GAM Commands Reference¶
Common Google Apps Manager commands for {ORG_NAME} Workspace administration
User Management¶
Create User¶
gam create user john.doe@{DOMAIN} firstname John lastname Doe password TempPassword123!
Delete User¶
gam delete user john.doe@{DOMAIN}
Suspend User (Archive)¶
gam update user john.doe@{DOMAIN} suspended on
List All Users¶
gam print users
List Users with Specific Fields¶
gam print users fields email,firstName,lastName,orgunitpath
Update User¶
gam update user john.doe@{DOMAIN} firstname Jonathan
Change Password¶
gam update user john.doe@{DOMAIN} password NewPassword123!
Group Management¶
Create Group¶
gam create group teamname@{DOMAIN} name "Team Name" description "Team description"
Delete Group¶
gam delete group teamname@{DOMAIN}
Add Member to Group¶
gam update group teamname@{DOMAIN} add member john.doe@{DOMAIN}
Remove Member from Group¶
gam update group teamname@{DOMAIN} remove member john.doe@{DOMAIN}
List Group Members¶
gam print group-members groupemail teamname@{DOMAIN}
Update Group¶
gam update group teamname@{DOMAIN} name "New Team Name"
Organization Unit Management¶
Create Org Unit¶
gam create org "/Sales" name "Sales Department"
Move User to Org Unit¶
gam update user john.doe@{DOMAIN} orgunitpath "/Sales"
List Org Units¶
gam print orgunits
Shared Drive Management¶
Create Shared Drive¶
gam create shareddrive "Team Name" description "Team shared folder"
List Shared Drives¶
gam print shareddrives
Add Member to Shared Drive¶
gam update shareddrive "Drive Name" add member john.doe@{DOMAIN} role editor
Remove Member from Shared Drive¶
gam update shareddrive "Drive Name" remove member john.doe@{DOMAIN}
Security Policies¶
Enable 2FA¶
gam update org "/" 2fa on
Disable 2FA¶
gam update org "/" 2fa off
Get Organization Info¶
gam info org
Update Password Policy¶
gam update org "/" minpasswordlength 12 passwordexpirationdays 90
Reporting¶
Export Users to CSV¶
gam print users > users.csv
Export Groups to CSV¶
gam print groups > groups.csv
Get User Login Activity¶
gam print users fields email,lastLoginTime
Audit Group Changes¶
gam print group-members groupemail allstaff@{DOMAIN} > allstaff_members.csv
Delegation¶
Set Delegate (Allow One User to Manage Another)¶
gam user manager@{DOMAIN} delegate add john.doe@{DOMAIN}
Remove Delegate¶
gam user manager@{DOMAIN} delegate remove john.doe@{DOMAIN}
Advanced Queries¶
Find Users by Department¶
gam print users query 'orgUnitPath="/Sales"' fields email,lastName,firstName
Find Suspended Users¶
gam print users query 'suspended=true'
Find Users without 2FA¶
gam print users fields email | ForEach-Object { gam print users email $_ }
Batch Operations¶
Create Multiple Users from CSV¶
Create create_users.csv:
email,firstName,lastName
user1@{DOMAIN},John,Doe
user2@{DOMAIN},Jane,Smith
Then run:
Import-Csv create_users.csv | ForEach-Object {
gam create user $_.email firstname $_.firstName lastname $_.lastName password TempPassword123!
}
Add Multiple Users to Group¶
Create add_members.csv:
email
john@{DOMAIN}
jane@{DOMAIN}
Then run:
Import-Csv add_members.csv | ForEach-Object {
gam update group teamname@{DOMAIN} add member $_.email
}
Helpful Flags¶
| Flag | Purpose | Example |
|---|---|---|
fields |
Specify output columns | fields email,firstName |
query |
Filter results | query 'suspended=false' |
matchtype |
Match type | matchtypeemail`` |
delimiter |
Output delimiter | delimiter "," |
Tips¶
✅ Do:
- Test commands with single users first
- Use fields to limit output
- Pipe to CSV for records: > output.csv
- Review changes before batch operations
❌ Don't: - Run bulk operations without testing - Delete users without archiving first - Forget to backup data before major changes - Run commands against production without testing
Help & Documentation¶
Get Help on Specific Command¶
gam help users
gam help groups
gam help shareddrives
Full GAM Documentation¶
https://github.com/GAM-team/GAM/wiki
Google Workspace API Reference¶
https://developers.google.com/workspace/api
Need help? Contact {ADMIN_EMAIL}