88lex/safire
1
1
Fork 0
mirror of https://github.com/88lex/safire.git synced 2025-02-22 21:05:25 +08:00
Code Issues Projects Releases Packages Wiki Activity
safire/README.md
88lex 1cc7524bfd update readme
2020-07-25 16:31:19 +08:00

268 lines
No EOL
8.2 KiB
Markdown
Raw Blame History

## __SAFIRE__
## A flexible tool to create and delete Google / GSuite service accounts to be used with shared drives.
- Simple usage syntax: e.g. `safire list projects`
- Available main commands:
- list
- add / create
- remove / delete
- auth
- enable
- rename
- Most commands will tell you which subcommands are available by simply typing the main command with no flags. e.g. `safire list` or optionally `safire list -h` . Subcommands include:
- projects
- sas - aka service accounts
- keys / jsons
- groups
- members
Before running safire you will need one project (new or old is fine) with several apis enabled.
- If no project exists go to https://console.cloud.google.com/projectcreate to create one in your main account
- Then go to https://console.cloud.google.com/apis/library. Ensure you choose your main project (dropdown at the top of the page), then enable the following APIs:
[ __You only need to do this once.__ ]
- Admin
- Drive
- Identity and Access Management (IAM)
- Cloud Resource Manager
- Service Usage
- Service Management
Once you have enabled the above APIs then go to this page
- https://console.cloud.google.com/apis/credentials
- Click Create Credentials
- Choose `OAuth client ID`
- For Application type choose `Desktop app` and name it as you like ( 'safire' or anything)
- Click Create
- Finally choose `Download JSON`
- You will use this JSON to create a token which allows you access to your account and gives you permission to create projects, service accounts, etc. Keep one copy of this JSON in a safe place, then put a copy named `creds.json` in the `safire/creds` folder [specified in your config.py file - you can change the location if you like]
Once you have this initial project created, all the APIs above enabled and have created/downloaded the credentials creds.json you are ready to use safire.
The command line is very flexible. You can quickly and easily create and delete service accounts(SAs), json keys (that let you access shared drives and copy/sync/move files), add the SA emails to groups and shared drives and use with tools like sasync, cloudplow/cloudbox, crop etc.
`Don't be afraid to play with the commands. You can fix almost anything by deleting and recreating components in a few minutes. [The exception being projects, which you should not delete as they go into a 30-day holding bin before being fully deleted, and count against your project quota.]`
A typical, simple flow of commands
- download a credentials json
- create auth token to enable safire to access your account: `./safire auth all` will create two tokens, one to access projects/drives/etc and one to access groups
- add projects: `./safire add projects 5` will add 5 projects using the prefix in your config.py file
- enable apis: happens automatically when you add projects, but can be done manually
- create sas: `./safire add sas ""` will add sas to all or your projects using # of SAs in config.py
- download json keys: `./safire add jsons ""` will create and download service account json keys to the folder in config.py
- add members to group: `./safire add members "" mygroup@domain.com` will add all SA emails from all projects to a group called mygroup@domain.com
- add group to shared (team) drive
## Detailed commands
__list__
`safire list`
SYNOPSIS
`safire list COMMAND`
DESCRIPTION
List drives, projects, service accounts (SAs), SA json keys, groups and group members. In most cases a filter can be applied.
COMMANDS
COMMAND is one of the following:
all
List all drives, projects, service accounts, json keys, groups and group members. Also exports these lists with full data fields to csv and xlsx files in data_path folder
drives
List team/shared drives. Match 'filter'
groups
List groups in the authorized account. Match 'filter'
jsons
alias: jsons = keys. List service account jsons/keys in the svcaccts folder. Match 'filter'
keys
alias: jsons = keys. List service account jsons/keys in the svcaccts folder. Match 'filter'
members
List members in groups. Groups match 'filter'
projects
List projects. Match 'filter'
sas
List service accounts for projects. Projects match 'filter'
__add__
safire add
SYNOPSIS
safire add COMMAND
DESCRIPTION
Add projects, drives, service accounts(SAs), SA keys/jsons and group members
COMMANDS
COMMAND is one of the following:
apis
Enables apis for projects. 'drive' and 'iam' apis by default. Automatic when projects are created but can be run manually also.
drive
Create a team/shared drive. Usage: 'safire add drive some_name'
drives
Create team/shared drives. Usage: 'safire add teamdrive some_filename' containing a list of drive names
jsons
Create and download json/key files to svcaccts folder. Add to TDs and/or groups.
keys
Create and download json/key files to svcaccts folder. Add to TDs and/or groups.
members
'add members' requires two arguments. Both 'project_filter' and 'group_filter' can be either the full project/group name or a partial name which matches some projects/groups. You can add SA emails from multiple projects to multiple groups if you wish.
projects
Create projects in authorized account. Usage: 'safire add projects 1'. Uses defaults in config if none specified.
sas
Create N service accounts/SAs in projects which match 'filter'. Usage: 'safire add sas 5 xyz' will add 5 SAs to all projects containing 'xys' if fewer than 100 exist. Will not overwrite SAs.
user
Add user (typically group name) to a shared/team drive. Usage: 'safire add someTDid mygroup@domain.com'
__delete__
NAME
safire delete
SYNOPSIS
safire delete COMMAND
DESCRIPTION
Delete sas, jsons/keys, drives and group members. Note: 'remove' and 'delete' are equivalent commands
COMMANDS
COMMAND is one of the following:
drive
Delete a team/shared drive. Usage: 'safire add teamdrive unique ID'. USE CAREFULLY! Does not work with non-empty drives.
drives
Delete team/shared drives. Usage: 'safire add teamdrive some_filename' with unique IDs. USE CAREFULLY
jsons
Remove json keys from svcaccts path
members
Remove members from groups. Match 'filter'
sas
Usage: 'safire remove sas filter' where filter is a string to match the projects from which you want to delete service accounts. To remove all SAs for all projects use "" as your filter
user
Remove user (typically group name) from a shared/team drive. Usage: 'safire remove someTDid mygroup@domain.com'
__auth__
NAME
safire auth
SYNOPSIS
safire auth GROUP | COMMAND
DESCRIPTION
Authorize the app to access your projects, SAs, drives and groups. To generate creds.json go to https://developers.google.com/apps-script/api/quickstart/python , click Enable then download a json, rename it to creds.json and put a copy in the /creds folder
GROUPS
GROUP is one of the following:
scopes_all
scopes_group
scopes_proj
COMMANDS
COMMAND is one of the following:
all
Create an auth token for adding/removing group members
ask
check
groups
Create an auth token for adding/removing group members
projects
Create an auth token for accessing and changing projects, service accounts, json keys and drives
__enable__
NAME
safire enable
SYNOPSIS
safire enable COMMAND
DESCRIPTION
Add projects, drives, service accounts(SAs), SA keys/jsons and group members
COMMANDS
COMMAND is one of the following:
apis
Enables apis for projects. 'drive' and 'iam' apis by default. Automatic when projects are created but can be run manually also.
__rename__
NAME
safire rename
SYNOPSIS
safire rename COMMAND
DESCRIPTION
Rename json/key files to their email prefix, email numeric (omit prefix), uniqId or in a sequence. Usage: 'safire rename jsons email' [choice email, email_seq, uniq, seq] Renaming is repeatable. Can always delete and redownload keys if needed.
COMMANDS
COMMAND is one of the following:
jsons
Usage: 'safire rename jsons email' [choice email, email_seq, uniq, seq]
Reference in a new issue View git blame Copy permalink