-
Notifications
You must be signed in to change notification settings - Fork 473
UnmanagedUsersExamples
- Printing User Invitations
- Checking If An Address Is Invitable
- Sending User Invitations
- Cancelling User Invitations
- Evicting Unmanaged Users
gam print userinvitations [state accepted|declined|invited|not_yet_sent] [todrive]
prints the list of known unmanaged users which can be invited to become full Google Workspace users. This is the same list that appears in the admin console's unmanaged users tool. Note that it may take 48-72 hours before an account shows in this list. The optional argument state filters the results to only show accounts in the given state. The optional argument todrive creates a Google Spreadsheet of the results rather than outputting CSV data.
This example prints existing user invitations.
gam print userinvitations
gam user <email>|users <emails>|csvfile:column <file> check isinvitable
Checks if the given email addresses are unmanaged accounts that can be invited to join Google Workspace. Only addresses that are invitable are output.
This example reads in a csvfile, looks at the email column and checks each address to see if it's invitable.
gam csvfile localusers.csv:email check isinvitable
gam send userinvitation <email>
Emails the given address requesting it join the Google Workspace domain. The email must be invitable or an error will be returned. Multiple invitations can be sent be re-running the command (try not to spam users though). You do not need to cancel an invite before sending another.
This example invites Ahmed's account to join Google Workspace.
gam send userinvitation [email protected]
This example invites all addresses in a not_yet_invited state.
gam print userinvitations state not_yet_invited | gam csv - gam send userinvitation ~name
gam cancel userinvitation <email>
Cancels the invitation for the given address so that the user can no longer accept it even if they have the email. No notice is sent to the address.
This example cancel's Ahmed's invitation.
gam cancel userinvitation [email protected]
In some cases, it's preferable to evict unmanaged users from your Google Workspace domain namespace rather than inviting them to join. The eviction process renames the consumer user to a @gtempaccount.com address and user will be asked to rename on next login. Eviction is a one way process and cannot later be invited to join Workspace so be sure the accounts should not be a part of your organization.
To evict the accounts, we'll simply create a Google Group with the same email address as the unmanaged user and then delete the group. This is sufficient to evict.
This example lists all unmanaged users and evicts them from your Google Workspace domain namespace.
gam print userinvitations > invitable.csv
gam csv invitable.csv gam create group ~email
gam csv invitable.csv gam delete group ~email
Need more help? Ask on the GAM Discussion Group
GAM Basics
GAM Tutorials
- Managing Users, Groups, Aliases, Domains, Mobile and Chrome Devices, and Resource Calendars
- Group Settings
- Data Transfers
- Print Users, Groups, Aliases, Mobile and Chrome OS devices, OUs, Licenses and Reports
- Managing Custom User Schemas
- User Email Settings
- User Security Settings
- Managing Classroom
- Managing Devices
- Chrome Policy Settings
- Chrome Browser Management
- Calendar Settings
- Unmanaged Users and Invitations
- Google Drive Management
- Inbound SSO Settings
- Managing Admins
- Domain Verification
- Printers
- Managing Product Licenses
- Context Aware Access levels
- Managing Organizations
- OAuth Authentication Related Commands
- Vault / Takeout Commands
- Bulk Operations
GAM Command Reference
Resources
- Questions? Visit the GAM Discussion Forum
- How to run GAM on Chromebooks / Chrome OS and Android devices.
- Setting up GAM on Google Cloud Platform (GCP)
- Running GAM on Google Compute Engine (GCE) VMs Securly
- Using GAM with a Delegated Admin Service Account (DASA)
- Use a YubiKey for Service Account Authentication
- Verify a GAM Install is Official and Legimate