Installing GAM to administer Google Workspace from the command line is an exercise in trust.
- Install with with
curl | bash. - Add an app with some opaque ID to your workspace with full access to everything.
- Go to GCP and give the app access to everything there, too.
- Do it again with another opaque app ID.
- Ta-da! Someone has your Bitcoins, or something?