gws-admin by googleworkspace/cli
npx skills add https://github.com/googleworkspace/cli --skill gws-admin前提条件： 阅读
../gws-shared/SKILL.md以了解身份验证、全局标志和安全规则。如果该文件缺失，请运行gws generate-skills来创建它。
gws admin <resource> <method> [flags]
delete — 删除由用户颁发的 ASP。get — 获取由用户颁发的 ASP 的信息。list — 列出由用户颁发的 ASP。stop — 停止通过此通道监视资源。广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者，精准高效
action — 请改用 BatchChangeChromeOsDeviceStatus。执行影响 Chrome OS 设备的操作。这包括取消配置、禁用和重新启用设备。警告： * 取消配置设备将停止设备策略同步并移除设备级打印机。设备取消配置后，必须擦除才能重新注册。get — 检索 Chrome OS 设备的属性。list — 检索账户内 Chrome OS 设备的分页列表。moveDevicesToOu — 将多个 Chrome OS 设备移动或插入到组织单元中。一次最多可以移动 50 台设备。patch — 更新设备的可更新属性，例如 annotatedUser、annotatedLocation、notes、orgUnitPath 或 annotatedAssetId。此方法支持 patch 语义。update — 更新设备的可更新属性，例如 annotatedUser、annotatedLocation、notes、orgUnitPath 或 annotatedAssetId。devices — 对 'devices' 资源的操作get — 检索客户信息。patch — 修补客户信息。update — 更新客户信息。chrome — 对 'chrome' 资源的操作delete — 删除客户的域别名。get — 检索客户的域别名。insert — 插入客户的域别名。list — 列出客户的域别名。delete — 删除客户的域。get — 检索客户的域。insert — 插入客户的域。list — 列出客户的域。delete — 删除群组。get — 检索群组的属性。insert — 创建群组。list — 检索给定域或给定 userKey 的用户的所有群组（分页）。patch — 更新群组的属性。此方法支持 patch 语义。update — 更新群组的属性。aliases — 对 'aliases' 资源的操作delete — 从群组中移除成员。get — 检索群组成员的属性。hasMember — 检查给定用户是否为群组成员。成员资格可以是直接或嵌套的，但如果是嵌套的，memberKey 和 groupKey 必须是同一域中的实体，否则将返回 Invalid input 错误。要检查包含群组域外实体的嵌套成员资格，请使用 Cloud Identity Groups API 中的 checkTransitiveMembership() 方法。insert — 将用户添加到指定群组。list — 检索群组中所有成员的分页列表。此方法在 60 分钟后超时。有关更多信息，请参阅故障排除错误代码。patch — 更新指定群组中用户的成员资格属性。此方法支持 patch 语义。update — 更新指定群组中用户的成员资格。action — 执行影响移动设备的操作。例如，远程擦除设备。delete — 移除移动设备。get — 检索移动设备的属性。list — 检索账户中所有用户拥有的移动设备的分页列表。要检索包含公司拥有设备的列表，请改用 Cloud Identity Devices API。此方法在 60 分钟后超时。有关更多信息，请参阅故障排除错误代码。delete — 移除组织单元。get — 检索组织单元。insert — 添加组织单元。list — 检索账户的所有组织单元列表。patch — 更新组织单元。此方法支持 patch 语义update — 更新组织单元。list — 检索客户所有权限的分页列表。buildings — 对 'buildings' 资源的操作calendars — 对 'calendars' 资源的操作features — 对 'features' 资源的操作delete — 删除角色分配。get — 检索角色分配。insert — 创建角色分配。list — 检索所有角色分配的分页列表。delete — 删除角色。get — 检索角色。insert — 创建角色。list — 检索域中所有角色的分页列表。patch — 修补角色。update — 更新角色。delete — 删除架构。get — 检索架构。insert — 创建架构。list — 检索客户的所有架构。patch — 修补架构。update — 更新架构。delete — 删除用户为应用程序颁发的所有访问令牌。get — 获取用户颁发的访问令牌的信息。list — 返回指定用户已颁发给第三方应用程序的令牌集合。turnOff — 为用户关闭两步验证。createGuest — 创建可以访问 Workspace 功能子集 的访客用户。此功能目前处于 Alpha 阶段。如果您有兴趣试用此功能，请联系支持人员。delete — 删除用户。get — 检索用户。insert — 创建用户。紧接在用户创建之后的变更调用有时可能会失败，因为由于我们后端的传播延迟，用户尚未完全创建。检查错误详细信息中是否有 "User creation is not complete" 消息，以确认是否是这种情况。在这种情况下，稍后重试调用可能会有所帮助。如果 resolveConflictAccount 设置为 true，则 202 响应代码表示存在冲突的非托管账户，并且已邀请其加入组织。list — 检索域中已删除用户或所有用户的分页列表。makeAdmin — 将用户设为超级管理员。patch — 使用 patch 语义更新用户。应改用 update 方法，因为它也支持 patch 语义且性能更好。如果您要将外部身份映射到 Google 身份，请使用 update 方法而不是 patch 方法。此方法无法清除包含重复对象（addresses、phones 等）的字段。请改用 update 方法。signOut — 将用户从所有 Web 和设备会话中注销，并重置其登录 Cookie。用户必须通过重新验证才能登录。undelete — 恢复已删除的用户。update — 更新用户。此方法支持 patch 语义，意味着您只需要包含要更新的字段。请求中未出现的字段将被保留，设置为 null 的字段将被清除。对于包含数组的重复字段，不能逐项修补数组中的单个项目；必须在请求体中提供所有项目的所需值。watch — 监视用户列表的更改。aliases — 对 'aliases' 资源的操作photos — 对 'photos' 资源的操作generate — 为用户生成新的备份验证码。invalidate — 使用户当前的备份验证码失效。list — 返回指定用户当前有效的备份验证码集合。在调用任何 API 方法之前，请先检查它：
# 浏览资源和方法
gws admin --help
# 检查方法的必需参数、类型和默认值
gws schema admin.<resource>.<method>
使用 gws schema 输出来构建您的 --params 和 --json 标志。
每周安装量
670
仓库
GitHub 星标
22.5K
首次出现
2026年3月4日
安全审计
安装于
opencode654
codex653
gemini-cli651
github-copilot651
cursor651
kimi-cli650
PREREQUISITE: Read
../gws-shared/SKILL.mdfor auth, global flags, and security rules. If missing, rungws generate-skillsto create it.
gws admin <resource> <method> [flags]
delete — Deletes an ASP issued by a user.get — Gets information about an ASP issued by a user.list — Lists the ASPs issued by a user.stop — Stops watching resources through this channel.action — Use BatchChangeChromeOsDeviceStatus instead. Takes an action that affects a Chrome OS Device. This includes deprovisioning, disabling, and re-enabling devices. Warning: * Deprovisioning a device will stop device policy syncing and remove device-level printers. After a device is deprovisioned, it must be wiped before it can be re-enrolled.get — Retrieves a Chrome OS device's properties.list — Retrieves a paginated list of Chrome OS devices within an account.moveDevicesToOu — Moves or inserts multiple Chrome OS devices to an organizational unit. You can move up to 50 devices at once.patch — Updates a device's updatable properties, such as annotatedUser, annotatedLocation, notes, , or . This method supports .devices — Operations on the 'devices' resourceget — Retrieves a customer.patch — Patches a customer.update — Updates a customer.chrome — Operations on the 'chrome' resourcedelete — Deletes a domain Alias of the customer.get — Retrieves a domain alias of the customer.insert — Inserts a domain alias of the customer.list — Lists the domain aliases of the customer.delete — Deletes a domain of the customer.get — Retrieves a domain of the customer.insert — Inserts a domain of the customer.list — Lists the domains of the customer.delete — Deletes a group.get — Retrieves a group's properties.insert — Creates a group.list — Retrieves all groups of a domain or of a user given a userKey (paginated).patch — Updates a group's properties. This method supports patch semantics.update — Updates a group's properties.aliases — Operations on the 'aliases' resourcedelete — Removes a member from a group.get — Retrieves a group member's properties.hasMember — Checks whether the given user is a member of the group. Membership can be direct or nested, but if nested, the memberKey and groupKey must be entities in the same domain or an Invalid input error is returned. To check for nested memberships that include entities outside of the group's domain, use the checkTransitiveMembership() method in the Cloud Identity Groups API.insert — Adds a user to the specified group.list — Retrieves a paginated list of all members in a group. This method times out after 60 minutes. For more information, see .action — Takes an action that affects a mobile device. For example, remotely wiping a device.delete — Removes a mobile device.get — Retrieves a mobile device's properties.list — Retrieves a paginated list of all user-owned mobile devices for an account. To retrieve a list that includes company-owned devices, use the Cloud Identity Devices API instead. This method times out after 60 minutes. For more information, see Troubleshoot error codes.delete — Removes an organizational unit.get — Retrieves an organizational unit.insert — Adds an organizational unit.list — Retrieves a list of all organizational units for an account.patch — Updates an organizational unit. This method supports patch semanticsupdate — Updates an organizational unit.list — Retrieves a paginated list of all privileges for a customer.buildings — Operations on the 'buildings' resourcecalendars — Operations on the 'calendars' resourcefeatures — Operations on the 'features' resourcedelete — Deletes a role assignment.get — Retrieves a role assignment.insert — Creates a role assignment.list — Retrieves a paginated list of all roleAssignments.delete — Deletes a role.get — Retrieves a role.insert — Creates a role.list — Retrieves a paginated list of all the roles in a domain.patch — Patches a role.update — Updates a role.delete — Deletes a schema.get — Retrieves a schema.insert — Creates a schema.list — Retrieves all schemas for a customer.patch — Patches a schema.update — Updates a schema.delete — Deletes all access tokens issued by a user for an application.get — Gets information about an access token issued by a user.list — Returns the set of tokens specified user has issued to 3rd party applications.turnOff — Turns off 2-Step Verification for user.createGuest — Create a guest user with access to a subset of Workspace capabilities. This feature is currently in Alpha. Please reach out to support if you are interested in trying this feature.delete — Deletes a user.get — Retrieves a user.insert — Creates a user. Mutate calls immediately following user creation might sometimes fail as the user isn't fully created due to propagation delay in our backends. Check the error details for the "User creation is not complete" message to see if this is the case. Retrying the calls after some time can help in this case. If resolveConflictAccount is set to true, a 202 response code means that a conflicting unmanaged account exists and was invited to join the organization.list — Retrieves a paginated list of either deleted users or all users in a domain.generate — Generates new backup verification codes for the user.invalidate — Invalidates the current backup verification codes for the user.list — Returns the current set of valid backup verification codes for the specified user.Before calling any API method, inspect it:
# Browse resources and methods
gws admin --help
# Inspect a method's required params, types, and defaults
gws schema admin.<resource>.<method>
Use gws schema output to build your --params and --json flags.
Weekly Installs
670
Repository
GitHub Stars
22.5K
First Seen
Mar 4, 2026
Security Audits
Gen Agent Trust HubPassSocketPassSnykPass
Installed on
opencode654
codex653
gemini-cli651
github-copilot651
cursor651
kimi-cli650
Supabase Postgres 最佳实践指南 - 8大类别性能优化规则与SQL示例
54,100 周安装
orgUnitPathannotatedAssetIdupdate — Updates a device's updatable properties, such as annotatedUser, annotatedLocation, notes, orgUnitPath, or annotatedAssetId.patch — Updates the membership properties of a user in the specified group. This method supports patch semantics.update — Updates the membership of a user in the specified group.makeAdmin — Makes a user a super administrator.patch — Updates a user using patch semantics. The update method should be used instead, because it also supports patch semantics and has better performance. If you're mapping an external identity to a Google identity, use the update method instead of the patch method. This method is unable to clear fields that contain repeated objects (addresses, phones, etc). Use the update method instead.signOut — Signs a user out of all web and device sessions and reset their sign-in cookies. User will have to sign in by authenticating again.undelete — Undeletes a deleted user.update — Updates a user. This method supports patch semantics, meaning that you only need to include the fields you wish to update. Fields that are not present in the request will be preserved, and fields set to null will be cleared. For repeating fields that contain arrays, individual items in the array can't be patched piecemeal; they must be supplied in the request body with the desired values for all items.watch — Watches for changes in users list.aliases — Operations on the 'aliases' resourcephotos — Operations on the 'photos' resource