approvedevice

gsuitemdm Cloud Function approvedevice

A cloud Function component of the gsuitemdm package that approves a mobile device using the Admin SDK.

The approvedevice API is used by the mdmtool command line utility.

HOW-TO Configure approvedevice

approvedevice uses a .yaml file containing several environment variables the cloud function reads during app startup. These environment variables point the app to the shared master cloud function configuration and API key that are stored as Secret Manager secrets. An example .yaml file for approvedevice:

APPNAME: approvedevice
SM_APIKEY_ID: projects/12334567890/secrets/gsuitemdm_apikey
SM_CONFIG_ID: projects/12334567890/secrets/gsuitemdm_conf

HOW-TO Deploy approvedevice

$ gcloud functions deploy ApproveDevice \
  --runtime go111 \
  --trigger-http \
  --env-vars-file env_approvedevice.yaml

HOW-TO Use approvedevice

API

Example expected JSON to approve a device in the domain foo.com with IMEI 111111111111111:

{
	"action": "approve",
	"confirm": true,
	"domain": "foo.com",
	"imei": "111111111111111",
	"key": "0123456789"
}

Note that if "confirm": true is not specified, the device will not be approved.

Example command line using curl and the above JSON to approve the abovementioned device:

$ curl -X POST -d \
  '{"key": "0123456789", "action": "approve", "imei": "111111111111111", "domain": "foo.com", "confirm": true}' \
  https://us-central1-<YOURGCPPROJECTNAME>.cloudfunctions.net/ApproveDevice

mdmtool

Example command line using mdmtool to approve a device in the domain foo.com with IMEI 111111111111111:

$ mdmtool approve -i 111111111111111 -d foo.com
WARNING: Are you sure you want to APPROVE device IMEI=111111111111111 in domain foo.com? [y/n]: