googleapps-directory-tools

command line tools for managing google apps users and groups

Setup

1. Install google-api-python-client and simplejson. pip install google-api-python-client simplejson
2. Clone this project
3. Get Client ID from Google Developer Console
4. Create new project of select exists project
5. Click "Create new Client ID" in Credentials tab
6. Select "Installed application" and "Other" application type then click "Create Client ID"
7. Click "Download JSON" and save downloaded JSON file to private/client_secret.json
8. Go to "API" page in left side menu
9. Enable "Admin SDK", "Groups Settings API" and "Calendar API"
10. Run user.py --noauth_local_webserver list -d your.domain.name
11. Access displayed URL
12. Approve request
13. Copy and pasete the code to terminal
14. Ignore error message (like unknown command --noauth_local_webserver)
15. Ready. Try get user list. user.py list -d your.domain.name

Tested with Python 2.7.6 and 2.7.8 only.

Supported Operations

Orgunits

https://developers.google.com/admin-sdk/directory/v1/reference/orgunits

$ ./orgunit.py -h
usage: orgunit.py [-h] [--auth_host_name AUTH_HOST_NAME]
                  [--noauth_local_webserver]
                  [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
                  [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
                  {list,get,insert,patch,delete} ...

positional arguments:
  {list,get,insert,patch,delete}
                        sub command
    list                Retrieves a list of all organization units for an
                        account
    get                 Retrieves an organization unit
    insert              Adds an organization unit
    patch               Updates an organization unit
    delete              Removes an organization unit

Users

https://developers.google.com/admin-sdk/directory/v1/reference/users

$ ./user.py -h
usage: user.py [-h] [--auth_host_name AUTH_HOST_NAME]
               [--noauth_local_webserver]
               [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
               [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
               {list,get,insert,patch,delete,setadmin,unsetadmin,bulkinsert}
               ...

positional arguments:
  {list,get,insert,patch,delete,setadmin,unsetadmin,bulkinsert}
                        sub command
    list                Retrieves a paginated list of either deleted users or
                        all users in a domain
    get                 Retrieves a user
    insert              Creates a user
    patch               Updates a user
    delete              Deletes a user
    setadmin            Makes a user a super administrator
    unsetadmin          Makes a user a normal user
    bulkinsert          bulk insert

Users.aliases

https://developers.google.com/admin-sdk/directory/v1/reference/users/aliases

$ ./user-alias.py -h
usage: user-alias.py [-h] [--auth_host_name AUTH_HOST_NAME]
                     [--noauth_local_webserver]
                     [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
                     [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
                     {list,insert,delete} ...

positional arguments:
  {list,insert,delete}  sub command
    list                Lists all aliases for a user
    insert              Adds an alias
    delete              Removes an alias

Groups

https://developers.google.com/admin-sdk/directory/v1/reference/groups

$ ./group.py -h
usage: group.py [-h] [--auth_host_name AUTH_HOST_NAME]
                [--noauth_local_webserver]
                [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
                [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
                {list,get,insert,patch,delete,bulkinsert} ...

positional arguments:
  {list,get,insert,patch,delete,bulkinsert}
                        sub command
    list                Retrieves list of groups in a domain
    get                 Retrieves a group's properties
    insert              Creates a group
    patch               Updates a group's properties
    delete              Deletes a group
    bulkinsert          bulk insert

Groups.aliases

https://developers.google.com/admin-sdk/directory/v1/reference/groups/aliases

$ ./group-alias.py -h
usage: group-alias.py [-h] [--auth_host_name AUTH_HOST_NAME]
                      [--noauth_local_webserver]
                      [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
                      [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
                      {list,insert,delete} ...

positional arguments:
  {list,insert,delete}  sub command
    list                Lists all aliases for a group
    insert              Adds an alias for the group
    delete              Removes an alias

Members

https://developers.google.com/admin-sdk/directory/v1/reference/members

$ ./member.py -h
usage: member.py [-h] [--auth_host_name AUTH_HOST_NAME]
                 [--noauth_local_webserver]
                 [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
                 [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
                 {list,get,insert,patch,update,delete} ...

positional arguments:
  {list,get,insert,patch,update,delete}
                        sub command
    list                Retrieves list of all members in a group
    get                 Retrieves a group member's properties
    insert              Adds a user to the specified group
    patch               Updates the membership properties of a user in the
                        specified group
    update              Updates the membership of a user in the specified
                        group
    delete              Removes a member from a group

Groups for business

https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups

$ ./group-settings.py -h
usage: group-settings.py [-h] [--auth_host_name AUTH_HOST_NAME]
                         [--noauth_local_webserver]
                         [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
                         [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
                         {get,patch} ...

positional arguments:
  {get,patch}           sub command
    get                 Retrieves group properties
    patch               Updates group properties

Calendar ACL

https://developers.google.com/google-apps/calendar/v3/reference/acl

$ ./calendar-acl.py -h
usage: calendar-acl.py [-h] [--auth_host_name AUTH_HOST_NAME]
                       [--noauth_local_webserver]
                       [--auth_host_port [AUTH_HOST_PORT [AUTH_HOST_PORT ...]]]
                       [--logging_level {DEBUG,INFO,WARNING,ERROR,CRITICAL}]
                       {list,get,insert,patch,delete} ...

positional arguments:
  {list,get,insert,patch,delete}
                        sub command
    list                Returns the rules in the access control list for the
                        calendar
    get                 Returns an access control rule
    insert              Creates an access control rule
    patch               Updates an access control rule
    delete              Deletes an access control rule

Export and Sync Group Setting

• show GoogleApps group setting and member
• export group setting to local YAML file
• apply YAML config to GoogleApps
• create CSV file for sateraito office SSO console
• show difference between GoogleApps setting ans local YAML file

$ ./groupman.py -h
usage: groupman.py [-h] [--dir DIR] [--encoding {utf-8,sjis}]
                   {show,diff,export,apply,csv} targets [targets ...]

positional arguments:
  {show,diff,export,apply,csv}
                        operationo
  targets               domain or email list

optional arguments:
  -h, --help            show this help message and exit
  --dir DIR             local data directory
  --encoding {utf-8,sjis}
                        csv output encoding