gws-admin

What This Skill Does

The gws-admin skill provides a powerful command-line interface for the Google Workspace Admin SDK, allowing OpenClaw agents to manage organizational resources directly. This skill serves as an administrative bridge to directory services, enabling the automation of identity and device management. Whether you need to provision groups, audit ChromeOS device fleets, manage domain aliases, or update customer account settings, this skill facilitates granular control over your organization's Google Workspace environment. It adheres to the standard OpenClaw skill architecture, requiring the gws-shared foundation for authentication and global configuration, ensuring that all administrative actions are secure, audited, and consistent with organizational policies.

Installation

To integrate this skill into your OpenClaw environment, execute the following command in your terminal:

clawhub install openclaw/skills/skills/googleworkspace-bot/gws-admin

Ensure that you have previously configured your authentication credentials via gws-shared. If the shared prerequisites are missing, you may be prompted to run gws generate-skills to establish the necessary configuration files and directory structure required for API communication.

Use Cases

This skill is designed for system administrators and IT automation workflows. Primary use cases include:

• Fleet Management: Automating the status changes of ChromeOS devices (deprovisioning or disabling) based on internal asset management tickets.
• User Provisioning & Lifecycle: Programmatically creating groups, managing group memberships, and maintaining domain aliases across large organizations.
• Compliance Auditing: Fetching real-time device or group status to report on compliance metrics.
• Bulk Operations: Updating multiple device properties at once, such as reassignment of hardware to specific organizational units (OUs).

Example Prompts

1. "List all groups in the domain and check if the 'engineering-team' group exists."
2. "Move the ChromeOS device with serial number SN12345 to the 'Remote-Work' organizational unit."
3. "Delete the domain alias 'deprecated-corp.com' from our workspace configuration."

Tips & Limitations

• Safety First: Always use patch methods where possible to avoid overwriting unintended properties.
• Rate Limiting: Be aware that the Google Admin SDK enforces strict quotas. Avoid high-frequency loops; instead, use the list and batch methods provided by the API.
• Destructive Actions: Actions like delete or device deprovisioning are often irreversible. Ensure your agent workflow includes a 'human-in-the-loop' verification step before executing these commands.
• Patching: Refer to the provided documentation links regarding patch semantics to ensure partial updates do not corrupt existing data fields.