Library / Google Workspace

GWS-008 · Script

Mailbox Setup and Delegation

Manages Gmail delegated access from a CSV and applies a standard email signature to users.

Version 1.0.0Language PowerShellUpdated November 2026

What it does

Delegation: each row grants or removes one person's delegated access to a mailbox. Both accounts are checked first (they must exist and be active); rows already in the requested state are skipped. Signatures: fills an HTML template with each user's directory details and sets it as their Gmail signature. Supported tags in the template: {FirstName} {LastName} {FullName} {Email} {Title} {Department} {Phone} Missing values are replaced with nothing, so no raw tags appear in signatures. Preview mode (default) shows every change without making it.

Requirements

GAM7, installed and authorized by you. GAM is not included. Windows PowerShell 5.1 or PowerShell 7.

How to run it

  • Run from: an admin workstation or scheduled task with GAM7 set up
  • This is an admin script for your Google Workspace tenant, not a per-device endpoint script
  • User interaction: none with app-only sign-in
  • Schedule: run on demand, or weekly for reports

Settings

NameWhat it doesOptionsDefault
ModePreview = show changes only (default). Apply = make the changes.Preview, ApplyPreview
DelegationCsvCSV with columns: Mailbox, Delegate, Action (Add or Remove).
SignatureTemplatePath to an HTML signature template.
SignatureOrgUnitApply the signature to active users in this OU (and its sub-OUs).
SignatureUsersCsvOr apply the signature to users listed in a CSV with an Email column.
GamPathPath to GAM. Default: gam (on PATH).gam

Exit codes

  • 0 = Completed, nothing needs attention
  • 1 = Completed, but some rows failed or were skipped
  • 2 = Script error (see log)

Testing steps

  1. Run it first with the mode set to Preview on one test account or small group. Nothing is changed in that mode.
  2. Read the log and confirm the planned changes are what you expect.
  3. Run your chosen settings on the same test target and confirm the result.
  4. Check the exit code: 0 = OK, 1 = needs attention, 2 = error (see log), 9 = this copy is past its Valid until date.
  5. Roll out to a small group next, then everyone.

Rollback steps

Preview mode changes nothing. Remove a delegate with the remove action. To restore an old signature, save it first and apply it again.

Version and change log

VersionDateChanges
1.0.0November 2026First release.