GAM VS PSGSuite

All this can be done in almost a one liner using GAM. https://github.com/GAM-team/GAM/wiki

GAM

For Google check out GAM

GAM has several options to run it more securely. You can sign your requests with a tubikey, for example. Or run GAM as a vm on GCE. https://github.com/GAM-team/GAM/wiki/Use-a-Yubikey https://github.com/GAM-team/GAM/wiki/Running-GAM-on-Google-Compute-Engine-(GCE)-Securely

Step 3: I’m only beginning to figure out the GAM part. I’m using GAMADV and I found these commands at https://github.com/GAM-team/GAM/wiki/Chrome-Policy-Settings

https://github.com/GAM-team/GAM/wiki/ :)

For that, I think you are going to have to venture into the world of APIs which I would recommend GAM which supports Google Drive Management: https://github.com/GAM-team/GAM/wiki/GoogleDriveManagement

Have you looked at a more PowerShell native tool like PSGSuite?

Oh definitely, but that function is one I already know how to use, from a module called PSGSuite.

I use PSGSuite instead of GAM, but this could probably be adapted. I made a PowerShell function to recursively get Google group members:

psgsuite.io

I automated this with powershell and psgsuite.

Groups are then managed ether through Active Directory sync (GCDS), or through PSGsuite scripting. I don't do the scripting so I can't share how exactly that's done.

I manage a Google Workspace tenant (Azure/O365 >> GSuite, ikr, but shht) where I would like certain users of our tenant to be able to fill in a form with a new employee's information, a PS script would get the information from the form and would make the user (using the PSGSuite module) and mail them. That's the easy part.