Softpedia >Windows >Internet >Other Internet Related >Google Apps Manager >  Changelog

Google Apps Manager Changelog

What's new in Google Apps Manager 6.58

Apr 26, 2023
  • Workaround #1625 where Google is not handling max page size for print licenses correctly.
  • Other minor fixes and improvements.

New in Google Apps Manager 6.57 (Apr 17, 2023)

  • "certain Enterprise SKUs" can assign a delegated admin role to a group. gam create admin [email protected] _HELP_DESK_ADMIN_ROLE customer
  • Fix Linux -legacy builds were missing.
  • Gam version extended now includes version information for dependency Python libraries.

New in Google Apps Manager 6.56 (Apr 11, 2023)

  • Improved support for running GAM on Google Compute Engine and other Workload Identity Federation setups.
  • GAM now requires Python 3.8 or newer, 3.7 is deprecated.
  • various fixes and improvements by Jay and Ross

New in Google Apps Manager 6.53 (Mar 31, 2023)

  • Commits:
  • afce21a: Add steps to trust GAM client_ID (Jay Lee)
  • 27461b0: Update var.py (Jay Lee)
  • bd0bb15: AppSheet licenses (Jay Lee)

New in Google Apps Manager 6.52 (Mar 17, 2023)

  • Ross: fix crash on gam create project

New in Google Apps Manager 6.51 (Mar 16, 2023)

  • Upgrade OpenSSL to 3.1.0 release and completely disable insecure TLS 1.0 / 1.1 protocols.
  • When rotating service account keys you can now set key expiration time with validity_hours <number>
  • Ross: Improvements to Yubikey Service Account setup and usage.
  • Ross: gam version checkrc command will exit with a non-zero status if there is a newer version of GAM available.

New in Google Apps Manager 6.50 (Feb 24, 2023)

  • Run GAM securely on Google Compute Engine (GCP) VMs with no service account private key that can be stolen.

New in Google Apps Manager 6.50 Pre-release (Feb 24, 2023)

  • Support for running GAM on Google Compute Engine without a private key.

New in Google Apps Manager 6.42 (Feb 13, 2023)

  • Allow/block content managers ability to share folders on shared drives: gam user <email> update shareddrive <id> sharingFoldersRequiresOrganizerPermission true|false. Note that Google is still rolling this feature out and the GAM command won't actually work until rollout is complete.

New in Google Apps Manager 6.41 (Feb 11, 2023)

  • Fixed:
  • Unable to create new projects.

New in Google Apps Manager 6.40 (Feb 9, 2023)

  • Gam copy vaultexport and gam copy storagebucket commands to copy Google Vault and Organization Takeout data to your own GCS bucket.
  • Ross: gam print chromeaues command to see when your Chrome OS devices will reach auto-update expiration and gam print chromeneedsattn command to see devices that require attention.
  • Upgrade to latest OpenSSL 3.0.8 and Python 3.11.2
  • The usual bug fixes and improvements by Ross and Jay.

New in Google Apps Manager 6.31 (Nov 22, 2022)

  • NEW: manage Inbound SSO profiles, credentials and assignments with GAM.
  • NEW: set the display name of a user. Display name overrides the first/last name displayed to other users. gam create|update user <email> displayname "Dave Smith".
  • The usual fixes by Ross and Jay.

New in Google Apps Manager 6.30 (Nov 2, 2022)

  • Upgrade to OpenSSL 3.0.7 to fix a high risk vulnerability (low chance of impact to GAM)
  • Upgrade to Python 3.11.0 which offers performance improvements
  • Fix: GAM was ignoring nobrowser.txt and trying to open a browser on WSL which caused a hang. #1516
  • gam info domain can now be run as a delegated admin assuming proper role.
  • The usual bug fixes and improvements by Ross and Jay

New in Google Apps Manager 6.25 (Sep 3, 2022)

  • GAM now uses a list of certificate authorities provided by Google rather than the old list provided by the httplib2 library. The file roots.pem is distributed with GAM binaries as a separate file.
  • The usual fixes and upgrades.

New in Google Apps Manager 6.24 (Aug 30, 2022)

  • fix: connections to oauth2.googleapis.com did not always honor GAM_CA_FILE env variable.
  • fix: problems properly configuring user invitations command authorizations.

New in Google Apps Manager 6.23 (Aug 23, 2022)

  • New gam checkconn command attempts connection to all Google and GitHub hosts GAM utilizes and reports any connectivity issues.
  • Ross: workaround Google API bug with gam report users
  • other fixes and improvements by Ross and Jay

New in Google Apps Manager 6.22 (Jul 1, 2022)

  • Workaround Google bug that prevents large domains from printing devices
  • Allow super admins to delete any shared drive (Ross)
  • Add address fields to buildings (Ross)
  • Various other fixes and improvements by Ross and Jay

New in Google Apps Manager 6.21 (Apr 24, 2022)

  • Ability to deleted shared drives even if there are files/folders still on it. gam user <email> delete shareddrive <id> nuke_from_orbit
  • Ross: ability to mark dynamic groups as security groups.

New in Google Apps Manager 6.20 (Apr 11, 2022)

  • ALPHA: Move Shared Drives into OrgUnits. Note that the OrgUnit of a Shared Drive does not currently show in the admin console. Please do your own testing to fully understand the behavior of this feature before moving production shared drives.
  • Create and manage Context Aware Access (CAA) access levels.
  • Other minor fixes and improvements by Ross and Jay.

New in Google Apps Manager 6.18 (Mar 30, 2022)

  • Upgrade Python and OpenSSL in GAM binaries for one security fix (minimal chance of impacting GAM)
  • Ross: Fix for Vault counts

New in Google Apps Manager 6.17 (Mar 8, 2022)

  • True support for MacOS universal2 builds. GAM now runs natively on Intel and Apple M1 Silicon Macs.
  • Direct new users to accept the universal terms of service (ToS) for Cloud Console to avoid per-API ToS. #1489

New in Google Apps Manager 6.16 (Feb 27, 2022)

  • This release makes GAM compatible with upcoming changes to Google's authentication process. If you are running GAM on a separate machine from your browser such as Google Cloud Shell or a headless Linux server, then at the end of the authentication process your browser may display an error page. Don't Panic just copy the URL of the error page and paste that into GAM instead of the authentication code.
  • Added ability to remove account lock when wiping a device. Try gam wipe device <id> remove_reset_lock.
  • Ross: add verifytarget argument to update alias command.
  • The usual bug fixes and enhancements by Ross and Jay

New in Google Apps Manager 6.15 (Feb 4, 2022)

  • Conditions for delegated admins allow you to create admins who only have access to non-security groups. To create a delegated admin that can only manage non-security groups try: gam create admin [email protected] _GROUPS_EDITOR_ROLE customer condition nonsecuritygroups

New in Google Apps Manager 6.14 (Feb 2, 2022)

  • New gam user <email> show vaultholds command to find holds that apply to a given user and will block user delete.
  • Hide shared drives for a user with gam user <email> update teamdrive hidden true
  • New GAM build process using the latest Python 3.10.2 and OpenSSL 3.0.1 on all platforms.
  • The usual bug fixes and improvements by @taers232c @janosh and @jay0lee

New in Google Apps Manager 6.13 (Jan 12, 2022)

  • Fix GAM on MacOS M1 (Apple Silicon) devices #1465
  • Python 3.6 is end of life, require Python 3.7+
  • @janosh Syntax updates for Python 3.7+
  • Require TLS 1.3 by default. If for some reason you need to allow TLS 1.2, you can set the environment variable GAM_TLS_MIN_VERSION=TLSv1_2
  • The usual bug fixes and improvements by @taers232c and @jay0lee

New in Google Apps Manager 6.12 (Dec 29, 2021)

  • Set user primary language gam create/update user language fr
  • Chrome device telemetry API offers detailed information about Chrome OS devices. gam print crostelemetry
  • ARM and ARM64 binaries reintroduced.
  • Fixes and improvements by Ross and Jay

New in Google Apps Manager 6.11 (Nov 22, 2021)

  • Fix: service accounts failing to work for several hours if you are in a timezone ahead of UTC #1453
  • Upgrade to OpenSSL 3.0.0 for Linux build only
  • Ross: row filtering fixes
  • other fixes and improvements by Ross and Jay

New in Google Apps Manager 6.10 (Oct 26, 2021)

  • Fix google-auth issue resulting in "token used to early" errors (Ross/Jay)
  • Fix CSV escapechar errors introduced with move to Python 3.10.0
  • Various other fixes and improvement

New in Google Apps Manager 6.09 (Oct 20, 2021)

  • Fix spurious errors during project creation and API enablment (Ross)
  • other minor fixes and improvements by Ross and Jay

New in Google Apps Manager 6.08 (Oct 6, 2021)

  • Support for newly announced group member restrictions. You can update groups to restrict membership to only include users, groups or service accounts as well as internal users and groups.
  • Various other fixes and improvements from Ross and Jay.

New in Google Apps Manager 6.07 (Jul 29, 2021)

  • Use a YubiKey to protect your service account private key
  • Ability to set security update on Drive files gam user update drivefile id securityupdate on
  • Ability to report on security update status of Drive files. gam user linksharemetadata resourcekey
  • The usual fixes and improvements by Ross and Jay

New in Google Apps Manager 6.06 (Jun 18, 2021)

  • Attempt to solve false positive malware vendor reports by recompiling PyInstaller bootloader #1388

New in Google Apps Manager 6.05 (Jun 11, 2021)

  • minor fixes and improvements from Ross and Jay

New in Google Apps Manager 6.04 (May 26, 2021)

  • Fix issues that caused the release binaries for 6.03 to have missing files or folders.

New in Google Apps Manager 6.03 (May 26, 2021)

  • GAM can now send Google Chat messages to users/rooms as a Chat Bot.
  • The usual fixes and improvements by Ross and Jay

New in Google Apps Manager 6.02 (May 4, 2021)

  • Gam info user <email> grouptree and gam info cigroup <email> membertree arguments cause GAM to print out the group inheritance tree for members and groups. Note" grouptree requires an Enterprise type Workspace license.
  • Convertalias argument to email delegation commands converts delegate alias address to primary address to ensure delegation will succeed if alias address is specified.
  • Improved output of Gmail labels print and Shared Drives print commands with more fields.
  • Ross: fix to allow setting certain Chrome policies like users.SessionLength. #1374
  • Various other fixes and improvements by Ross and Jay.

New in Google Apps Manager 6.01 (Apr 10, 2021)

  • Ross: add support for new Chrome reporting APIs. Try a command like gam print chromeapps to see extensions installed by your users or gam print chromehistory releases platform win64 channel stable to see a history of Chrome browser stable releases for Windows.
  • Ross: add a verifynotinvitable argument to gam create|update user|group|alias commands. The command avoids creating a Google Workspace user, group or alias if doing so will evict an invitable user.
  • Switch user invitation API calls to use service account domain-wide delegation to avoid invalid_scope errors authorizing GAM. #1351
  • Support for the new Workspace Frontline SKU gam user <email> add license workspacefrontline
  • The usual bug fixes and improvements by Ross and Jay
  • The usual oops, gotchas and fresh bugs by Ross and Jay

New in Google Apps Manager 6.00 (Mar 26, 2021)

  • Support for Chrome Policy API. GAM can now manage over 200 Chrome policies for your organization.
  • Support for the User Invitation API. GAM can now list unmanaged users, invite them to join your domain or evict them as needed.
  • Support for the Chrome Printer API. GAM can now manage your CUPS printers for Chrome OS devices.
  • BETA: generate and store service account private keys on Yubikey devices so they cannot be stolen without physical access. (more details to follow)
  • The usual fixes, improvements and fresh bugs by Ross and Jay

New in Google Apps Manager 5.33 (Feb 4, 2021)

  • fix gam user commands when full user email address is not specified. Thanks to Ross for catching this early.

New in Google Apps Manager 5.32 (Feb 3, 2021)

  • Ross: Add GAM_CSV_ROW_DROP_FILTER (#1304)
  • Fix contact delegation
  • various other fixes and improvements by Ross and Jay

New in Google Apps Manager 5.31 (Jan 4, 2021)

  • Delegate a user's Google Contacts independent of their Gmail mailbox.
  • BETA: Native support for Apple Silicon M1 devices. You need to manually download and install the gam-5.31-macos-universal2-MacOS11.0.1 file. Testers wanted on both new Apple devices and Intel devices running MacOS 10.13-10.15. Please provide feedback on the discussion group.
  • Fixes and improvments by Ross and Jay

New in Google Apps Manager 5.30 (Dec 8, 2020)

  • Manage Chrome browsers that are cloud enrolled. You can print information about enrolled browsers including versions, policies, profiles and extensions, move browsers between OrgUnits and delete browsers.
  • Print count of messages users have under Google Vault retention using the new Counts API. This is useful for determining which Archived, Suspended or VFE uses no longer have any data under retention and can be purged to free licenses.
  • The usual fixes and improvements by Ross and Jay.

New in Google Apps Manager 5.24 (Oct 15, 2020)

  • Send remote commands to Chrome OS devices to wipe users or powerwash. gam sendcommand cros <id> command wipe_users doit
  • Support for new Google Workspace licenses
  • The usual fixes and improvements by Ross and Jay

New in Google Apps Manager 5.23 (Oct 9, 2020)

  • G Suite >> Workspace branding updates by @max-mathieu thanks Max!
  • Support for group membership expiration gam update cigroup <group> add member expires "2020-11-01T00:00:00Z" user [email protected]
  • Support for Drive shortcuts gam user <user> create drivefile drivefilename "My shortcut" shortcut <target file id>
  • Support for Drive file content restrictions gam user <user> update drivefile id <file id> contentrestrictions readonly true reason "Final version. Do not edit"
  • The usual bug fixes and improvements by Ross and Jay

New in Google Apps Manager 5.22 (Oct 1, 2020)

  • Bugfixes and improvements by Ross and Jay

New in Google Apps Manager 5.21 (Sep 30, 2020)

  • New gam <users> sync license <license> command makes it simple to sync licenses based on Group, search query or local user list file. See the wiki docs for more information.
  • Improved service account domain-wide delegation authorization steps to align with new admin console page and simplify process.
  • Many fixes and improvements from Ross and Ja

New in Google Apps Manager 5.20 (Sep 18, 2020)

  • Support for the new Cloud Identity Devices API which works with mobile and desktop devices and allows managing company-owned inventory. See wiki docs. Note, please be careful with these commands, this is a first release.
  • Support for new Cloud Identity Groups APIs including ability to make security groups and non-admin group management.
  • BETA: support for delegated admin service accounts (DASA) which allow service accounts to be delegated admins. See here for instructions to test DASA with GAM.
  • Ross: Support for resetting users sign-in cookies and disabling 2sv for users.
  • @djeckle Fix seats argument reference for resoldsubscription. (#1233)
  • The usual minor fixes and improvements from Jay and Ross.

New in Google Apps Manager 5.11 (Jun 17, 2020)

  • New csvtest command. Simply replace gam csv with gam csvtest and GAM will output information about your CSV file headers and the first 10 commands from the CSV it will run. This helps in diagnosing CSV issues.
  • @eduardomazolini: add group_inde (include derived membership) when syncing groups and memberships.
  • drop support for Google CloudPrint commands since CloudPrint is deprecated and will be turned off at the end of year. If you still need to use CloudPrint commands, keep a copy of GAM 5.10 handy.
  • switch from servicemanagement API to the serviceusage API when enabling APIs for a GAM project.
  • The usual fixes and improvements from Ross and Jay.

New in Google Apps Manager 5.10 (May 15, 2020)

  • Fix: changes to the way Google Reports API sends data caused issues for gam report user|customer|usageparameters and gam info domain commands (Ross and Jay)
  • Improved support for the new G Suite Essentials edition.
  • @taers232c fix setting expiration time for Drive permissions and default disabling notifications on calendar event create.
  • Upgrade binary GAM installs to the latest Python 3.8.3 release.
  • Gam-shortn.appspot.com short URLs can now be disabled by creating a file called noshorturls.txt in the same folder as GAM.

New in Google Apps Manager 5.09 (May 12, 2020)

  • Fix issues with gam report users and gam report customer
  • @taers232c : Fix 404 issues during project creation

New in Google Apps Manager 5.08 (May 7, 2020)

  • @ejochman Python formatting fixes.
  • @taers232c fix project creation issue and handle various OAuth token issues.
  • fix some issues with PyInstaller builds.

New in Google Apps Manager 5.07 (Apr 27, 2020)

  • @ejochman more work to split GAM into separate files and follow the standard Python packaging format.
  • Gam use project will now set the consent screen if one has not already been set for a project.
  • Scopes can now be explicitly specified with gam oauth create
  • Remove some old build scripts and text files that are stale and no longer used.

New in Google Apps Manager 5.06 (Apr 21, 2020)

  • Fix issue with the latest google-api-python-client 1.8.1
  • Update OpenSSL packaged with GAM executables to 1.1.1g to fix a high severity issue (low risk to GAM though)
  • @taers232c improvements to gam report usage commands

New in Google Apps Manager 5.05 (Apr 15, 2020)

  • @taers232c add returnidonly argument to add drivefile command to make it easier to capture created file ID for additional operations like sharing the file with others.
  • @taers232c GAM_CSV_HEADER_DROP_FILTER environment variable works the opposite way of GAM_CSV_HEADER_FILTER removing only the listed headers from the CSV output.
  • various other fixes and improvements.

New in Google Apps Manager 5.04 (Apr 7, 2020)

  • New gam report usage command provides raw data of usage of G Suite services across a given date range. This data can easily be charted on a Google Sheet allowing you to see timelines and usage trends within your organization.
  • @ejochman improve credential refresh handling
  • handle invalid unicode characters in email body when sending/dropping emails.
  • @taers232c various fixes and improvements.

New in Google Apps Manager 5.03 (Mar 31, 2020)

  • @taers232c fixes for calendar events and crosactivity
  • upgrade to OpenSSL 1.1.1f
  • remove support for end-of-life MacOS 10.12 Sierra

New in Google Apps Manager 5.02 (Mar 27, 2020)

  • Fix issue with check serviceaccount

New in Google Apps Manager 4.99 (Feb 28, 2020)

  • Improvements to gam user <email> check serviceaccount command to check key age and provide color hinting of test results.
  • Ross: fix issue in 4.98 that broke gam report user and gam report customer commands.
  • various other fixes and improvements by Ross and Jay

New in Google Apps Manager 4.98 (Feb 15, 2020)

  • Improved setup process with less steps. Consent screen is now automatically configured. Admin console domain-wide delegation now pre-populates client_id and scopes fields. Thanks to @marywholey.
  • GAM now requires Python 3.6 or newer. 3.5 is no longer supported. This allows GAM to take advantage of modern Python language performance and readability improvements like f-strings. Thanks to @taers232c for converting many strings.
  • More work by @ejochman to break gam.py into smaller modules and add testing.
  • Various fixes and minor improvements.

New in Google Apps Manager 4.97 (Jan 2, 2020)

  • GAM now generates service account private keys (equivalent of password) locally and allows key rotation. Run gam update project to grant your service account key rotation rights. To rotate the key run gam rotate sakey. Note that this will revoke existing keys so if you've copied oauth2service.json to other machines you'll need to do so again after the rotation (or set them up with their own service account which is better practice). Google recommends rotating service account keys on a routine basis. GAM commands continue to function as normal after the rotation. To see a list of keys for your service account run gam show sakeys. See the wiki for full details.
  • ejochman: start the challenging process of breaking GAM into separate Python files to make it easier to maintain. Thanks Erik!
  • Ross/Jay: various fixes and cleanup.
  • Improved support for UTF-8 input and output. This requires the binary version of GAM or running GAM with Python 3.7 or newer.
  • Ross: allowed clearing recovery phone.
  • Upgrade GAM binaries to use latest Python 3.8.1.

New in Google Apps Manager 4.96 (Oct 22, 2019)

  • 64-bit ARM GAM binaries for Raspberry Pi and Chrome OS devices (among other ARM Linux devices).
  • GAM binaries now use Python 3.8
  • Ross: simplified versions of GAM_CSV_ROW_FILTER #1029
  • Ross: detect 32-bit GAM / Python running on 64-bit Windows (you really should be downloading the 64-bit version of GAM or Python).
  • various other fixes and improvements by Jay and Ross

New in Google Apps Manager 4.95 (Oct 2, 2019)

  • Ross: add support for copyrequireswriterpermission on Drive file upload / update
  • Ross: add includederivedmembership for gam print group-members
  • Fix sporadic corruption of oauth2.txt that was causing GAM to fail to run by locking the file.
  • Improved OS reporting in gam version extended
  • Various other fixes and improvements by Ross and Jay

New in Google Apps Manager 4.94 (Sep 2, 2019)

  • Improvements to check serviceaccount to further indicate where issues are including computer clock issues.
  • Ross: allow clearing recoveryphone #999
  • Other minor improvements and fixes

New in Google Apps Manager 4.93 (Aug 16, 2019)

  • Support for user recovery email and phone number on create user, update user and info user / print users commands. gam update user [email protected] recoveryemail [email protected] recoveryphone 1-251-493-8749. FYI recoveryphone must include country code.
  • Dynamically set maxResults when printing users, groups, mobile, cros etc. Should avoid issues that occurred last week when Google made a change to the maxResults behavior while still offering max performance of these commands.

New in Google Apps Manager 4.92 (Aug 13, 2019)

  • Ross: fix one other lingering issue with group settings
  • Jay: Create short URLs for GAM authentication using gam-shortn.appspot.com domain simplifying copy/paste.
  • Jay: make copy/paste authentication flow the default since the webserver/browser flow has proven problematic and doesn't work with Compute Engine VMs, etc. If you prefer the old web server authentication flow, create a file called oauthbrowser.txt in the GAM folder to use it.
  • Jay: PyInstaller changes that will hopefully reduce chances of gam.exe Windows being flagged as a virus (false positive).

New in Google Apps Manager 4.91 (Aug 12, 2019)

  • Ross: fix gam print cros commands that started throwing errors after a Google server change.
  • Ross: fix group settings commands that started throwing errors after a Google server change.
  • Jay: on vacation, here's what I was doing with my father and son when everything broke down (thanks for the fixes Ross)

New in Google Apps Manager 4.90 (Aug 1, 2019)

  • Enhancements to gam mobile update command to support updating any devices that match a query as well as only updating devices that are owned by certain users. For example, gam update mobile query:status:pending action approve match_users group [email protected] will approve any pending mobile devices if the user is in the mobile-approved-users group.
  • gam create project can now use a GCP folder as it's parent instead of the top-level organization.
  • Fix: GAM_CA_FILE allows specifying a custom certificate authority file. This previously was not working.
  • Minor fixes and improvements by Ross and Jay

New in Google Apps Manager 4.88 (Jun 24, 2019)

  • Send emails as a user, drop or draft emails into a user mailbox
  • Ross: support "notregex" for GAM_CSV_ROW_FILTER syntax
  • Make GAM more reliable on WiFi and other flaky connections by retrying DNS requests
  • The usual fixes/improvements and spit-shining by Ross and Jay

New in Google Apps Manager 4.86 (Jun 8, 2019)

  • Replace deprecated oauth2client library with google-auth
  • Support for printing and moving Calendar events
  • Support for OAuth 2.0 PKCE to protect tokens during authentication.
  • Cleaner activity reports (token, drive, etc).
  • Ross/Jay - the usual rounds of fixes, cleanup, tweaks and optimizations.

New in Google Apps Manager 4.85 (May 17, 2019)

  • Improvements to accuracy of gam print cros aue_guess. Please still consider this data experimental and double check all dates against Google's Chrome Device AUE page.
  • Ross: improve performance of aue_guess by caching lookups.

New in Google Apps Manager 4.84 (May 16, 2019)

  • EXPERIMENTAL: guess_aue argument to gam print cros now attempts to include AUE date of device. AUE dates may be incorrect and should be visually confirmed against Google's help article. Please report wrong AUE dates to the mailing list or issue tracker. Include a bad model row output with the command gam print cros model guess_aue firmwareversion
  • Support for Archived User SKU
  • Usual bug fixes and improvements from Ross and Jay

New in Google Apps Manager 4.83 (May 11, 2019)

  • Ross/Jay: numerous fixes for Python 3.5 and 3.6 (Python 3.7 is still recommended version).
  • Ross: migrate to Shared Drive API calls
  • allow specifying resource calendars by id instead of email address. gam calendar id:nyc-conference-room-210 showacl
  • Various other fixes for Python 3 and otherwise

New in Google Apps Manager 4.82 (Apr 30, 2019)

  • Set and retrieve user display language for Gmail.

New in Google Apps Manager 4.81 (Apr 29, 2019)

  • GAM now uses and requires the latest Python 3.7. Python 2 will reach end of life next year.
  • GAM now defaults to requiring TLS 1.2 or newer connections and TLS 1.3 is used in most cases where Google's servers support it. GAM_TLS_MIN_VERSION (default value TLSv1.2) and GAM_TLS_MAX_VERSION (no default) environment variables allow control of TLS versions. Try running gam version extended to see info about your TLS connection to Google.
  • Jay/Ross: Support for local filtering of CSV output #895. The environment variables GAM_CSV_HEADER_FILTER and GAM_CSV_ROW_FILTER can be used to locally filter CSV output as desired removing rows and columns you don't wish to be passed on. Try running GAM_CSV_ROW_FILTER='{"lastLoginTime": "date<-1y"}' GAM_CSV_HEADER_FILTER=primaryEmail gam print users lastlogintime to get a CSV list of users who haven't logged in in the past year.
  • GAM no longer acknowledges the noverifyssl.txt file to disable TLS verification. Instead a new environment variable GAM_CA_FILE can be set to point to a local certificate authority's public CA file. This allows admins in environments that require TLS inspection to use GAM while remaining secure. The file should be PEM encoded public certs similar to the default CA file used by GAM.

New in Google Apps Manager 4.80 Pre-releaase (Apr 22, 2019)

  • Upgrade GAM to use Python 3. Python 3.5 - 3.7 is supported but 3.7 is used for compiled versions and strongly recommended.

New in Google Apps Manager 4.72 (Apr 19, 2019)

  • Fix issue creating Vault Holds for Hangouts Chat

New in Google Apps Manager 4.71 (Apr 16, 2019)

  • Fix mistake checking for missing arguments.

New in Google Apps Manager 4.70 (Apr 13, 2019)

  • Ross: Add smtpMsa options to create sendas; update license commands (#814)
  • Ross/Jay - remove deprecated Google+ and Notification APIs
  • bbadger86: Added ability to transfer data for multiple applications (#826)
  • Ross: Allow setting of Team Drive restrictions (#834)
  • Jay: Support for Alert Center API
  • ejochman: Refactor scope selection menu (#882)
  • Ross/ejochman/Jay - more cleanup, bug fixes and improvements

New in Google Apps Manager 4.65 (Oct 30, 2018)

  • Manage email delivery settings for group members
  • Add operatingSystemType to user posix config (Roman)
  • Handle missing language setting (jalmeroth)
  • handle mixed case aliases (Ross)
  • contentmanager and fileorganizer roles in Team Drive (Ross)
  • various other fixes and optimizations (Jay and Ross)
  • MacOS Sierra 10.12 or newer now required. El Capitan users, time to upgrade!

New in Google Apps Manager 4.61 (Aug 29, 2018)

  • New Gmail delegation API - delegation commands remain same.
  • Remove "admin" command from user create/update to avoid accidental super admins. Still possible to give super admin rights via gam create admin command. (Ross)
  • Vault export fixes by Ross
  • minor fixes and improvements by Ross and Jay

New in Google Apps Manager 4.60 (Aug 4, 2018)

  • Google Vault Export API gam support
  • Ross - add textcolor and backgroundcolor options for Gmail labels
  • Ross - add owneremail option to print courses
  • GAM 4.50 had no bugs at all, nothing to fix.
  • Just kidding, lots of bug fixes and code cleanup. Thanks Ross.

New in Google Apps Manager 4.40 (Dec 23, 2017)

  • Team Drive "asadmin" to give admins special access for Drive commands.
  • Manage Buildings, Features and Resource Calendars for structured resource booking.
  • (Ross) increase cell count for "todrive" to 2M.
  • (Ross) improved course id handling.
  • Download log files for kiosk Chrome devices.
  • TPM info and vulnerability status for Chrome devices.
  • New Google library for service account auth.
  • (Ross) numerous cleanups and bug fixes

New in Google Apps Manager 4.32 (Oct 6, 2017)

  • Fixes and improvements by Ross
  • gam print courses now supports limiting results based on course state
  • handle issues adding members to a group who were in a pending status before
  • Data transfer commands now support transferring user Calendar events.

New in Google Apps Manager 4.31 (Sep 27, 2017)

  • Update course owners in Classroom
  • support for time deltas like -4h for some commands
  • Set location, ssh keys and posix accounts details on user create/update
  • support batch move of Chrome OS devices for better performance
  • Huge amount of cleanup / performance improvements

New in Google Apps Manager 4.30 (Aug 14, 2017)

  • Google Vault Matters and Holds API support
  • Ross - "gam update group" now uses batch for better performance
  • "gam update project" enables new APIs for your project
  • Include root level OrgUnit in OrgUnit commands
  • Bulk move Chrome devices between OrgUnits
  • Usual fixes / cleanups / improvements by Ross and Jay

New in Google Apps Manager 4.23 (Jun 26, 2017)

  • Filter Chrome devices by OU with "gam print cros limit_to_ou "/my/ou"
  • oauth2client update to 4.1
  • Various other fixes and improvements by Ross and Jay

New in Google Apps Manager 4.22 (May 23, 2017)

  • Validate client id and secret from user input (reduces user errors on create project)
  • Ross - optimize "gam print printjobs"
  • Ross - countsonly option for gam print courses
  • "gam info domain" now shows G Suite basic/business/enterprise license counts
  • Ross - calendar commands now work for user secondary calendars
  • Ross - Group create/update fixes for description newlines and other fixes

New in Google Apps Manager 4.21 (Apr 5, 2017)

  • Drive v3 fixes/updates by Ross
  • gam print crosactivity command outputs active users and times
  • SMime and calendar ACL fixes by Ross
  • standardized cros info/print functionality by Ross

New in Google Apps Manager 4.2 (Mar 30, 2017)

  • Create, Update, Delete and List Team Drives
  • Most existing GAM Drive commands should work against Team Drives and files on Team Drives now.
  • Start moving to Drive API v3
  • Disable GAM cache by default to prevent errors (Ross)
  • Use service accounts for all Calendar, Drive and Gmail operations to reduce scopes
  • Fix "Unknown" errors due to a scope issue (may require "gam oauth revoke" and re-authentication)
  • "gam info domain" shows basic user / license sums again
  • "gam report customer" now shows more browser usage stats
  • Fix project creation ToS error (Ross)

New in Google Apps Manager 4.12 (Feb 22, 2017)

  • Realtime 2SV user status in gam info user and gam print users. Thanks hajdbo!
  • Reseller API support. Create and manage customers and subscriptions.
  • Delete or modify Gmail threads. Improved message delete/modify performance.
  • Support for the new G Suite Enterprise license
  • Manage S/MIME certificates for G Suite Enterprise users
  • Many fixes and improvements by Ross.

New in Google Apps Manager 4.11 (Jan 25, 2017)

  • Allow newlines in calendar event descriptions (Ross)
  • All HTTP requests should now honor SSL verify setting, debug, etc

New in Google Apps Manager 4.1 (Jan 25, 2017)

  • Fix "gam create project"
  • project create cleanups by Ross
  • Various fixes by Ross
  • Improved batch command performance. Some commands will see 2-3x speedups.
  • Faster "gam info user" commands via batch license retrieval

New in Google Apps Manager 4.02 Pre-release (Nov 6, 2016)

  • Further fixes to new installation and configuration processes
  • gam calendar deleteevent deletes events by ID or query

New in Google Apps Manager 4.0 Pre-release (Nov 2, 2016)

  • "gam create project" command simplifies creation of client_secrets.json and oauth2service.json project files.

New in Google Apps Manager 3.8 (Oct 28, 2016)

  • Old GData APIs removed from GAM. Admin Settings and Email Audit commands are no longer included, keep a copy of GAM 3.72 around if you use them. All Email Settings commands now use new Gmail API.
  • Updated httplib2, google-api-client, uritemplate libraries
  • New update check code utilizes GitHub API to check for latest releases. "gam version check" forces update check.
  • Many fixes and improvements

New in Google Apps Manager 3.72 (Oct 13, 2016)

  • Chrome OS device actions, disable, re-enable and deprovision devices
  • (beta) MSI Windows build
  • Numerous fixes and updates by Ross

New in Google Apps Manager 3.71 (Aug 26, 2016)

  • Fix update first / last name.
  • upgrade GAM versions of oauth2client, googleapiclient, RSA and six
  • Improved UTF-8 support for CSV commands (Ross)
  • Authorization flow improvements by Ross
  • Other minor cleanups and fixes

New in Google Apps Manager 3.7 (Aug 18, 2016)

  • Huge amount of improvements and fixes
  • Classroom Guardians API support. Invite, print and delete parental guardians for Classroom students. See Google's help article and blog post for more information on guardians.

New in Google Apps Manager 3.65 (Mar 17, 2016)

  • fix vacation issues
  • fix Windows path issues
  • Add message undelete and modify commands
  • Improve message delete performance
  • Upgrade to new versions of oauth2client and googleapiclient

New in Google Apps Manager 3.63 (Feb 6, 2016)

  • "gam update group ... sync users" now does batch add/remove of users for faster sync
  • "gam file" can now use - to read list of users from stdin
  • "gam csv file:column" can read CSV file of users and specify column to be used.

New in Google Apps Manager 3.62 (Feb 6, 2016)

  • New Admin Roles API allows you to create, delete and print delegated and super admins
  • New Resource Calendar API replaces old GData API and allows you to create, update, get info, delete and print all resource calendars.
  • Major cleanups and design updates from Ross Scruggs @taers232c mean GAM is more reliable and stable for your needs.

New in Google Apps Manager 3.61 (Feb 6, 2016)

  • Various fixes by Ross Scroggs for Domain API and Data Transfer commands
  • Remove duplicate DoCreateDomain which broke "gam create domain"

New in Google Apps Manager 3.6 (Feb 6, 2016)

  • Change your primary domain
  • Transfer Google Drive and Google+ data between users
  • Domains API support includes ability to add, delete, update and print domains

New in Google Apps Manager 3.51 (Feb 6, 2016)

  • delete or trash messages in mailboxes based on a Gmail search
  • create and delete course aliases with Classroom API
  • HUGE number of bug fixes, large and small by Ross Scroggs. Many thanks Ross
  • Handle UTF-8 in admin notifications
  • pull calendar reports
  • fix to version reporting on update check
  • docs report now maps to drive
  • fix to allow reporting of print jobs owned by one user
  • allow UTF-8 responses in change calendar attendess command
  • fix #user# substitution in user photo uploads
  • allow UTF-8 responses in show calendars command
  • actually pass fileId argument to API call in Drive activity command
  • fix syntax error in Drive activity command
  • allow UTF-8 responses in print drive folder command
  • allow UTF-8 in delete empty folders command
  • allow UTF-8 in Gmail labels show command
  • don't error out when printing schemas and there are no schemas
  • unused variable in create group command
  • missing variable in update group command
  • wrong variable used in update group command
  • indent needed on user info command
  • info on / fails
  • undefined variable in domain info command
  • undelete user command couldn't actually place user in an OU
  • print groups add argument to allow custom delimiter
  • print group-members code simplification
  • print mobile and print cros infiite loops fixed
  • handle spacing in gam users command properly
  • optimization in main handling of CSV
  • fix to error message on CSV headers

New in Google Apps Manager 3.5 (Feb 6, 2016)

  • Support for the new Google Classroom API:
  • create, update, info and delete courses
  • add, remove and sync course teachers and students
  • print courses and course participants
  • Google CloudPrint API Support:
  • update, info, delete and report printers
  • share, unshare and get ACLs for printers
  • submit, cancel, report and delete print jobs
  • Bug fixes and improvements to GAM batch commands

New in Google Apps Manager 3.45 (May 2, 2015)

  • add six.py to solve compatibility issues on OS X and Linux
  • be conservative with password hashing to prevent timeouts

New in Google Apps Manager 3.44 (May 2, 2015)

  • "gam update cros assetid " allows updating of Chrome OS device Asset ID field. Thanks Erik Pitti!
  • Windows versions of GAM now use pyinstaller instead of py2exe.
  • upgraded versions of the googleapiclient and oauth2client libraries.
  • "gam print cros" should produce a cleaner CSV now.

New in Google Apps Manager 3.43 (May 2, 2015)

  • Fix crash when authenticating GAM related to Short URLs
  • minor fixes to Drive and Calendar commands
  • catch unauthorized service account errors and offer nice instructions.
  • execute bit for gam.py

New in Google Apps Manager 3.42 (Feb 27, 2015)

  • "gam show driveactivity" displays Drive activity for user
  • "gam report tokens" displays user OAuth activity report
  • "gam mobile action accountwipe" wipes account only on Android devices
  • "gam update labels" removes Inbox/ prefix from label names
  • upgrades to oauth2client and googleapiclient libraries which GAM depends on
  • "gam show gmailprofile" shows Gmail mailbox details
  • "gam license " commands to perform actions only on users with a given license
  • bug fixes, lots of bug fixes

New in Google Apps Manager 3.41 (Feb 27, 2015)

  • fix "gam audit export download" failures due to Google no longer declaring download size
  • 2nd attempt to fix "gam info domain" errors on getting Customer ID
  • license commands should now soft fail (keeps going for other users)

New in Google Apps Manager 3.4 (Feb 27, 2015)

  • Support for creating and setting custom user schemas http://goo.gl/M9rQrI
  • End user view of print users and user info commands
  • fix updating name/description for groups
  • fix groups sync commands
  • gam print groups members no longer fails on zero member groups
  • make sure downloaded Drive file names are safe for OS filenames
  • gam info domain should no longer crash on getting customer ID
  • other minor bug fixes

New in Google Apps Manager 3.32 (Feb 27, 2015)

  • fix service account json files downloaded from new cloud console don't work with GAM
  • use the new Gmail API for label command. Offers ability to rename labels and show/hide labels from the label and message list.
  • copy Google drive files with commands like gam user update drivefile id copy
  • print only one SKU for licenses with commands like gam print licenses sku vault
  • short license names for Google Apps Message Security (gams), Google Apps Unlimtied (gau) and Google Vault Former Employee (vfe)

New in Google Apps Manager 3.31 (Feb 27, 2015)

  • New command "gam user delete aliases" clears all aliases for user.
  • "gam update user email vfe" will rename user to [email protected]
  • fix delete photo command
  • fix password update/create for Windows builds

New in Google Apps Manager 3.3 (Feb 27, 2015)

  • Major rewrites of "gam report" and "gam print users". Note that CSV headers have changed. Better performance and print users now supports "rich" fields like organization, phone, relations, etc.
  • "gam report drive" now works for Google Apps Unlimited domains.
  • "gam info user" now shows the user's licenses. Use "nolicenses" to prevent showing licenses.
  • fix "gam print licenses" fails in large domains by reducing page size from 1000 to 100
  • GAM now sends a sha-512 salted hashed password on user create and update for better security.
  • cleanup unused features of old GData library.
  • fix for Drive file downloading default format.
  • upgrade to httplib v0.9 which may help with httplib.BadStatus errors.

New in Google Apps Manager 3.02 (Oct 26, 2013)

  • Support for the newly announced Google Apps Admin SDK offering a richer feature set of management for your users, groups, aliases and other objects.
  • Simplified OAuth 2.0 authentication
  • Ability to manage Mobile and Chrome OS devices.
  • Ability to add managers to groups
  • Ability to manage group aliases
  • Increased performance thanks to new Google API formats, caching, compression and partial update features.

New in Google Apps Manager 2.5.3 (Sep 22, 2012)

  • Two new group settings, spam_moderation_level and include_in_global_address_list allow further customization of your Google Groups.
  • Error reporting for mailbox delegation has been further improved, GAM does a better job of pinpointing why a delegation failed.
  • Fixed updating and deleting domain and default users for calendar ACLs
  • proper error handling for adding and removing group members and owners
  • Fixed error on gam info domain caused by failure to retrieve outbound gateway settings.
  • An EXPERIMENTAL 64-bit build of GAM for Windows is now available. I do not expect it will be any bit faster for most GAM commands since most delay is due to network I/O. However, some GAM commands like "gam print users", when run against large domains (10,000+ users), use a large amount of memory and resources due to result size. In these scenarios, the x64 build MIGHT prove faster. If you try the x64 build, please report how it worked back to the mailing list. "It feels faster" is nice but hard numbers with details of what you did are better :-) Note that if you're using the Python source build and your Python is 64-bit, you're already using 64-bit GAM

New in Google Apps Manager 2.5.1 (Aug 31, 2012)

  • New gam calendar wipe command allows clearing all data off a user's primary calendar
  • create user and update user commands now support setting user's org.
  • gam whatis command allows looking up an email address to determine if it's a user, alias or group.
  • gam delete user no longer renames a user by default since undelete is now in CPanel. Added optional dorename parameter to force old renaming behavior.
  • Fix issue that broke gam delete resource command
  • GAM now offers to remember your client secret and key when entered the first time
  • various other bug fixes

New in Google Apps Manager 2.3 (Mar 27, 2012)

  • New user profile photo management commands can update, get and delete user profile photos
  • gam user XXXX delegate to now gracefully handles cross-domain mailbox delegations by using (or giving the delegate) an alias in the mailbox's domain
  • gam user XXXX show delegates now has optional argument "csv" to print existing delegations in CSV format
  • GAM can now properly rename and delete long usernames by ensuring that the renamed user is max 64 characters in length
  • gam print groups now has optional arguments nousermanagedgroups and onlyusermanagedgroups allowing user managed groups to be excluded from output or print user managed groups exclusively

New in Google Apps Manager 0.010b Beta (Dec 23, 2009)

  • "gam all users print" provides list of all users in domain.
  • Better error messages on account rename.