From df9617ee64a8def2b81e606d5ac6852ad69266f1 Mon Sep 17 00:00:00 2001
From: WestonPlatter <weston.platter@masterpoint.io>
Date: Mon, 9 Jun 2025 16:34:38 -0600
Subject: [PATCH 1/2] docs: add python debugging script

---
 .../import-existing-org/debugging-script.py   | 85 +++++++++++++++++++
 1 file changed, 85 insertions(+)
 create mode 100644 examples/import-existing-org/debugging-script.py

diff --git a/examples/import-existing-org/debugging-script.py b/examples/import-existing-org/debugging-script.py
new file mode 100644
index 0000000..cf17a1f
--- /dev/null
+++ b/examples/import-existing-org/debugging-script.py
@@ -0,0 +1,85 @@
+#
+# We at Masterpoint found this script to be useful when debugging import issues
+# with existing users and roles into the terraform module. For example, it helped
+# confirm data and formatting of exsting users'  custom schema Key, Values,
+# and json encoded strings.
+#
+# This is intended only for ad-hoc debugging purposes and has not been thorughly
+# reviewed or tested. Use at your own risk.
+#
+
+from google.oauth2 import service_account
+from googleapiclient.discovery import build
+
+# Path to your service account JSON key
+SERVICE_ACCOUNT_FILE = 'my-google-admin-api-key.json'
+
+# Replace with your impersonated Google Workspace admin email
+DELEGATED_ADMIN = 'first.last@your-company.io'
+
+SCOPES = [
+    "https://www.googleapis.com/auth/admin.directory.group",
+    "https://www.googleapis.com/auth/admin.directory.user",
+    "https://www.googleapis.com/auth/admin.directory.userschema",
+    "https://www.googleapis.com/auth/apps.groups.settings",
+    "https://www.googleapis.com/auth/iam",
+]
+
+# Load credentials and delegate to admin
+credentials = service_account.Credentials.from_service_account_file(
+    SERVICE_ACCOUNT_FILE,
+    scopes=SCOPES
+).with_subject(DELEGATED_ADMIN)
+
+
+# Build the service
+service = build('admin', 'directory_v1', credentials=credentials)
+
+
+# Call the Directory API to list all user schemas
+def list_user_schemas(customer_id='my_customer'):
+    try:
+        schemas = service.schemas().list(customerId=customer_id).execute()
+        for schema in schemas.get('schemas', []):
+            print(f"Schema ID: {schema['schemaId']}")
+            print(f"Schema Name: {schema['schemaName']}")
+            print(f"Fields:")
+            for field in schema.get('fields', []):
+                print(field)
+                # print(f"  - '{field['fieldName']}' ({field['fieldType']})")
+                print(f"  - '{field['fieldName']}': '{field['fieldValues']}'")
+    except Exception as e:
+        print(f"Failed to retrieve schemas: {e}")
+
+
+def get_user_custom_schemas(user_email):
+    try:
+        # Use projection='full' to include custom schemas in the response
+        user = service.users().get(userKey=user_email, projection='full').execute()
+        print(user)
+        custom_schemas = user.get('customSchemas', {})
+
+        print(f"Custom schemas for {user_email}:")
+        for schema_name, schema_data in custom_schemas.items():
+            print(f"  Schema: {schema_name}")
+            for field_name, field_value in schema_data.items():
+                print(f"    {field_name}: {field_value}")
+
+        return custom_schemas
+    except Exception as e:
+        print(f"Failed to retrieve user custom schemas: {e}")
+        return None
+
+
+def list_group_members(group_email):
+    results = service.members().list(groupKey=group_email).execute()
+    members = results.get('members', [])
+    for member in members:
+        # print(member['email'])
+        print(member)
+
+
+if __name__ == '__main__':
+    # list_group_members('team@your-company.io')
+    # list_user_schemas()
+    get_user_custom_schemas('first.last@your-company.io')

From 4dd6d29118cbf46c9041f8e4bb22989b46089ab9 Mon Sep 17 00:00:00 2001
From: WestonPlatter <weston.platter@masterpoint.io>
Date: Mon, 9 Jun 2025 16:36:06 -0600
Subject: [PATCH 2/2] update language

---
 examples/import-existing-org/debugging-script.py | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/examples/import-existing-org/debugging-script.py b/examples/import-existing-org/debugging-script.py
index cf17a1f..cbc5da8 100644
--- a/examples/import-existing-org/debugging-script.py
+++ b/examples/import-existing-org/debugging-script.py
@@ -1,8 +1,8 @@
 #
-# We at Masterpoint found this script to be useful when debugging import issues
-# with existing users and roles into the terraform module. For example, it helped
-# confirm data and formatting of exsting users'  custom schema Key, Values,
-# and json encoded strings.
+# We at Masterpoint found this python script to be useful when debugging import
+# issues with existing users and roles into the terraform module to confirm the
+# expected data values. For example, confirm data and formatting of
+# exsting users' custom schema keys, values, and json encoded strings.
 #
 # This is intended only for ad-hoc debugging purposes and has not been thorughly
 # reviewed or tested. Use at your own risk.