LVlvh·May 31, 2018
GAM is awesome for this. We've also had good luck with Google Apps Scripts. The advantage is that it makes it marginally easier to set up credentials: it does so behind the scenes so you never have creds with admin permissions hit disk. The disadvantage is you're now editing an old-ish version of JavaScript in a janky browser editor that saves to some weird bespoke JSON format. You can also use clasp (https://github.com/google/clasp) to edit these files from your favorite editor but now you own a Software Engineering Project.
Here's roughly what that looks like to get all the mentioned info out:
function getGroups(domain) {
var groups = [], pageToken, page;
do {
page = AdminDirectory.Groups.list({
domain: domain,
maxResults: 100,
pageToken: pageToken
});
Read the rest
if (page.groups && page.groups.length > 0) {
groups = groups.concat(page.groups);
}
pageToken = page.nextPageToken;
} while (pageToken);
return groups;
}
function getGroupPerms(groups) {
var perms = [];
for (var i = 0; i < groups.length; i++) {
perms.push(AdminGroupsSettings.Groups.get(groups[i].email));
}
return perms;
}
Disclaimer: I'm the author of the linked blog post.