gws-admin_skill

Overview

This skill provides a command-line interface to the Google Workspace Admin SDK for managing users, groups, devices, org units, roles, and related resources. It exposes the directory_v1 methods so administrators can inspect, create, update, delete, and take actions across Workspace entities. The tool is designed for scripted automation, bulk operations, and interactive discovery of API parameters.

How this skill works

The skill maps admin resources and methods to gws admin <resource> <method> commands and uses schema inspection to show required parameters and types. Before executing a call you can browse available resources, inspect a method schema to build --params or --json payloads, then invoke the method to perform the operation. Typical operations include listing users or devices, creating groups, updating memberships, and triggering device or mobile actions.

When to use it

• Automate user lifecycle tasks (create, update, suspend, delete, undelete).
• Manage groups and group memberships, including nested membership checks.
• Inventory and act on devices (ChromeOS, mobile devices) and move devices between organizational units.
• Manage domains, domain aliases, organizational units, schemas, roles, and role assignments.
• Generate or invalidate two-step verification and verification codes for users.

Best practices

• Inspect a method with gws schema admin.<resource>.<method> to see required params and payload structure before calling.
• Use --json for complex or bulk payloads and validate payload fields against the schema output.
• Prefer patch/update semantics as documented to minimize unintended data clearing; use update when you need to clear repeated fields.
• Test destructive actions (delete, deprovision, wipe) in a sandbox or small pilot before mass operations.
• Paginate list calls and handle timeouts for long operations (some list methods time out after 60 minutes).

Example use cases

• Create and provision new users with a scripted input file and --json payloads.
• Bulk-move ChromeOS devices into a new org unit and annotate device assets.
• List all groups for a domain and add or remove members programmatically.
• Remotely wipe or deprovision a compromised mobile device and revoke user tokens.
• Patch customer, role, or schema configurations as part of a tenant reorganization.