GAM-Scripts3 VS SharedContactsApp

You can export to csv/Sheets storage info for users, not sure how granular. For Shared Drives, there is a script here https://github.com/taers232c/GAM-Scripts3 It is cleverly called GetTeamDriveStorageInfo.py

Complex and free: Still, use a Google Sheet to manage the contacts that are to be shared, but use GAMADV-XTD3 to add them as Domain Shared Contacts. GAM can even be scheduled to read from the Sheet, so changes are pushed to DSC regularly.

If you use gam, you might find some of these scripts usful in finding permissions on files: https://github.com/taers232c/GAM-Scripts3

If you're the admin I would use this companion script to GAMADV-XTD3.

You could run a scheduled GAM/GAMADV-XTD3 to remove all Anyone_with_link sharing.

In my collaboration with the developer of GAMADV-XTD3, this script was created.

I collaborated with the GAMADV-XTD3 developer, Ross Scroggs, and he created this python script to manage syncing of domain Shared Contacts (DSC) between two separate Workspace accounts/domains for me.

Also done with a scheduled GAMADV-XTD3, and a companion script.

Here's a github repo by Romain Vialard, specifically for a SharedContactsApp library.

You can test your results by giving the GCDS/GWPS accounts (they can (probably should) be separate accounts) less admin rights, and then add more GCDS object types to synk (Profiles, Schemas (most likely SA only), Resources (SA only), Domain Shared Contacts (there is no possible admin role for DSCs , but a service account with the correct API access in DwD can probably do it - even though I have helped document how to use a script to manage Shared Contacts in Sheets, I don't know for sure, and therefore that exact detail isn't in the wiki :-) ).