Summary
Account admin without the Admin console.
The onboarding and offboarding path is all here — create, read, suspend, unsuspend — and new accounts come out with a generated password the person is forced to change. It writes to your directory, so the OAuth token you hand it decides how far it reaches.
What it is
Five Admin Directory calls over a Google Workspace domain: list the users in it, create one, read one, suspend one, and lift the suspension.
What you get
- Every user in a domain you name
- A new user created with a randomly generated password they must change at first login
- The full record for one user, by email address
- A user account suspended
- A suspended account put back into service
Requirements
Docker, a Google Workspace admin account with the Admin Directory API turned on, and a base64-encoded OAuth2 token passed in as GOOGLE_TOKEN_JSON.