GAM is a command-line tool for administering Google Workspace and Cloud Identity. It translates command-line arguments into structured API calls, enabling administrators to manage users, groups, organizational units, and domain settings across a Google Workspace environment. The tool handles authentication through OAuth2 flows, service accounts, and workload identity federation, and supports multi-tenant configurations for managing multiple domains or cloud projects from a single installation.
GAM distinguishes itself through its batch processing and automation capabilities. It can process large datasets from CSV files, Google Sheets, or cloud storage, distributing independent API requests across parallel worker threads for efficient execution. The tool supports template-based string substitution for personalizing content like email signatures, regex-based resource filtering for targeting specific users or files, and external script extensibility for implementing custom workflows beyond the built-in command set. It also provides keyless authentication methods, allowing short-lived tokens from external identity providers to replace static service account keys.
The tool covers a broad range of administrative domains including user account lifecycle management, group and membership administration, Drive file and folder operations, calendar event management, Gmail configuration and message handling, Google Classroom course administration, Chrome browser and device policy management, and Google Chat space management. It also includes capabilities for managing Shared Drives, contacts, tasks, forms, Google Meet spaces, and Google Vault matters, holds, and exports. Reporting and auditing features allow extraction of activity logs, usage statistics, and security alerts across workspace services.
Documentation is available through a built-in help system that displays the tool version and the path to the local command syntax file, along with a link to the online wiki.