gsuitemdm

gsuitemdm is a Go package that eases the management of iOS or Android mobile devices in G Suite domains that use G Suite MDM to secure their mobile devices.

gsuitemdm provides:

• Multiple, easy to use, secure mobile device management APIs deployed as cloud functions to help you quickly manage many mobile devices
• A command line tool (mdmtool) allowing for easy command line mobile device management
• Mobile device & user data stored in Google Datastore
• Configuration, keys & credentials stored securely as secrets in Google Secret Manager

Basically, gsuitemdm gives you:

• A much more convenient API interface to the G Suite Admin SDK
• Ability to script MDM operations or use a CLI tool instead of the Admin Console
• Handy 'quality of life' bits & pieces such as a phone directory API and Slack /phone command

Additional Features

• Securely uses GCP service accounts, GCP IAM roles and G Suite domain-wide delegation authority
• Supports multiple G Suite domains with easy (and shared!) configuration across all components
  • G Suite domains do not need to be under the same G Suite account
• Quickly and easily perform actions (Approve/Block/Delete/Wipe/Search for) on MDM-protected devices across multiple G Suite domains
• Generate an auto-updating Google Sheet so your ops team can track all mobile devices across multiple G Suite domains
• Structured application logs in Stackdriver

Use-Cases

• G Suite administrators managing multiple mobile devices in multiple G Suite domains spread across multiple G Suite organizational accounts
• Programmatically perform administrative actions on G Suite MDM-protected mobile devices
  • Generate an on-call list using the directory API
• Quickly and easily approve/block/wipe mobile devices in the command line without logging into the G Suite Admin Console

Status

• In production
• Ready for public use
• Docs: 95%

Configuration

All configuration data, API keys and service account domain credentials are stored as secrets in Google Secret Manager. Learn more about gsuitemdm configuration or gsuitemdm secrets.

Read all about configuration in the gsuitemdm setup docs.

Pre-Requisites

• 1+ G Suite domain(s) using G Suite MDM to manage iOS/Android mobile devices
• GCP project with billing setup

Brief Setup Notes

Full setup documenation is available here.

TODO