Skip to content

GAM Commands Reference

Common Google Apps Manager commands for {ORG_NAME} Workspace administration


User Management

Create User

gam create user john.doe@{DOMAIN} firstname John lastname Doe password TempPassword123!

Delete User

gam delete user john.doe@{DOMAIN}

Suspend User (Archive)

gam update user john.doe@{DOMAIN} suspended on

List All Users

gam print users

List Users with Specific Fields

gam print users fields email,firstName,lastName,orgunitpath

Update User

gam update user john.doe@{DOMAIN} firstname Jonathan

Change Password

gam update user john.doe@{DOMAIN} password NewPassword123!

Group Management

Create Group

gam create group teamname@{DOMAIN} name "Team Name" description "Team description"

Delete Group

gam delete group teamname@{DOMAIN}

Add Member to Group

gam update group teamname@{DOMAIN} add member john.doe@{DOMAIN}

Remove Member from Group

gam update group teamname@{DOMAIN} remove member john.doe@{DOMAIN}

List Group Members

gam print group-members groupemail teamname@{DOMAIN}

Update Group

gam update group teamname@{DOMAIN} name "New Team Name"

Organization Unit Management

Create Org Unit

gam create org "/Sales" name "Sales Department"

Move User to Org Unit

gam update user john.doe@{DOMAIN} orgunitpath "/Sales"

List Org Units

gam print orgunits

Shared Drive Management

Create Shared Drive

gam create shareddrive "Team Name" description "Team shared folder"

List Shared Drives

gam print shareddrives

Add Member to Shared Drive

gam update shareddrive "Drive Name" add member john.doe@{DOMAIN} role editor

Remove Member from Shared Drive

gam update shareddrive "Drive Name" remove member john.doe@{DOMAIN}

Security Policies

Enable 2FA

gam update org "/" 2fa on

Disable 2FA

gam update org "/" 2fa off

Get Organization Info

gam info org

Update Password Policy

gam update org "/" minpasswordlength 12 passwordexpirationdays 90

Reporting

Export Users to CSV

gam print users > users.csv

Export Groups to CSV

gam print groups > groups.csv

Get User Login Activity

gam print users fields email,lastLoginTime

Audit Group Changes

gam print group-members groupemail allstaff@{DOMAIN} > allstaff_members.csv

Delegation

Set Delegate (Allow One User to Manage Another)

gam user manager@{DOMAIN} delegate add john.doe@{DOMAIN}

Remove Delegate

gam user manager@{DOMAIN} delegate remove john.doe@{DOMAIN}

Advanced Queries

Find Users by Department

gam print users query 'orgUnitPath="/Sales"' fields email,lastName,firstName

Find Suspended Users

gam print users query 'suspended=true'

Find Users without 2FA

gam print users fields email | ForEach-Object { gam print users email $_ }

Batch Operations

Create Multiple Users from CSV

Create create_users.csv:

email,firstName,lastName
user1@{DOMAIN},John,Doe
user2@{DOMAIN},Jane,Smith

Then run:

Import-Csv create_users.csv | ForEach-Object {
    gam create user $_.email firstname $_.firstName lastname $_.lastName password TempPassword123!
}

Add Multiple Users to Group

Create add_members.csv:

email
john@{DOMAIN}
jane@{DOMAIN}

Then run:

Import-Csv add_members.csv | ForEach-Object {
    gam update group teamname@{DOMAIN} add member $_.email
}


Helpful Flags

Flag Purpose Example
fields Specify output columns fields email,firstName
query Filter results query 'suspended=false'
matchtype Match type matchtypeemail``
delimiter Output delimiter delimiter ","

Tips

Do: - Test commands with single users first - Use fields to limit output - Pipe to CSV for records: > output.csv - Review changes before batch operations

Don't: - Run bulk operations without testing - Delete users without archiving first - Forget to backup data before major changes - Run commands against production without testing


Help & Documentation

Get Help on Specific Command

gam help users
gam help groups
gam help shareddrives

Full GAM Documentation

https://github.com/GAM-team/GAM/wiki

Google Workspace API Reference

https://developers.google.com/workspace/api


Need help? Contact {ADMIN_EMAIL}