Google Apps School Directory Sync

[pcstru]

One other thing - we have staff on one domain and pupils on another - presumably we can only use this for one (probably the pupil one)?

You should be able to run two instances of the GADS tool with each one dealing with a different domain (basically just two different configuration files). You will need to use different OU's in Google and tell each instance of GADS to ignore users in OU it's not dealing with - otherwise it will delete/suspend users it doesn't find.

[Pompeygeorge]

I was aiming to use the SDS tool rather than GADS - unless they are the same thing? That seems to be set up to use with MIS systems?

[Pompeygeorge]

My requirements are similar to TallPall's - to create live email groups usable by staff. I found a way of creating them via scripts this year, but a) they were out of date pretty quickly, and b) google have helpfully depreciated the calls I was using.

[pcstru]

I was aiming to use the SDS tool rather than GADS - unless they are the same thing? That seems to be set up to use with MIS systems?

Apologies , I missed that implication. SDS looks very similar to GADS but since it's not touching the domain data, you should be able to deal with one instance. You will either need to define reports for CMIS or if you are confident with powershell and direct access of the DB (read only!), you might find that is a good route to a fully automated work flow. I have published a module for accessing CMIS staff and student data which may be some help to start.

[Pompeygeorge]

I've never used powershell in my life so that should fun! I've done shell files and pipes in my dim and distant past so could probably do it... eventually!

 

I know how to create reports in CMIS, just need to work out how to get those to save as daily .csv files. Presumably there's some way of doing that in CMIS.

[pcstru]

I don't know of a way to automate CMIS reports other than a script language and direct access to the DB. If you run a report in CMIS, you can then export to CSV or onto the clipboard and then past to excel. That will quickly become tiresome!

[Pompeygeorge]

Yeah, it has to be automated - I'm lazy!*

 

*in that techie way of spending a day hacking out code to save time.

[fontburn78]

I don't know of a way to automate CMIS reports other than a script language and direct access to the DB. If you run a report in CMIS, you can then export to CSV or onto the clipboard and then past to excel. That will quickly become tiresome!

 

Just a quick answer to this - We run CMIS here and using a few PowerShell scripts can scheduled task our groups and class groups are automated. Its not graceful but it works.

The steps we follow.

- We use PS clear out existing members of Class Groups (I just couldnt find a cmdlet to append group membership)

- Then PS to hit the CMIS DB and using a query get all the Class Group members

- Add the members to the groups

- Any empty class groups are then deleted.

- Any new class groups are mail-enabled and set to security - universal

- GADS then uploads a sync

 

Only time we have an issue is the start of the year when we need to up the change limit in GADS as the bulk changes are over the 5% protection setting.

[enjay]

Resurrecting this one slightly, but how did people get on with the SIMS extracts? As well as the email aspects, we are also Google Classroom so are keen to get class groups created so teachers can invite entire classes.

 

It doesn't need to be simple to set up, I'm happy to put some work in (although know very little about Powershell) but it does need to be automated and not require (much) additional work from the admissions staff...

[jumpinjamez]

Resurrecting this one slightly, but how did people get on with the SIMS extracts? As well as the email aspects, we are also Google Classroom so are keen to get class groups created so teachers can invite entire classes.

 

It doesn't need to be simple to set up, I'm happy to put some work in (although know very little about Powershell) but it does need to be automated and not require (much) additional work from the admissions staff...

 

We have found that just getting the teachers to create a class and then give the students the code to join works just fine. Not being able to add multiple teachers to a class is an issue.

[enjay]

We have found that just getting the teachers to create a class and then give the students the code to join works just fine. Not being able to add multiple teachers to a class is an issue.

 

Thanks, but we also want to have email groups for the classes, so will need them in Google Apps for that.

[spartacus400]

I don't know of a way to automate CMIS reports other than a script language and direct access to the DB. If you run a report in CMIS, you can then export to CSV or onto the clipboard and then past to excel. That will quickly become tiresome!

 

realsmart does this - you can just buy the provisioning tool on its own

[SwedishChef]

My +1 for Salamander Soft Active Directory link been using them now for years. http://www.salamandersoft.com/

(Dont be put off by the site looking a little less exciting)

@rpwillis, is the DB's

 

It can also set-up work area's, timetable to exchange mailboxes etc etc. Once it comes out of sims.net into your AD you can use it for anything.......o365 (bleh) or Google etc etc

[enjay]

Thanks. We've bought Salamander...

[enjay]

Right, so Salamander is in place, but we've hit a problem which seems to render it useless - Salamander and GADS between them are creating the Groups in Google Apps corresponding to the timetable, but these groups don't have sufficient permissions to be usable for inviting students to join a Classroom. In order to invite, members need to be able to view the member list, but they can't in these Groups. The access permissions can be changed on each group individually, but obviously that's not an option with the number of Groups we're talking about. Has anyone else encountered this?

[j_mcg]

Hi all we are just looking into both of these, however we decided on GADS at the moment as it looked like Google Apps School Directory Sync relies on a CSV exported from MIS or SIS

[fontburn78]

Right, so Salamander is in place, but we've hit a problem which seems to render it useless - Salamander and GADS between them are creating the Groups in Google Apps corresponding to the timetable, but these groups don't have sufficient permissions to be usable for inviting students to join a Classroom. In order to invite, members need to be able to view the member list, but they can't in these Groups. The access permissions can be changed on each group individually, but obviously that's not an option with the number of Groups we're talking about. Has anyone else encountered this?

 

We had the same issue with GADS and Groups - Google basically said it was by design and to make the changes in the Google Admin console. Not accepting this as an answer they came back with making the teacher a "managed by" user in the AD. GADS then makes these user as owners in the Google Groups. They then can added users/groups to Google Classrooms. (i suspect this what your trying to do)

 

To automate this we use a Powershell script to look at CMIS and then edit the groups we have set up.

[fiza]

realsmart does this - you can just buy the provisioning tool on its own

 

I know this is an old post but I have just contacted Realsmart - you can't buy just the provisioning tool on its own.

[rpwillis]

Right, so Salamander is in place, but we've hit a problem which seems to render it useless - Salamander and GADS between them are creating the Groups in Google Apps corresponding to the timetable, but these groups don't have sufficient permissions to be usable for inviting students to join a Classroom. In order to invite, members need to be able to view the member list, but they can't in these Groups. The access permissions can be changed on each group individually, but obviously that's not an option with the number of Groups we're talking about. Has anyone else encountered this?

 

For the resolution see http://www.edugeek.net/forums/cloud-services/149623-google-groups-access-permissions.html

[chinesewhispers]

Hello all. I've just started syncing our groups, and whilst the 'owner' setting isn't concerning me too much just yet, the fact that all the groups are set to 'Custom' and 'Anyone' means that all the groups can be addressed by anybody with an email address.

 

1. Am I understanding this correctly?

2. Is there a way around it so that when groups are created, they are done so with either 'Restricted' or 'Team' as the Access Levels?

 

How are you getting round this, do I have to resort to learning GAM?

[fiza]

Hello all. I've just started syncing our groups, and whilst the 'owner' setting isn't concerning me too much just yet, the fact that all the groups are set to 'Custom' and 'Anyone' means that all the groups can be addressed by anybody with an email address.

 

1. Am I understanding this correctly?

2. Is there a way around it so that when groups are created, they are done so with either 'Restricted' or 'Team' as the Access Levels?

 

How are you getting round this, do I have to resort to learning GAM?

 

Sorry not an answer but just to say I am looking into syncing our classes in sims into GAFE. Would you mind sharing your report that you use to extract the data out of sims? That's assuming that you are using sims as your mis.

[chinesewhispers]

Sorry not an answer but just to say I am looking into syncing our classes in sims into GAFE. Would you mind sharing your report that you use to extract the data out of sims? That's assuming that you are using sims as your mis.

 

We use Salamander to pull data from Bromcom into our AD, so can't be of help on this one I'm afraid. Have to say Salamander and the team is great though!

[fiza]

We use Salamander to pull data from Bromcom into our AD, so can't be of help on this one I'm afraid. Have to say Salamander and the team is great though!

 

I looked at Salamander but the price was too high for us.

[enjay]

Hello all. I've just started syncing our groups, and whilst the 'owner' setting isn't concerning me too much just yet, the fact that all the groups are set to 'Custom' and 'Anyone' means that all the groups can be addressed by anybody with an email address.

 

That isn't how ours are set, so I suggest you speak to Salamander about exactly how you want the groups configuring, as I think they can configure them any way you like.

[enjay]

I looked at Salamander but the price was too high for us.

 

Agreed, it isn't cheap but we decided it was worth it - a saving in man hours; certainty that AD and Google exactly match SIMS; all passwords set to a default which is based on date of birth (so is unique and unguessable for each user, but still means a room full of students can all be given their passwords simultaneously); consistent spelling of names across systems (e.g. Catherine is always Catherine, never Cathy or Kate); and automatic creation of class groups for use in Google Mail and Google Classroom. We decided it was money well spent, but that is a decision which each school must make for themselves.