parent folder names when displaying the path to a file.
gam <UserTypeEntity> info drivefile ... filepath|fullpath
gam <UserTypeEntity> show fileinfo ... filepath|fullpath
gam <UserTypeEntity> print|show filepath
gam <UserTypeEntity> print filelist ... filepath|fullpath
- See Update History

- 7.43.02
Added option maxactivities <Number> to gam <UserTypeEntity> print driveactivity to limit
the number of activities displayed; the default is 0, no limit.
- See Update History

- 7.43.01
Updated gam info user and gam print users to display guest user attributes: isGuestUser, guestAccountInfo
Expanded <UserTypeEntity> to allow specification of guest users.
- See Collections of Users
- See Update History

- 7.42.00
In versions prior to 7.42.00, when redirect csv <FileName> was used, GAM did not open and write <FileName>
until all processing was complete; if <FileName> was not accessible, an error was generated
and no results were saved. Now, <FileName> is opened initially to verify accessiblity
and then written when processing is complete.
In the unlikely event that this causes issues, you can do redirect csv <FileName> delayopen
to get the previous behavior.
- See Update History

- 7.41.03
Fixed bug in the following:
Added the following to <RowValueFilter> used in CSV input/output row filtering; these are
synonyms for count and countrange.
[(any|all):]number<Operator><Number>|
[(any|all):]numberrange!=<Number>/<Number>|
[(any|all):]numberrange=<Number>/<Number>|
- See Update History

- 7.41.02
Added option ownername to gam info|print courses to have GAM display the course owners full name;
there is an extra API call per course to get the name.
Added option creatorname to gam print course-announcements|course-materials|course-works to have
GAM display the item creators full name; there is an extra API call per course to get the name.
After creating a group, it may be sometime, e.g. 30-45 seconds, before members can
successfully be added to the group even though the API reported that the group was created.
The following options can be used with gam create group to verify that the group is actually ready to be updated.
This will be most useful in scripts that are used to create and then populate groups.
verifycreationretries <Integer> - Verify group creation, defaults to 0, no verification performed, range 0-20
verifycreationinitialdelay <Integer> - Number of seconds to delay before first verification performed, defaults to 5, range 0-60
verifycreationretrydelay <Integer> - Number of seconds to delay between verificaton retries, defaults to 5, range 1-60
If you have a script that deletes a group and then immediately tries to create a new group with the same email address,
you may run into issues. There seems to be a 30-45 second window after the deletion in which a couple
of strange errors can occur on the creation: Resource not found and Duplicate.
The following options can be used with gam create group to handle these errors. This will be most useful
in scripts that are used to delete and then immediately recreate groups.
recentdeleteretries <Integer> - Handle group delete/create errors, defaults to 0, no errors handled, range 0-20
recentdeleteretrydelay <Integer> - Number of seconds to delay between retries, defaults to 5, range 1-60
Added the following to <RowValueFilter> used in CSV input/output row filtering; these are
synonyms for count and countrange.
[(any|all):]number<Operator><Number>|
[(any|all):]numberrange!=<Number>/<Number>|
[(any|all):]numberrange=<Number>/<Number>|
- See Update History

- 7.41.01
Fixed bug in gam print cigroups members managers owners countsonly totalcount internal external that caused a trap.
- See Update History

- 7.41.00
Upgraded to Python 3.14.4 and OpenSSL 4.0.0.
- See Update History

- 7.40.03
Added option whocanaddexternalmembers only_owners_can_add_external_members|end_users_can_add_external_members to <GroupSettingsAttribute>.
It appears that allowexternalmembers true must be set in the same command.
Added option whocanaddexternalmembers to <GroupFieldName>.
These options are not in general release as of 2026-04-13; experiment.
- See Update History

- 7.40.02
Updated gam info|print cigroups and gam print|show cigroup-members to handle trap caused
by API returning invalid member data; preferredMemberKey with no id.
- See Update History

- 7.40.01
Updated gam <UserTypeEntity> print filelist|filecounts to handle the permissionDetails subfield
of the permissions field for My Drives; this useful when trying to display permission inheritance.
An additional API call per file is required to get the permissionDetails subfield.
gam user user@domain.com print filelist fields id,name,mimetype,basicpermissions,permissiondetails oneitemperrow
gam user user@domain.com print filelist fields id,name,mimetype,basicpermissions,permissiondetails pm inherited false em pmfilter oneitemperrow
- See Update History

- 7.40.00
Updated gam print|show businessprofileaccounts (client access) to
gam <UserTypeEntity> print|show businessprofileaccounts (service account access).
You'll need to run gam user user@domain.com update serviceaccount and
select 2) Business Account Management API.
- See Update History

- 7.39.07
Upgraded to OpenSSL 3.6.2.
- See Update History

- 7.39.06
Fixed bug in gam version checkrc.
- See Update History

- 7.39.04
Added updateprimaryemail <RegularExpression> <EmailReplacement> option to
gam update group <GroupEntity> and gam update cigroup <GroupEntity> to allow modifying
the group's current primary email address.
For example, to change the domain of a set of groups from the current domain.com to newdomain.com:
gam update group csvfile Groups.csv:email updateprimaryemail "^(.+)@domain.com$" "\1@newdomain.com"
- See Update History

- 7.39.03
Added the following options to gam <UserTypeEntity> create chatspace that can be used to capture
space details when creating chat spaces in bulk.
csv [todrive <ToDriveAttribute>*] [formatjson [quotechar <Character>]] (addcsvdata <FieldName> <String>)*
See: https://github.com/GAM-team/GAM/wiki/Users-Chat#bulk-build-chat-spaces
- See Update History

- 7.39.02
Fixed progress messages for gam <UserTypeEntity> print filelist when permissions were being
displayed/matched for Shared Drives.
- See Update History

- 7.39.01
Updated gam <UserTypeEntity> transfer drive <UserItem> to handle the following error:
ERROR: 403: cannotDeletePermission - The authenticated user cannot delete the permission.
- See Update History

- 7.39.00
Deleted variable enforce_expansive_access from gam.cfg and removed option enforceexpansiveaccess
from the following commands as expansive access is now always enforced by Google on My Drives.
gam <UserTypeEntity> delete permissions
gam <UserTypeEntity> delete drivefileacl
gam <UserTypeEntity> update drivefileacl
gam <UserTypeEntity> copy drivefile
gam <UserTypeEntity> move drivefile
gam <UserTypeEntity> transfer ownership
gam <UserTypeEntity> claim ownership
- See Update History

- 7.38.02
Added license SKU 1010470009 for AI Expanded Access; abbreviation aiexpandedaccess.
Renamed license SKU 1010470001 from Gemini Enterprise to Gemini Enterprise - Legacy.
- See Update History

- 7.38.01
Added root as a synonym for '/' in command line arguments that specify an OU.
This is to avoid issues where a stand-alone / on the command line may be mis-interpreted
by the command line interpreter as a reference to the file system root.
- See Update History

- 7.38.00
Added variable gcp_org_id to gam.cfg that is used by the following commands;
by setting the value, additional API calls are eliminated.
gam create project
gam create gcpfolder
gam create|update|delete caalevel
gam print|show caalevels
gam print|show tokens gcpdetails
You can get and set the gam.cfg/gcp_org_id value with these commands:
$ gam info gcporgid
organizations/906207637890
$ gam config gcp_org_id organizations/906207637890 save
You can get and set the gam.cfg/customer_id value with these commands:
$ gam info customerid
C78abc9de
$ gam config customer_id C78abc9de save
Added the following options to gam report <ActivityApplicationName>.
applicationinfofilter <String>
networkinfofilter <String>
statusfilter <String>
includesensitivedata
- See Update History

- 7.37.00
Added new client access scopes used by gam print tokens.
[*] 52) Resource Manager API - Organizations readonly
[*] 53) Resource Manager API - Projects readonly
Added option gcpdetails to gam print tokens that uses these scopes to get additional project information.
- See Update History

- 7.36.03
Added command to send email replies that causes Gmail to recognize the message
in conversation mode for the user sending the reply and the user receiving the reply;
GAM supplies the necessary headers and options.
gam <UserTypeEntity> sendreply
(((query <QueryGmail> [querytime<String> <Date>]*) [or|and])+) | (ids <MessageIDEntity>)
[replyto <EmailAddress>]
[subject <String>] [<MessageContent>] [html [<Boolean>]]
(attach <FileName> [charset <CharSet>])*
(embedimage <FileName> <String>)*
(<SMTPDateHeader> <Time>)* (<SMTPHeader> <String>)* (header <String> <String>)*
gam user user@domain.com sendreply query "rfc822MsgId:<CAAMmEdqj43...1OsQ@mail.gmail.com>" textmessage "Thanks for the information"
gam user user@domain.com sendreply ids 19cfc3506c02c22b textmessage "Thanks for the information"
- See: https://github.com/GAM-team/GAM/wiki/Send-Email#conversation-mode
- See Update History

- 7.36.02
Added option threadid <String> to gam [<UserTypeEntity>] sendemail that causes Gmail to recognize the message
in conversation mode in for the user sending the message.
- See: https://github.com/GAM-team/GAM/wiki/Send-Email#conversation-mode
- See Update History

- 7.36.01
Fixed bug in gam info|print|show policies where the policyQuery/query field was not displayed.
Added option noidmapping to gam info|print|show policies to suppress adding the policyQuery/groupEmail and
policyQuery/orgUnitPath name fields that are mapped from the policyQuery/group and policyQuery/orgInit id fields.
- See Update History

- 7.34.12
Fixed build errors that prevented Windows zip files from being created.
Added option returnidonly to gam create|update printer that causes GAM to return just the ID
of the printer.
- See Update History

- 7.34.11
Updated gam-install.sh script for macOS/Linux to properly config GAM when the answer to the following question is No.
Can you run a full browser on this machine? (usually Y for macOS, N for Linux if you SSH into this machine)
- See Update History

- 7.34.10
Fixed bug where formatjson quotechar <Character> on the command line did not override redirect csv <FileName> multiprocess quotechar <Character>.
- See Update History

- 7.34.09
Updated gam <UserTypeEntity> update photo to delete the user's existing photo
before performing the update as the API update will succeed but not replace a user's existing self-set photo.
- See Update History

- 7.34.08
Rebuild to avoid the following error:
requests/__init__.py:113: RequestsDependencyWarning: urllib3 (2.6.3) or chardet (6.0.0.post1)/charset_normalizer (3.4.4) doesn't match a supp\
orted version!
- 7.34.07
Added the following command to create a guest user.
- See: https://support.google.com/a/answer/16558545
gam create guestuser <EmailAddress>
Added the following items to <UserFieldName>:
- guestaccountinfo - Additional guest-related metadata fields
- isguestuser - Indicates if the inserted user is a guest
- See Update History

- 7.34.06
Added option copyfolderpermissions [<Boolean>] to gam <UserTypeEntity> copy|move drivefile.
When copyfolderpermissions false is specified, no folder permissions are copied; this simplifies
disabling all folder permission copying.
When not specified or copyfolderpermissions [true] is specified, folder permissions are copied based on the following options:
copymergewithparentfolderpermissions [<Boolean>]
copymergedtopfolderpermissions [<Boolean>]
copytopfolderpermissions [<Boolean>]
copytopfolderiheritedpermissions [<Boolean>]
copytopfoldernoniheritedpermissions never|always|syncallfolders|syncupdatedfolders
copymergedsubfolderpermissions [<Boolean>]
copysubfolderpermissions [<Boolean>]
copysubfolderinheritedpermissions [<Boolean>]
copysubfoldernoniheritedpermissions never|always|syncallfolders|syncupdatedfolders
- See Update History

- 7.34.05
Updated gam report <ActivityApplictionName> to perform a reverse chronological sort
on all rows across multiple users and/or event names; this is consistent with the behavior
in the Admin console. Use option notimesort to suppress this sort.
- See Update History

- 7.34.04
Updated gam <UserTypeEntity> create drivefileacl <DriveFileEntity> user <UserItem> role owner to better
handle the case where the current owner of a file is suspended. Previously, the command was displayed as an error
even though the ownership was changed.
gam user currentowner@domain.com add drivefileacl <DriveFileID> user newowner@domain.com role owner
User: currentowner@domain.com, Add 1 Drive File/Folder ACL
User: currentowner@domain.com, Drive File/Folder ID: <DriveFileID>, Permission ID: newowner@domain.com, Add Failed: Sorry, the items were successfully shared but emails could not be sent to newowner@domain.com.
Now the command is displayed as a success with a note indicating that the ownership change email was not sent.
gam user currentowner@domain.com add drivefileacl <DriveFileID> user newowner@domain.com role owner
User: currentowner@domain.com, Add 1 Drive File/Folder ACL
User: currentowner@domain.com, Drive File/Folder ID: <DriveFileID>, Permission ID: newowner@domain.com, Added: Sorry, the items were successfully shared but emails could not be sent to newowner@domain.com.
New Owner
id: 10834698115409747890
type: user
emailAddress: newowner@domain.com
domain: domain.com
role: owner
permissionDetails:
role: writer
type: file
inherited: True
inheritedFrom: Unknown
role: owner
type: file
inherited: False
deleted: False
pendingOwner: False
- See Update History

- 7.34.03
Updated to Python 3.14.3
Updated Cryptography to 46.0.5
Updated gam course <CourseID> create student|teacher <EmailAddress> error message when
<EmailAddress> is not in a trusted domain to remove suggestion about creating an invitation.
- See Update History

- 7.34.02
Updated GAM to prevent errors like the following:
ERROR: Unable to find the server at oauth2.googleapis.com
ERROR: Unable to find the server at gmail.googleapis.com
If you experience any unexpected errors, post a message to:
- The GAM Discussion Forum (google-apps-manager@googlegroups.com)
- The GAM Public Chat Room (https://chat.google.com/app/chat/AAAA4BULhWo)
- See Update History

- 7.34.01
Updated gam create|update adminrole to handle the following errors:
ERROR: 400: invalid - Invalid Role privileges
ERROR: 400: required - Required parameter: [resource.privileges[n].service_id]
- See Update History

- 7.34.00
Added variable csv_output_header_required to gam.cfg that is a comma separated list of <Strings>
that are required to be in the list of column headers in the CSV file written by a gam print command.
This will typically be used to specify headers that are required in subsequent commands that process
the CSV file even if the API didn't return any data for those columns.
Updated the following commands to not require the Directory API - Domains scope
unless the internal or external options are used to request the member category.
gam info|print groups
gam print|show group-members
gam info|print cigroups
gam print|show cigroup-members
gam <UserTypeEntity> print|show filesharecounts
- See Update History

- 7.33.03
Fixed bug in gam [<UserTypeEntity>] sendemail ... from <EmailAddress> replyto <EmailAddress>
where an <EmailAddress> of the form Text <user@domain.com> had the Text removed.
- See Update History

- 7.33.02
Added hideinvitationssetting to <UserCalendarSettingsField> used by
gam <UserTypeEntity> print|show calsettings.
- See Update History

- 7.33.01
Added option shownopolicy to gam print chromepolicies that will display output like the following
if no policies apply to the selected OU or group.
gam print chromepolicies ou /Test appid chrome:emidddocikgklceeeifefomdnbkldhng namespace chrome.users.apps shownopolicy
Getting all Chrome Policies that match query (chrome.users.apps.*) for /Test
Got 0 Chrome Policies that matched query (chrome.users.apps.*) for /Test...
name,orgUnitPath,parentOrgUnitPath,direct,appId
noPolicy,/Test,/,False,chrome:emidddocikgklceeeifefomdnbkldhng
- See Update History

- 7.33.00
Added variable developer_preview_apis to gam.cfg that is a comma separated list of APIs requiring a Developer Preview key.
Currently, chat is the only API that requires a Developer Preview key; it is required for the User Sections commands.
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#introduction
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#manage-chat-user-sections
- See Update History

- 7.32.07
Added option includepermissionsforview published to gam <UserTypeEntity> print filelist and
gam <UserTypeEntity> show fileinfo. From the Drive API documentation:
Specifies which additional view's permissions to include in the response. Only published is supported.
- See Update History

- 7.32.06
Added options to gam <UserTypeEntity> copy drivefile ... copysubfiles to limit copying
to files whose modifiedTime meets specified requirements.
- start|starttime <Date>|<Time> - If specified, modifiedTime must be >= the value
- end|endtime <Date>|<Time> - If specified, modifiedTime must be <= the value
- range <Date>|<Time> <Date>|<Time> - first value <= modifiedTime <= second value
- See Update History

- 7.32.05
Fixed bug in gam <UserTypeEntity> print messages|threads ... headers <SMTPHeaderList> where
headers other than those specified in <SMTPHeaderList> were displayed.
Updated gam info users <UserTypeEntity> to display the following data when the Licensing API
does not return data due to quota limits. Previously, no License data was displayed and
there was no way to know if it was omitted due to API quota limits vs the user has no license?
Licenses: (1)
Not available/incomplete
If a user has no licenses, this will be displayed.
Licenses: (0)
You should use license_skus = <SKUIDList> in gam.cfg to list all of the licensing SKUs
used in your workspace. Without this list, GAM has to make 70+ API calls to get the licenses
for a user; this can cause quota limit errors.
- See Update History

- 7.32.04
Support for student groups in Google Classroom no longer requires Developer Preview membership.
Upgraded to OpenSSL 3.6.1.
- See Update History

- 7.32.03
Added option template as an additional formating option for gam <UserTypeEntity> show signature
that displays just the HTML data; this simplifies capturing the data for use as input to GAM.
$ gam redirect stdout ./SigTemplate.html user user@domain.com show signature template
$ more SigTemplate.html
<div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="margin:0px;font-size-adjust:none;font-stretch:normal;
font-size:12px;line-height:normal;font-family:Monaco;color:rgb(0,0,0)">
<span style="background-color:rgb(82,208,206)">{RT}Email: {Email}{/RT}</span></p><p style="margin:0px;font-size-adjust:none;font-stretch:normal;font-size:12px;line-height:normal;font-family:Monaco;color:rgb(0,0,0)">
<span style="background-color:rgb(82,208,206)">{RT}Phone: {Phone}{/RT}</span></p><p style="margin:0px;font-size-adjust:none;font-stretch:normal;font-size:12px;line-height:normal;font-family:Monaco;color:rgb(0,0,0)">
<span style="background-color:rgb(82,208,206)">{RT}Mobile: {Mobile}{/RT}</span></p></div><br></div>\n</div>
- See Update History

- 7.32.02
Added variable oauth2_txt_lock_mode to gam.cfg, the default is 644 and valid values are: 644, 664, 666.
This value is used to set the file permissions on the oauth2.txt.lock file. In very special cases where
daemon processes, e.g. Apache/httpd, are running GAM, the value 666 may have to be used.
- See Update History

- 7.32.01
Added option (addcsvdata <FieldName> <String>)* to gam <CrOSTypeEntity> issuecommand command <CrOSCommand> csv
and gam <CrOSTypeEntity> getcommand commandid <CommandID> csv that adds additional columns of data to the CSV file output.
- See: https://github.com/GAM-team/GAM/wiki/ChromeOS-Devices#bulk-action-example
- 7.32.00
Added option verifyallowexternal to gam print cigroup-members|group-members that causes
GAM to only display external members in groups with `allowExternalMembers=False'.
This option can be used to help verify that internal-only groups don't have external members.
Updated option internaldomains for the following commands:
gam info|print groups
gam print|show group-members
gam info|print cigroups
gam print|show cigroup-members
gam <UserTypeEntity> print|show filesharecounts
Which domains are considered internal domains:
- internaldomains all - All of your workspace domains; this is the default
- internaldomains primary - Your workspace primary domain
- internaldomains <DomainNameList> - A list of domain names
Added option csv to gam <CrOSTypeEntity> issuecommand command <CrOSCommand>
and gam <CrOSTypeEntity> getcommand commandid <CommandID> so that command details are displayed in CSV format.
This can be used to log commands issued to devices and then monitor the results.
Added option filemimetype category <MimeTypeNameList> to gam <UserTypeEntity> copy drivefile to support
copying of files based on their MimeType category.
Added option attendeeslist to gam calendars <CalendarEntity> print events and gam <UserTypeEntity> print events
that causes GAM to display the attendee email addresses in a single column attendeesList; no attendee details
are displayed. The email addresses are separated by csv_output_field_delimiter from gam.cfg.
Fixed bug in gam sendemail ... replyto <EmailAddress> that caused a message delivery error if
<EmailAddress> did not include a domain name.
Added support for users's chat sections.
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#manage-chat-users-sections
- This is in Deveoper Preview; you must have a developer_preview_api_key in gam.cfg to use these commands.
- See Update History

7.32.00
Added option verifyallowexternal to gam print cigroup-members|group-members that causes
GAM to only display external members in groups with `allowExternalMembers=False'.
This option can be used to help verify that internal-only groups don't have external members.
Updated option internaldomains for the following commands:
gam info|print groups
gam print|show group-members
gam info|print cigroups
gam print|show cigroup-members
gam <UserTypeEntity> print|show filesharecounts
Which domains are considered internal domains:
- internaldomains all - All of your workspace domains; this is the default
- internaldomains primary - Your workspace primary domain
- internaldomains <DomainNameList> - A list of domain names
Added option csv to gam <CrOSTypeEntity> issuecommand command <CrOSCommand>
and gam <CrOSTypeEntity> getcommand commandid <CommandID> so that command details are displayed in CSV format.
This can be used to log commands issued to devices and then monitor the results.
Added option filemimetype category <MimeTypeNameList> to gam <UserTypeEntity> copy drivefile to support
copying of files based on their MimeType category.
Added option attendeeslist to gam calendars <CalendarEntity> print events and gam <UserTypeEntity> print events
that causes GAM to display the attendee email addresses in a single column attendeesList; no attendee details
are displayed. The email addresses are separated by csv_output_field_delimiter from gam.cfg.
Fixed bug in gam sendemail ... replyto <EmailAddress> that caused a message delivery error if
<EmailAddress> did not include a domain name.
Added support for users's chat sections.
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#manage-chat-users-sections
- This is in Deveoper Preview; you must have a developer_preview_api_key in gam.cfg to use these commands.
- See Update History

- 7.31.06
Added option batchsize <Integer> to gam calendar <CalendarEntity> delete|purge events and
gam <UserTypeEntity> delete|purge events <UserCalendarEntity> that causes GAM to delete events
with batch API calls rather than with individual API calls.
- See Update History

- 7.31.05
Added option variables <RESearchPattern> to gam select section <SectionName> verify and gam config verify
that causes GAM to only display variables with names selected by <RESearchPattern>.
gam select School verify variables "^(customer|domain)"
Section: School
customer_id = C03abc123
domain = school.edu
gam config verify variables 'dir'
Section: DEFAULT
cache_dir = ~/GamConfig/gamcache ; /Users/gamteam/GamConfig/gamcache
config_dir = ~/GamConfig ; /Users/gamteam/GamConfig
drive_dir = ~/GamWork ; /Users/gamteam/GamWork
gmail_cse_incert_dir = ~/GmailCSE/Certs ; /Users/gamteam/GmailCSE/Certs
gmail_cse_inkey_dir = ~/GmailCSE/Keys ; /Users/gamteam/GmailCSE/Keys
input_dir = .
- See Update History

- 7.31.04
Fixed bug in gam report admin|chrome that caused to events to not be displayed.
Updated gam <UserTypeEntity> print|show messages|threads ... query <QueryGmail> to display the query.
- See Update History

- 7.31.03
Due to the following Calendar API update, the gam <UserTypeEntity> transfer calendars command has been removed.
- See: https://developers.google.com/workspace/calendar/release-notes#October_27_2025
Data ownership can be transferred in the Google Calendar UI.
- See Update History

- 7.31.02
Added the following options to gam <UserTypeEntity> copy drivefile
to limit copying to those files owned by selected users.
- copysubfilesownedby users <EmailAddressList> - Only files owned by users in <EmailAddressList> are copied.
- copysubfilesownedby notusers <EmailAddressList> - Only files not owned by users in <EmailAddressList> are copied.
- copysubfilesownedby regex <REMatchPattern> - Only files owned by users whose email addresses match <REMatchPattern> are copied.
- copysubfilesownedby notregex <REMatchPattern> - Only files owned by users whose email addresses do not match <REMatchPattern> are copied.
- See Update History

- 7.31.01
Code cleanup for addcsvdata <FieldName> <String>.
- See Update History

- 7.31.00
Fixed bug in gam report chrome (user <UserItem>)|(select <UserTypeEntity>) where no activities were returned.
report chrome does not use the parameter userKey=<EmailAddress> as do other applications but requires
parameter filter DEVICE_USER==<EmailAddress>.
Updated gam report admin (user <UserItem>)|(select <UserTypeEntity>) to use parameter filter USER_EMAIL==<EmailAddress>
to display activiities affecting the user <EmailAddress>. Use option userisactor to use the parameter userKey=<EmailAddress>
that displays activities where user <EmailAddress> executed the command that generated the activity.
Fixed bug in gam print cros|filelist|users ... (addcsvdata <FieldName> <String>)+ formatjson where the addcsvdata columns
were not displayed but the additional field values were included in the JSON data. Now, the addcsvdata columns
are displayed but the additional field values are only included in the JSON data when option includdecsvdatainjson is specified.
Added option addcsvdata <FieldName> <String> to gam <UserTypeEntity> print cigroups|groups
that adds additional columns of data to the CSV file output.
Added option addcsvdata <FieldName> <String> to gam <UserTypeEntity> print cigroupmembere|group-members
that adds additional columns of data to the CSV file output.
- See Update History

- 7.30.05
Added option gmaileventtypes <NumberRangeList> to gam report gmail that can be used to limit the event types displayed.
<NumberRange> ::= <Number>|(<Number>/<Number>)
<NumberRangeList> ::= "<NumberRange>(,<NumberRange>)*"
gam report gmail user user@domain.com gmaileventtypes 1,10/11
- See: https://developers.google.com/workspace/admin/reports/v1/appendix/activity/gmail
Updated sorting of column headers in gam report <ActivityApplicationName>.
- See Update History

- 7.30.04
Updated gam report gmail to avoid the following error when incomplete start/end time information is provided.
ERROR: Invalid request: Start time and end time should both be provided, and the scan duration should not be greater than 30 days.
- No time information provided - GAM sets range -30d today
- Only start <Time> provided - GAM sets end <Time>+30d
- Only end <Time> provided - GAM sets start <Time>-30d
- See Update History

- 7.30.03
Updated gam report <ActivityApplicationName> to reflect the changes described here:
- See: https://workspaceupdates.googleblog.com/2025/12/google-workspace-audit-log-api.html
Added option resourcedetailsfilter <String> to gam report <ActivityApplicationName> described here:
- See: https://developers.google.com/workspace/admin/reports/reference/rest/v1/activities/list#query-parameters
For gam <UserTypeEntity> print <Objects>, expanded the list of <Objects> covered by gam.cfg csv_output_users_audit = True.
- See Update History

- 7.30.02
Added option conferencedata meet <MeetID> to <EventAttribute> that allows specifying
a reference to an existing Google Meet when creating/updating a calendar event.
Upgraded to Python 3.14.2.
- See Update History

- 7.30.01
Fixed bug introduced in 7.30.00 that caused errors when reading CSV files.
Added the following options to gam <UserTypeEntity> create focustime|outofoffice:
((date yyyy-mm-dd)|
(range yyyy-mm-dd yyyy-mm-dd)|
(daily yyyy-mm-dd N)|
(weekly yyyy-mm-dd N))
Added the following options to gam <UserTypeEntity> create focustime|outofoffice|workinglocation:
noreminders|(reminder email|popup <Number>)+
- See Update History

- 7.29.04
Updated gam delete chromepolicy chrome.users.apps.InstallType ou <OrgUnitItem> appid <AppID>
to allow deleting an app, i.e., explicitly remove it from management. <OrgUnitItem> must specify where it was added for management.
- See Update History

- 7.29.03
Remove debugging message from gam <UserTypeEntity> move drivefile <DriveFileEntity>.
- See Update History

- 7.29.02
Fixed bug in gam <UserTypeEntity> move drivefile <DriveFileEntity> where the following options
were only applied to top level files or folders re-created in the destination. Now, domain
and email address mappings apply to all moved files/folders.
excludepermissionsfromdomains <DomainNameList>
includepermissionsfromdomains <DomainNameList>
mappermissionsdomain <DomainName> <DomainName>
mappermissionsemail <EmailAddress> <EmailAddress>
mappermissionsemailfile <CSVFileInput> endcsv
Upgraded to Python 3.14.1.
- See Update History

- 7.29.01
Added option oneitemperrow to gam <UserTypeEntity> print calendars ... permissions to have each of a
calendar's permissions displayed on a separate row with all of the other calendar fields.
Updated gam yubikey reset_piv to handle YubiKey firmware updates that caused an error.
- See Update History

- 7.29.00
Added options mappermissionsemail <EmailAddress> <EmailAddress> and mappermissionsemailfile <CSVFileInput> endcsv
to these commands:
gam [<UserTypeEntity>] copy shareddriveacls <SharedDriveEntity> to <SharedDriveEntity>
gam [<UserTypeEntity>] sync shareddriveacls <SharedDriveEntity> with <SharedDriveEntity>
gam <UserTypeEntity> copy drivefile <DriveFileEntity>
gam <UserTypeEntity> move drivefile <DriveFileEntity>
When mappermissionsemail <EmailAddress> <EmailAddress> is specifed, an ACL that references the first <EmailAddress>
in the source will be modified to reference the second <EmailAddress> in the destination.
Bulk permission email address mapping can be specified with mappermissionsemailfile <CSVFileInput> endcsv.
<CSVFileInput> must include these columns: sourceEmail and destinationEmail.
These options will be most useful with inter-workspace Shared Drive copies and moves.
- See Update History

- 7.28.13
Added option addcsvdata <FieldName> <String> to gam <UserTypeEntity> print messages
that adds additional columns of data to the CSV file output.
- See Update History

- 7.28.12
Updated gam delete project to handle the following error:
ERROR: 400: failedPrecondition - Project not active
- See Update History

- 7.28.11
Removed all options/fields referencing inheritance from gam create|update|info|print org as this option/field is deprecated.
- 7.28.10
Added a command gam print course-counts that dsplays the count of the number of courses in which a teacher or student is a participant.
- See: https://github.com/GAM-team/GAM/wiki/Classroom-Membership#display-course-counts-for-teachers-students
- See Update History

- 7.28.10
Added a command gam print course-counts that dsplays the count of the number of courses in which a teacher or student is a participant.
- See: https://github.com/GAM-team/GAM/wiki/Classroom-Membership#display-course-counts-for-teachers-students
- See Update History

- 7.28.09
Fixed bug in gam print cigroups ... descriptionmatchpattern [not] <REMatchPattern> that caused a trap.
- See Update History

- 7.28.08
Updated gam <UserTypeEntity> print|show chatmessages to cache the sender UID to email address
map so that each sender UID only has to be looked up once; this improves performance.
- See Update History

- 7.28.07
Fixed bug in gam report users ... aggregatebydate|aggregatebyuser where accounts:used_quota_in_percentage was incorrectly displayed.
- See Update History

- 7.28.06
Updated gam <UserTypeEntity> info|print|show calendars and
gam calendars <CalendarEntity> print|show settings to display the
new dataOwner field as described under Additional details below.
- See: https://workspaceupdates.googleblog.com/2025/11/secondary-calendar-management-with-dedicated-owners.html
- See Update History

- 7.28.04
Updated commands that display Chrome device counts to display the date in the output.
- See: https://github.com/GAM-team/GAM/wiki/Chrome-Device-Counts
- See Update History

- 7.28.03
Improved commands to display Chrome device counts.
- See: https://github.com/GAM-team/GAM/wiki/Chrome-Device-Counts
- See Update History

- 7.28.02
Added commands to display Chrome device counts.
- See: https://github.com/GAM-team/GAM/wiki/Chrome-Device-Counts
- See Update History

- 7.28.01
Updated gam <UserTypeEntity> show fileinfo <DriveFileEntity> to display displayName as the key field
of a permission not deleted.
- See Update History

- 7.28.00
Added option addcsvdata <FieldName> <String> to gam report [usage] customers|users
that adds additional columns of data to the CSV file output. This will be most useful
when reading a CSV of user information and you want to include some of the user information,
e.g., orgUnitPath, in the output.
gam redirect csv ./Users.csv print users fields ou
gam redirect csv ./UserStorageInfo.csv multiprocess csv Users.csv gam report users user "~primaryEmail" parameters accounts:drive_used_quota_in_mb,accounts:gmail_used_quota_in_mb,accounts:gplus_photos_used_quota_in_mb,accounts:total_quota_in_mb,accounts:used_quota_in_mb,accounts:used_quota_in_percentage addcsvdata orgUnitPath "~orgUnitPath"
- See Update History

- 7.27.05
Added option addcsvdata <FieldName> <String> to gam print courses
that adds additional columns of data to the CSV file output.
The following scope is no longer necessary: Cloud Identity API - Groups Beta (Enables group locking/unlocking)
as this scope Cloud Identity API - Groups now provides group locking/unlocking.
- See Update History

- 7.27.04
Added options to gam <UserTypeEntity> create delegate that support
sending email notifications when a user adds a delegate.
- See: https://github.com/GAM-team/GAM/wiki/Users-Gmail-Delegates#delegation-notification
- See Update History

- 7.27.03
Updated gam <UserTypeEntity> create|update|sync chatmember role specification to role member|manager|owner.
This is the mapping between the Chat UI and Chat API; GAM uses the Chat UI role names.
UI: Member, API: ROLE_MEMBER
UI: Manager, API: ROLE_ASSISTANT_MANAGER
UI: Owner, API: ROLE_MANAGER
Updated gam <UserTypeEntity> update chatspace options for permission settings.
[managemembersandgroups owners|managers|members]
[modifyspacedetails owners|managers|members]
[togglehistory owners|managers|members]
[useatmentionall owners|managers|members]
[manageapps owners|managers|members]
[managewebhooks owners|managers|members]
[replymessages owners|managers|members]
- See Update History

- 7.27.02
Added option clearattachments <String> to gam [<UserTypeMessage>] update chatmessage
that clears all attachments from a Chat message. If <ChatContent> is not specified,
the current message text is retained and <String> is appended; <String> must be specified
but can be empty in which case the current message test is preserved as-is.
- See Update History

- 7.27.00
Added debug_redaction Boolean variable to gam.cfg. When True, the default,
sensitive data like access/refresh tokens, client secret and authorization codes
are redacted from debug output. This allows you to post debug output without
compromising your account information. Even with debug redaction,
anything shared publicly should be double-checked for sensitive content.
- See Update History

- 7.25.01
Fixed bug in gam config timezone <String> to handle timezone abbreviations correctly;
they were incorrectly shifted to lowercase.
- 7.25.00
Removed a capabilty added in 7.24.00 that allowed reading command data from Google Docs and Sheets
when a user's service account access to Drive and Sheets had been disabled. Jay was concerned
that this change could be exploited to give access to all user's files.
This capability has been replaced by issuing the following commands. The admin specified in gam oauth create
can read command data from Docs and Sheets to which it has access.
gam config commanddata_clientaccess true save
gam oauth create
Enable the following and proceed to authorization.
[*] 42) Drive API - commanddata_clientaccess
[*] 54) Sheets API - commanddata_clientaccess
Fixed in bug in gam report that caused a trap with either of the thismonth or previousmonths options were used.
Upgraded to Python 3.14.0.
- See Update History

- 7.25.00
Removed a capabilty added in 7.24.00 that allowed reading command data from Google Docs and Sheets
when a user's service account access to Drive and Sheets had been disabled. Jay was concerned
that this change could be exploited to give access to all user's files.
This capability has been replaced by issuing the following commands. The admin specified in gam oauth create
can read command data from Docs and Sheets to which it has access.
gam config commanddata_clientaccess true save
gam oauth create
Enable the following and proceed to authorization.
[*] 42) Drive API - commanddata_clientaccess
[*] 54) Sheets API - commanddata_clientaccess
Fixed in bug in gam report that caused a trap with either of the thismonth or previousmonths options were used.
Upgraded to Python 3.14.0.
- See Update History

- 7.24.01
Updated GAM to handle the following error that occurs when GAM tries to authenticate
as a user that has been disabled by Google.
ERROR: Authentication Token Error - invalid_account: Forbidden
- See Update History

- 7.24.00
If you want to disable a user's service account access to Drive and Sheets but still allow reading command data from Google Docs and Sheets, issue the following command and make these settings:
gam user user@domain.com update serviceaccount
[ ] 20) Drive API (supports readonly)
[*] 21) Drive API - read command data
[ ] 42) Sheets API (supports readonly)
[*] 43) Sheets API - read command data
- See Update History

- 7.23.07
Fixed bug in gam print|show admins where all admin assignments were not displayed when
types <AdminAssigneeTypeList> was not specified, i.e., all assignments should be displayed.
- See Update History

- 7.23.06
Added option types <AdminAssigneeTypeList> to gam print|show admins that allows filtering
of admin assignments by the type of the assignee; by default, all assignee types are displayed.
<AdminAssigneeType> ::= group|user|serviceaccount|unknown
<AdminAssigneeTypeList> ::= "<AdminAssigneeType>(,<AdminAssigneeType>)*"
- See Update History

- 7.23.05
Added option recursive to gam print|show admins that will display assignments to the members
of security groups assigned to roles; the security group membership is recursively expanded.
- See Update History

- 7.23.04
Added option addcsvdata <FieldName> <String> to gam <UserTypeEntity> print events
and gam calendars <CalendarEntity> print events that adds additional columns of data to the CSV file output.
An example would be to get the calendar name in addition to the calendar ID when printing events.
gam redirect csv ./Resources.csv print resources fields email,name
gam redirect csv ./ResourceEventCounts.csv multiprocess redirect stderr - multiprocess csv Resources.csv gam calendar "~resourceEmail" print events starttime -1y countsonly addcsvdata calendarName "~resourceName"
Upgraded to OpenSSL 3.6.0.
- See Update History

- 7.23.03
Upgraded to OpenSSL 3.5.4.
- See Update History

- 7.23.02
Added option oneitemperrow to 'gam print course-materials|course-work` to have each of a
course's materials displayed on a separate row with all of the other course fields.
This produces a CSV file that can be used in subsequent commands to process the materials without further script processing.
- See Update History

- 7.23.00
Added chat_max_results variable to gam.cfg.
chat_max_results
When retrieving lists of Chat items from API,
how many should be retrieved in each API call
Default: 100
Range: 1 - 1000
Previously, this vaule was always set to 1000 which could cause errors.
- See Update History

- 7.22.07
Added options showdetails and returnidonly to gam create|copy vaultquery.
Added option <JSONData> to gam create vaultexport|vaultquery and gam print vaultcounts.
- 7.22.06
Added commands to create, copy and delete Vault saved queries.
gam create vaultquery <MatterItem> [name <String>]
corpus calendar|drive|gemini|groups|hangouts_chat|mail|voice
[scope all_data|held_data|unprocessed_data]
(accounts <EmailAddressEntity>) | (orgunit|org|ou <OrgUnitPath>) | everyone
(documentids (<DriveFileIDList>|(select <FileSelector>|<CSVFileSelector>))) |
(shareddrives|teamdrives (<SharedDriveIDList>|(select <FileSelector>|<CSVFileSelector>))) |
[(includeshareddrives <Boolean>)|(shareddrivesoption included|included_if_account_is_not_a_member|not_included)]
(sitesurl (<URLList>||(select <FileSelector>|<CSVFileSelector>)))
[driveversiondate <Date>|<Time>]
[includerooms <Boolean>]
(rooms (<ChatSpaceList>|(select <FileSelector>|<CSVFileSelector>))) |
[terms <String>] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>] [timezone <TimeZone>]
[locationquery <StringList>] [peoplequery <StringList>] [minuswords <StringList>]
[responsestatuses <AttendeeStatus>(,<AttendeeStatus>)*] [calendarversiondate <Date>|<Time>]
(covereddata calllogs|textmessages|voicemails)*
[shownames] [formatjson]
gam copy vaultquery <MatterItem> <QueryItem> [targetmatter <MatterItem>] [name <String>]
[shownames] [formatjson]
gam delete vaultquery <QueryItem> matter <MatterItem>
gam delete vaultquery <MatterItem> <QueryItem>
Added a variant of gam print vaultcounts that gets its query parameters from a saved Vault query.
gam print vaultcounts [todrive <ToDriveAttributes>*]
matter <MatterItem> <QueryItem>
[wait <Integer>]
- See Update History

7.22.06
Added commands to create, copy and delete Vault saved queries.
gam create vaultquery <MatterItem> [name <String>]
corpus calendar|drive|gemini|groups|hangouts_chat|mail|voice
[scope all_data|held_data|unprocessed_data]
(accounts <EmailAddressEntity>) | (orgunit|org|ou <OrgUnitPath>) | everyone
(documentids (<DriveFileIDList>|(select <FileSelector>|<CSVFileSelector>))) |
(shareddrives|teamdrives (<SharedDriveIDList>|(select <FileSelector>|<CSVFileSelector>))) |
[(includeshareddrives <Boolean>)|(shareddrivesoption included|included_if_account_is_not_a_member|not_included)]
(sitesurl (<URLList>||(select <FileSelector>|<CSVFileSelector>)))
[driveversiondate <Date>|<Time>]
[includerooms <Boolean>]
(rooms (<ChatSpaceList>|(select <FileSelector>|<CSVFileSelector>))) |
[terms <String>] [start|starttime <Date>|<Time>] [end|endtime <Date>|<Time>] [timezone <TimeZone>]
[locationquery <StringList>] [peoplequery <StringList>] [minuswords <StringList>]
[responsestatuses <AttendeeStatus>(,<AttendeeStatus>)*] [calendarversiondate <Date>|<Time>]
(covereddata calllogs|textmessages|voicemails)*
[shownames] [formatjson]
gam copy vaultquery <MatterItem> <QueryItem> [targetmatter <MatterItem>] [name <String>]
[shownames] [formatjson]
gam delete vaultquery <QueryItem> matter <MatterItem>
gam delete vaultquery <MatterItem> <QueryItem>
Added a variant of gam print vaultcounts that gets its query parameters from a saved Vault query.
gam print vaultcounts [todrive <ToDriveAttributes>*]
matter <MatterItem> <QueryItem>
[wait <Integer>]
- See Update History

- 7.22.05
Added a variant of gam create vaultexport that gets its query parameters from a saved Vault query.
gam create vaultexport|export matter <MatterItem> [name <String>]
vaultquery <QueryItem>
[driveclientsideencryption any|encrypted|unencrypted]
[includeaccessinfo <Boolean>]
[excludedrafts <Boolean>] [mailclientsideencryption any|encrypted|unencrypted]
[showconfidentialmodecontent <Boolean>] [usenewexport <Boolean>] [exportlinkeddrivefiles <Boolean>]
[format ics|mbox|pst|xml]
[region any|europe|us] [showdetails|returnidonly]
- See Update History

- 7.22.04
Added a variant of gam create vaulthold that gets its parameters from a saved Vault query.
gam create vaulthold matter <MatterItem> [name <String>]
vaultquery <QueryItem>
[showdetails|returnidonly]
- See Update History

- 7.22.03
Fix backwards compatability bug introduced in 7.22.00 for gam print users that changed suspended
from a field name to a query option; it is now correctly interpreted as a field name.
- See Update History

- 7.22.02
An update to the httplib2 library caused GAM proxy connections to fail; this has been fixed
by including the pysocks library needed by the latest httplib2 library.
- See Update History

- 7.22.00
Expanded <UserTypeEntity> to allow specification of non-archived/archived users.
- See Collections of Users
These commands have also been updated to deal with archived users:
- gam print aliases
- gam update groups
- gam info orgs
- gam print orgs
- gam print users
Added datetime <DateTimeFormat> command that can be embedded in Gam batch files.
The current time is formatted with <DateTimeFormat> and subsequent lines in <BatchContent>
will have %datetime% replaced with the formatted time value.
See: https://docs.python.org/3/library/datetime.html#strftime-and-strptime-format-codes
- See Update History

7.21.03
Added option notifyrecoveryemail to gam create user and gam <UserTypeEntity> update user password <String>
that sends the passsword notification email to the user's recovery email address (if defined).
See Update History

- GAM now builds on macOS 26 Tahoe and properly identifies the OS.
- A custom build of the cryptography library is no longer needed for Windows arm64 bui lds as the project now releases their own build for the OS.
- Upgrade to OpenSSL 3.5.3 latest

- 7.21.01
Replaced datetime, dateutil, calendar and iso8601 Python libraries with arrow library.
This should have no performance impact; report any problems.
You can now use timezone names when setting timezone in gam.cfg.
- See: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
gam config timezone America/Los_Angeles save
See Update History

- 7.20.04
Cleaned up Python library imports: googleapiclient, iso8601
See Update History

- 7.20.02
Upgraded gam create course-studentgroups to allow specification of multiple student group titles;
multiple student groups can be created in a single command.
- ((title <String>)|(select <StringEntity))+
See Update History

- 7.20.00
Added initial support for student groups in Google Classroom. This is a work in progress and requires Developer Preview membership.
- See: https://github.com/GAM-team/GAM/wiki/Classroom-StudentGroups#notes
See Update History

- 7.19.03
Fixed bug where specifying a <UserItem> as id:1234567890 could lead to errors like this:
ERROR: 400: invalidArgument - Resource name has invalid email.
See Update History

- 7.19.02
Update gam info user <UserItem> to eliminate 5 second delay when getting license info.
Additional information:
- See: https://github.com/GAM-team/GAM/wiki/Licenses#info-user-performance
See Update History

- 7.19.01
Updated gam <UserTypeEntity> print|show signature to handle the following error
that occurs when an alias is specified.
ERROR: 404: notFound - Requested entity was not found.
See Update History

- 7.19.00
Eliminated drive_v3_beta and meet_v2_beta from gam.cfg as the API betas are no longer used.
Updated Meet API scopes so that GAM can read metadata about additional Meet spaces.
[*] 34) Meet API - Manage/Display Meeting Spaces
[*] 35) Meet API - Read Meeting Spaces metadata
See Update History

- 7.18.07
Updated gam <UserTypeEntity> print drivelastmodification to put addcsvdata columns
after User,id,name rather than after the last column.
See Update History

- 7.18.06
Updated gam <UserTypeEntity> delete|modify messages to improve the handling
of the following error.
quotaExceeded - User-rate limit exceeded
See Update History

- 7.18.05
Added support for Inbound SSO OIDC profiles.
Currently, if you enter gam select <SectionName> and nothing else on the command line,
GAM performs no action. Now, it will be treated as if you entered:
gam select <SectionName> save
Updated to Python 3.13.7.
See Update History

- 7.18.04
Added commands to display/manage Alert Center Pub/Sub notifications.
- See: https://github.com/GAM-team/GAM/wiki/Alert-Center#configuring-settings
See Update History

- 7.18.03
Updated gam oauth create to give a warning if the number of selected scopes will
probably cause Google to generate a "Something went wrong" error.
See Update History

- 7.18.02
Upgraded to OpenSSL 3.5.2.
See Update History

- 7.18.01
Added option nosystemroles to gam print|show adminroles that causes GAM
to only display non-system roles.
Added option formatjson to gam info|print|show adminroles; this will be most useful
when the privileges option is used.
Updated gam create|update adminrole to allow specification of privileges with
JSON data: privileges <JSONData>. These two updates make it easier to copy admin roles.
Updated gam create|update adminrole to allow output of the created/updated
role data in CSV format; by default, GAM displays <RoleName>(<RoleID>) created|updated.
csv [todrive <ToDriveAttribute>*] [formatjson [quotechar <Character>]] (addcsvdata <FieldName> <String>)*
See Update History

- 7.17.02
Updated gam <UserTypeEntity> print|show webmastersites to handle the following error
that occurs if you haven't updated your project to include the Google Search Console API.
ERROR: 403: permissionDenied - Google Search Console API has not been used in project 111055363999 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api\
/searchconsole.googleapis.com/overview?project=111055363999 then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
- 7.17.01
Fixed bug in gam <UserTypeEntity> show webmastersites that caused a trap.
- 7.17.00
Added commands to discover Sites and WebResources that managed users (previously unmanaged) may have access to for better governance and visibility.
These are special purpose commands and will not generally be used.
gam <UserTypeEntity> show webresources
gam <UserTypeEntity> print webresources [todrive <ToDriveAttribute>*]
gam <UserTypeEntity> show webmastersites
gam <UserTypeEntity> print webmastersites [todrive <ToDriveAttribute>*]
See Update History

- 7.17.01
Fixed bug in gam <UserTypeEntity> show webmastersites that caused a trap.
- 7.17.00
Added commands to discover Sites and WebResources that managed users (previously unmanaged) may have access to for better governance and visibility.
These are special purpose commands and will not generally be used.
gam <UserTypeEntity> show webresources
gam <UserTypeEntity> print webresources [todrive <ToDriveAttribute>*]
gam <UserTypeEntity> show webmastersites
gam <UserTypeEntity> print webmastersites [todrive <ToDriveAttribute>*]
See Update History

- 7.16.01
Added downloadrestictions and <DriveDownloadRestrictionsSubfieldName> to <DriveFieldName>.
<DriveDownloadRestrictionsSubfieldName> ::=
downloadrestrictions.itemdownloadrestriction|
downloadrestrictions.effectivedownloadrestrictionwithcontext
Added itemdownloadrestriction (restrictedforreaders [<Boolean>]) (restrictedforwriters [<Boolean>])
to <DriveFileAttribute>.
From the Drive API documentation:
itemDownloadRestriction - The download restriction of the file applied directly by the owner or organizer. This does not take into account shared drive settings or DLP rules.
effectiveDownloadRestrictionWithContext - Output only. The effective download restriction applied to this file. This considers all restriction settings and DLP rules.
restrictedForReaders - Whether download and copy is restricted for readers.
restrictedForWriters - Whether download and copy is restricted for writers. If true, download is also restricted for readers.
See Update History

- 7.16.00
Removed drive_v3_native_names from gam.cfg; GAM now only uses Drive API v3 fields names on output.
If you had drive_v3_native_names = False in gam.cfg or are updating from Legacy GAM:
- See: https://github.com/GAM-team/GAM/wiki/Drive-REST-API-v3
See Update History

- 7.15.00
Updated gam print shareddriveorganizers to make shownoorganizerdrives default to True
as documented; it was defaulting to False.
Cleaned up code for processing Python dictionary structures; this should have no noticable effect.
See Update History

- 7.14.04
Fixed bug in gam print|show cigroups cimember <UserItem> that generated the following error:
ERROR: Cloud Identity Group: groups/-, Print Failed: Error(4013): Insufficient permissions to retrieve memberships.
Updated gam <UserTypeEntity> update user suspended off and gam <UserTypeEntity> unsuspend users
to handle the following error that occurs when trying to unsuspend a user that has been suspended for abuse.
ERROR: 412: adminCannotUnsuspend - Cannot restore a user suspended for abuse.
- See: https://support.google.com/a/answer/1110339
See Update History

- 7.14.03
Fixed bug in gam print cigroup-members includederivedmembership that caused a trap.
- 7.14.02
Fixed bug in gam print|show cigroups|cigroups-members cimember <UserItem> that generated the following error:
Cloud Identity Group Print Failed: Request contains an invalid argument.
See Update History

- 7.14.01
Don't install yubikey library via pip by default. To install with yubikey support use pip install gam7[yubikey]
See Update History

- 7.13.03
Added option csv [todrive <ToDriveAttribute>*] [formatjson [quotechar <Character>]]]
to gam create chromeprofilecommand so that command details are displayed in CSV format.
Added option commands <ChromeProfileCommandNameList>|<FileSelector>|<CSVFileSelector> to <ChromeProfileNameEntity>
so that gam print|show chromeprofilecommands can directly display the commands generated by
gam create chromeprofilecommand with the csv option.
See Update History

- 7.13.02
Fixed bug in gam create chromeprofilecommand where select|filter were not recognized.
Updated gam create datatransfer <OldOwnerID> datastudio <NewOwnerID> that generated the following
error due to an unhandled API change.
ERROR: Invalid choice (google data studio): Expected <calendar|looker studio|drive and docs>
See Update History

- 7.13.01
Enhanced gam create|print|show chromeprofilecommand to allow specification
of multiple Chrome browser profiles rather than just one.
<ChromeProfilePermanentID> ::= <String>
<ChromeProfileName> ::= customers/<CustomerID>/profiles/<ChromeProfilePermanentID> | <ChromeProfilePermanentID>
<ChromeProfileNameList> ::= "<ChromeProfileName>(,<ChromeProfileName>)*"
<ChromeProfileNameEntity> ::=
<ChromeProfileNameList> |
(select <FileSelector>|<CSVFileSelector>) |
(filter <String> (filtertime<String> <Time>)* [orderby <ChromeProfileOrderByFieldName> [ascending|descending]])
gam create|print_show chromeprofilecommand <ChromeProfileNameEntity>
See Update History

- 7.13.00
Added commands that send remote commands to Chrome browser profiles and display the results;
at the moment, these commands can clear the browser cache and cookies.
- See: https://github.com/GAM-team/GAM/wiki/Chrome-Profile-Management#create-a-chrome-profile-command
See Update History

- 7.12.02
Updated gam print users to handle the following error:
ERROR: 503: serviceNotAvailable - The service is currently unavailable
See Update History

7.12.00
Started updated handling of missing scopes messages in client access commands;
this is a work in progress.
Updated gam info|show shareddrive to handle changes in the Drive API that caused traps.
Added downloadrestrictedforreaders and downloadrestrictedforwriters to
<SharedDriveRestrictionsSubfieldName> to support new Shared Drive restrictions.
Updated gam course <CourseID> create|update announcement to accept input from
a literal string, a file or a Google Doc.
<CourseAnnouncementContent> ::=
((text <String>)|
(textfile <FileName> [charset <Charset>])|
(gdoc <UserGoogleDoc>)|
(gcsdoc <StorageBucketObjectName>))
Added command gam check suspended <UserItem> that checks the suspension status of a user
and sets the return code to 0 if the user is not suspended or 26 if it is.
$ gam check suspended testok@domain.com
User: testok@domain.com, Account Suspended: False
$ echo $?
0
$ gam check suspended testsusp@domain.com
User: testsusp@domain.com, Account Suspended: True, Suspension Reason: ADMIN
$ echo $?
26
Updated gam <UserTypeEntity> sendemail to verify that one of recipient|to|from
immediately follows sendemail.
See Update History

- 7.11.00
Added commands to manage classroom/course announcements.
- See: https://github.com/GAM-team/GAM/wiki/Classroom-Courses#manage-course-announcements
Upgraded to OpenSSL 3.5.1.
See Update History

- 7.10.10
Added choices text and hyperlink to option showwebviewlink in gam [<UserTypeEntity>] print|show shareddrives.
- showwebviewlink text - Displays https://drive.google.com/drive/folders/<SharedDriveID>
- showwebviewlink hyperlink - Dsiplays =HYPERLINK("https://drive.google.com/drive/folders/<SharedDriveID>", "<SharedDriveName>")
See Update History

- 7.10.07
Updated gam <UserTypeEntity> copy|move drivefile to hanndle additional instances of
the cannotModifyInheritedPermission error.
Added license SKU Google AI Ultra for Business
- ProductID - 101047
- SKUID - 1010470008 | geminiultra
See Update History

- 7.10.05
Google renamed an error: cannotModifyInheritedTeamDrivePermission became cannotModifyInheritedPermission.
GAM will now handle the new error.
See Update History

- 7.10.04
Updated gam report <ActivityApplicationName> to accept accept application names as defined
in the Reports API discovery document; this means that GAM does not have to be updated when
Google defines a new application name.
gemini_in_workspace_apps is now available in gam report.
See Update History

- 7.10.03
Fixed bug in commands that modify messages where the labelids <LabelIdList> option
was not being applied.
See Update History

- 7.10.02
Added option labelids <LabelIdList> to all commands that process messages;
this option causes GAM to only return messages with labels that match all of the specified label IDs.
Updated gam <UserTypeEntity> print|show forms to always display isPublished and
isAcceptingResponses in publishSettings/publishState regardless of their value;
the API doesn't return these values when they are False.
See Update History

- 7.10.01
Added options ispublished [<Boolean>] and isacceptingresponses [<Boolean>] to
gam <UserTypeEntity> create|update form.
See Update History

- 7.10.00
Added commands to manage/display Chat Custom Emojis.
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#manage-chat-emojis
- See: https://github.com/GAM-team/GAM/wiki/Users-Chat#display-chat-emojis
Updated gam <UserItem> print|show chatspaces|chatmembers asadmin to display
the spaces in ascending display name order.
See Update History

- 7.09.07
Added webviewlink to <FileTreeFieldName> for use in gam <UserTypeEntity> print|show filetree.
- 7.09.06
Upddated gam print|show shareddrives', gam print|show shareddriveacls', gam print shareddriveorganizers
to display the Shared Drives in ascending name order; the API returns them in an unidentifiable order.
See Update History

- 7.09.05
Improved output of gam info|show chromeschemas [std] to more accurately display the schemas.
Fixed bugs in gam update chromepolicy that caused invalid error messaages.
See Update History

-7.09.02
Added command gam info chromeschema std <SchemaName> to display a Chrome policy schema in the same format as Legacy GAM.
Improved output of gam show chromeschemas [std] and gam info chromeschema [std] to more accurately display the schemas.
See Update History

- 7.09.01
Fixed bug in gam <UserTypeEntity> print diskusage where the ownedByMe column was
blank for the top folder.
Fixed bug in gam update chromepolicy where the following error was generated
when updating policies with simple numerical values.
ERROR: Missing argument: Expected <value>"
See Update History

- 7.09.00
Removed the overly broad service account IAM and Access Management API scope https://www.googleapis.com/auth/cloud-platform
from DWD. The gam <UserTypeEntity> check|Update serviceaccount commands issue an error message if this scope
is enabled prompting you to update your service account authorization so that the scope can be removed.
GAM commands that need IAM access now use the more limited scope https://www.googleapis.com/auth/iam in a non-DWD manner.
Added enforce_expansive_access Boolean variable to gam.cfg that provides the default value
for option enforceexpansiveaccess in all commands that delete or update drive file ACLs/permissions.
It's default value is False.
gam <UserTypeEntity> delete permissions
gam <UserTypeEntity> delete drivefileacl
gam <UserTypeEntity> update drivefileacl
gam <UserTypeEntity> copy drivefile
gam <UserTypeEntity> move drivefile
gam <UserTypeEntity> transfer ownership
gam <UserTypeEntity> claim ownership
gam <UserTypeEntity> transfer drive
Fixed bug in gam print shareddriveorganizers that caused a trap when an organizer was a deleted user.
Updated to Python 3.13.4
See Update History

- 7.08.02
Updated the defaults in gam print shareddriveorganizers to match the most common use case, not the script.
- domainlist - The workspace primary domain
- includetypes - user
- oneorganizer - True
- shownoorganizerdrives - True
- includefileorganizers - False
To select organizers from any domain, use: domainlist ""
These commands produce the same result.
gam redirect csv ./TeamDriveOrganizers.csv print shareddriveorganizers domainlist mydomain.com includetypes user oneorganizer shownoorganizerdrives
gam redirect csv ./TeamDriveOrganizers.csv print shareddriveorganizers
See Update History

- 7.08.01
Added option shareddrives (<SharedDriveIDList>|(select <FileSelector>|<CSVFileSelector>)) to
gam print shareddriveorganizers that displays organizers for a specific list of Shared Drive IDs.
See: https://github.com/GAM-team/GAM/wiki/Shared-Drives#display-shared-drive-organizers
See Update History

- 7.08.00
Added the following command that can be used instead of the GetTeamDriveOrganizers.py script.
gam [<UserTypeEntity>] print shareddriveorganizers [todrive <ToDriveAttribute>*]
[adminaccess|asadmin] [shareddriveadminquery|query <QuerySharedDrive>]
[orgunit|org|ou <OrgUnitPath>]
[matchname <REMatchPattern>]
[domainlist <DomainList>]
[includetypes <OrganizerTypeList>]
[oneorganizer [<Boolean>]]
[shownorganizerdrives [false|true|only]]
[includefileorganizers [<Boolean>]]
[delimiter <Character>]
The command defaults match the script defaults:
- domainlist - All domains
- includetypes - user,group
- oneorganizer - False
- shownoorganizerdrives - True
- includefileorganizers - False
For example, to get a single user organizer from your domain for all Shared Drives including no organizer drives:
gam redirect csv ./TeamDriveOrganizers.csv print shareddriveorganizers domainlist mydomain.com includetypes user oneorganizer shownoorganizerdrives
See Update History

- 7.07.16
Added chromeostype, diskspaceusage and faninfo to <CrOSFieldName> for use in gam info|print cros.
Fixed bugs/cleaned output in gam info|print cros.
See Update History

- 7.07.15
Added option shareddrivesoption included|included_if_account_is_not_a_member|not_included to gam create vaultexport.
The previous option includeshareddrives <Boolean> is mapped as follows:
- includeshareddrives false - shareddrivesoption included_if_account_is_not_a_member
- includeshareddrives true - shareddrivesoption included
See Update History

- 7.07.14
Update gam setup chat output to include the following that shows the actual Cloud Pub/Sub Topic Name.
You'll use projects/<ProjectID>/topics/no-topic in Connection settings Cloud Pub/Sub Topic Name
See Update History

- 7.07.13
Added option showitemcountonly to gam [<UserTypeEntity>] print|show shareddrives that causes GAM to display the
number of Shared Drives on stdout; no CSV file is written.
See Update History

- 7.07.12
Fixed bug in gam print|show oushareddrives that caused a trap.
Improved getting Shared Drive names from IDs when accessing Shared Drives in external workspaces.
See Update History

- 7.07.11
Updated gam calendars <CalendarEntity> update events and gam <UserTypeEntity> update events <UserCalendarEntity>
to handle the following error:
ERROR: 400: badRequest - Bad Request
Updated gam <UserTypeEntity> move drivefile to handle the following error:
ERROR: 400: shareOutNotPermitted
See Update History

- 7.07.10
Updated gam calendars <CalendarEntity> update events and gam <UserTypeEntity> update events <UserCalendarEntity>
to handle the following error:
ERROR: 400: eventTypeRestriction - Attendees cannot be added to 'fromGmail' event with this visibility setting.
See Update History

- 7.07.08
Fixed bug in gam <UserTypeEntity> print filelist ... countsonly that issued an
incorrect warning message like the following when redirect csv <FileName> multiprocess was specified.
WARNING: csv_output_row_filter column "^name$" does not match any output columns
See Update History

- 7.07.07
Fixed bug in gam report <ActivityApplictionName> ... countsonly eventrowfilter that issued an
incorrect warning message like the following when redirect csv <FileName> multiprocess was specified.
WARNING: csv_output_row_filter column "^doc_title$" does not match any output columns
See Update History

- 7.07.06
Added option eventrowfilter to gam calendars <CalendarEntity> print events ... countsonly
and gam <UserTypeEntity> print events <UserCalendarEntity> ... countsonly that causes
GAM to apply config csv_output_row_filter to the event details rather than the event counts.
This will be useful when <EventSelectProperty> and <EventMatchProperty> do not have the
capabilty to select the events of interest; e.g., you want to filter based on the event created property.
Dropped the extraneous id column for gam calendars <CalendarEntity> print events ... countsonly
and gam <UserTypeEntity> print events <UserCalendarEntity> ... countsonly.
See Update History

- 7.07.05
Updated gam <UserTypeEntity> move drivefile to recognize the API error: ERROR: 400: shareOutWarning.
See Update History

- 7.07.04
Updated gam create vaultexport ... rooms <ChatSpaceList> to strip spaces/ from the Chat Space IDs.
Updated gam <UserTypeEntity> copy drivefile to recognize the API error: ERROR: 400: shareOutWarning.
See Update History

- 7.07.02
Fixed bug in redirect csv ... transpose where a CSV file with multiple rows was not properly transposed.
See Update History

- 7.07.00
As of mid-October 2024, Google deprecated the API that retrieved the Global Address List.
The following commands have been eliminated.
gam info gal
gam print gal
gam show gal
These commands are a work-around for gam print gal.
gam config csv_output_row_filter "includeInGlobalAddressList:boolean:true" redirect csv ./UserGAL.csv print users fields name,gal
gam config csv_output_row_filter "includeInGlobalAddressList:boolean:true" batch_size 25 redirect csv ./GroupGAL.csv print groups fields name,gal
See Update History

- 7.06.14
Updated gam create|update adminrole to allow specifying a collection of privileges
with privileges select <FileSelector>|<CSVFileSelector> which makes copying roles much simpler.
Added option role <RoleItem> to gam print|show adminroles to allow display of information
for a specific role.
See Update History

- 7.06.13
Updated gam print group-members ... recursive and gam print cigroup-members ... recursive
to expand groups representing chat spaces.
See Update History

- 7.06.05
Updated code in gam delete|update chromepolicy to handle the policyTargetKey[additionalTargetKeys]
field in a more general manner for future use.
See Update History

- 7.05.21
Fixed bug in gam update chromepolicy that generated an error like the following
when JSON data was read from a file.
ERROR: JSON: {'error': {'code': 400, 'message': 'Invalid enum value: {prefix}{value} for enum type: chrome.policy.api.v1.devicepolicy.AllowNewUsersEnum', 'status': 'INVALID_ARGUMENT'}}
Fixed bug in gam create chromepolicyimage that caused a trap.
See Update History

- 7.04.02
Improved output formatting for the following commands:
gam info peoplecontact
gam show peoplecontacts
gam info peopleprofile
gam show peopleprofile
gam <UserTypeEntity> info contacts
gam <UserTypeEntity> show contacts
gam <UserTypeEntity> show peopleprofile