# Workspace Admin Gam

> Translates Google Workspace admin requests into GAM7 commands with a four-tier safety check. Use when the user mentions GAM, Workspace admin, users, groups, devices, Drive, calendars, or licenses, and has GAM7 installed against a domain they name.

- Skill: `kelvint-cli/workspace-admin-gam` (Agent Skill)
- Install (CLI): `npx skillmds@latest add kelvint-cli/workspace-admin-gam`
- Raw SKILL.md: https://api.skillmd.com/api/skills/kelvint-cli/workspace-admin-gam/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: kelvint-cli (https://skillmd.com/u/kelvint-cli)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/kelvint-cli/workspace-admin-gam

---


# Workspace admin (GAM7)

Public GAM7 only. Wiki: https://github.com/GAM-team/GAM/wiki

Do not assume a domain. Use the domain the user names. Examples below use `example.com`.

## Safety tiers

Classify every command before running it.

| Tier | Meaning | What to do |
| --- | --- | --- |
| READ | Lookups only | Run. |
| LOW_RISK | Reversible change | Show the exact command, wait for approval, then run. |
| HIGH_RISK | Hard to undo | Wait. Do not run until the user confirms the command text. |
| CATASTROPHIC | Delete, wipe, or domain-wide | Stop. Require the user to type a clear confirm phrase. |

Never skip a preview for LOW_RISK or above. Never add `--no-verify` or similar.

## READ examples

```bash
gam info user alex@example.com
gam print users query "orgUnitPath='/'" fields primaryemail,name,suspended
gam info group helpdesk@example.com
```

## LOW_RISK examples (preview first)

```bash
gam update group helpdesk@example.com add member user alex@example.com
gam update user alex@example.com suspended off
```

## HIGH_RISK / CATASTROPHIC

Password resets, offboarding, data transfers, and deletes. Draft the command, explain the blast radius, and wait.

## Rules

- If `gam version` fails, stop and ask the user to install GAM7.
- If the user did not name a user, group, or domain, ask. Do not guess.
- Quote GAM output. Do not paraphrase a lookup as if it were a change.