This document lists the events and parameters for Security Settings Admin Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=admin
.
Events of this type are returned with type=SECURITY_SETTINGS
.
CHANGE_CAA_APP_ASSIGNMENTS
Parameters APPLICATION_NAME
string
The application's name.
CAA_ACCESS_ASSIGNMENTS_NEW
string
CAA access levels new.
CAA_ACCESS_ASSIGNMENTS_OLD
string
CAA access levels old.
CAA_ACCESS_LEVELS_NEW
string
CAA access levels new.
CAA_ACCESS_LEVELS_OLD
string
CAA access levels old.
CAA_ASSIGNMENTS_NEW
string
CAA assignments new.
CAA_ASSIGNMENTS_OLD
string
CAA assignments old.
CAA_ENFORCEMENT_ENDPOINTS_NEW
string
CAA enforcement endpoints new. Possible values:
CAA_WEB_VERSION
CAA_WEB_VERSION_AND_1P_OAUTH_CLIENTS
CAA_WEB_VERSION_AND_1P_OAUTH_CLIENTS_AND_APIS
CAA_WEB_VERSION_AND_1P_OAUTH_CLIENTS_AND_APIS_WITH_EXEMPTION
CAA_WEB_VERSION_AND_APIS
CAA_WEB_VERSION_AND_APIS_WITH_EXEMPTION
WEB_APP
WEB_APP_AND_1P_OAUTH_CLIENTS
CAA_ENFORCEMENT_ENDPOINTS_OLD
string
CAA enforcement endpoints old. Possible values:
CAA_WEB_VERSION
CAA_WEB_VERSION_AND_1P_OAUTH_CLIENTS
CAA_WEB_VERSION_AND_1P_OAUTH_CLIENTS_AND_APIS
CAA_WEB_VERSION_AND_1P_OAUTH_CLIENTS_AND_APIS_WITH_EXEMPTION
CAA_WEB_VERSION_AND_APIS
CAA_WEB_VERSION_AND_APIS_WITH_EXEMPTION
WEB_APP
WEB_APP_AND_1P_OAUTH_CLIENTS
GROUP_NAME
string
Group Name.
MODE
string
CAA Access Level Assignment mode. Possible values:
ACTIVE
MONITOR
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
TARGET_ENTITY_NAME
string
CAA Target Entity name.
TARGET_ENTITY_TYPE
string
CAA Target Entity type. Possible values:
GROUP
ORG_UNIT
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CAA_APP_ASSIGNMENTS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
For {TARGET_ENTITY_TYPE} [{TARGET_ENTITY_NAME}]:
Before:
Access level [{CAA_ACCESS_ASSIGNMENTS_OLD}] applied to {CAA_ENFORCEMENT_ENDPOINTS_OLD} of [{APPLICATION_NAME}] in [{MODE}] mode.
After:
Access level [{CAA_ACCESS_ASSIGNMENTS_NEW}] applied to {CAA_ENFORCEMENT_ENDPOINTS_NEW} of [{APPLICATION_NAME}] in [{MODE}] mode.
All third party API access blocked for users under 18.
Event details Event nameUNDERAGE_BLOCK_ALL_THIRD_PARTY_API_ACCESS
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNDERAGE_BLOCK_ALL_THIRD_PARTY_API_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
All access to unconfigured third-party apps blocked for users under 18 for {ORG_UNIT_NAME}
BLOCK_ALL_THIRD_PARTY_API_ACCESS
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=BLOCK_ALL_THIRD_PARTY_API_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
All third party API Access blocked
UNBLOCK_ALL_THIRD_PARTY_API_ACCESS
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNBLOCK_ALL_THIRD_PARTY_API_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
All third party API Access unblocked
ALLOW_STRONG_AUTHENTICATION
Parameters DOMAIN_NAME
string
The primary domain name.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ALLOW_STRONG_AUTHENTICATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Allow 2-Step Verification has been set from {OLD_VALUE} to {NEW_VALUE} for {DOMAIN_NAME}
Allow Google Sign-in only third party API access for users under 18.
Event details Event nameUNDERAGE_SIGN_IN_ONLY_THIRD_PARTY_API_ACCESS
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNDERAGE_SIGN_IN_ONLY_THIRD_PARTY_API_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Allow Google Sign-in only access to unconfigured third-party apps for users under 18 for {ORG_UNIT_NAME}
SIGN_IN_ONLY_THIRD_PARTY_API_ACCESS
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=SIGN_IN_ONLY_THIRD_PARTY_API_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Allow Google Sign-in only third party API access
ALLOW_SERVICE_FOR_OAUTH2_ACCESS
Parameters OAUTH2_SERVICE_NAME
string
OAuth2 service name. Possible values:
APPS_SCRIPT
APPS_SCRIPT_RUNTIME
CALENDAR
CLASSROOM
CLOUD_BILLING
CLOUD_MACHINE_LEARNING
CLOUD_PLATFORM
CLOUD_SEARCH
CONTACTS
DRIVE
DRIVE_HIGH_RISK
GMAIL
GMAIL_HIGH_RISK
GROUPS
GSUITE_ADMIN
TASKS
VAULT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ALLOW_SERVICE_FOR_OAUTH2_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_SERVICE_NAME} API Access is allowed for {ORG_UNIT_NAME}
DISALLOW_SERVICE_FOR_OAUTH2_ACCESS
Parameters OAUTH2_SERVICE_NAME
string
OAuth2 service name. Possible values:
APPS_SCRIPT
APPS_SCRIPT_RUNTIME
CALENDAR
CLASSROOM
CLOUD_BILLING
CLOUD_MACHINE_LEARNING
CLOUD_PLATFORM
CLOUD_SEARCH
CONTACTS
DRIVE
DRIVE_HIGH_RISK
GMAIL
GMAIL_HIGH_RISK
GROUPS
GSUITE_ADMIN
TASKS
VAULT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DISALLOW_SERVICE_FOR_OAUTH2_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_SERVICE_NAME} API Access is blocked for {ORG_UNIT_NAME}
CHANGE_APP_ACCESS_SETTINGS_COLLECTION_ID
Parameters DOMAIN_NAME
string
The primary domain name.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
SETTING_NAME
string
The unique name (ID) of the setting that was changed.
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_APP_ACCESS_SETTINGS_COLLECTION_ID&maxResults=10&access_token=YOUR_ACCESS_TOKEN
App Access Settings Collection for the org unit {ORG_UNIT_NAME} has changed from {OLD_VALUE} to {NEW_VALUE}
ADD_TO_BLOCKED_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_TO_BLOCKED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} added to Blocked list for {ORG_UNIT_NAME}
ADD_TO_LIMITED_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_TO_LIMITED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} added to Limited list for {ORG_UNIT_NAME}
ADD_TO_TRUSTED_BY_OAUTH_SCOPE_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_TO_TRUSTED_BY_OAUTH_SCOPE_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} added to trusted by OAuth scope list for {ORG_UNIT_NAME}
ADD_TO_CAA_EXEMPT_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_TO_CAA_EXEMPT_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} allowlisted for exemption from API access blocks for {ORG_UNIT_NAME}
REMOVE_FROM_CAA_EXEMPT_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_FROM_CAA_EXEMPT_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} removed from allowlist for exemption from API access blocks for {ORG_UNIT_NAME}
REMOVE_FROM_TRUSTED_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_FROM_TRUSTED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} no longer trusted for {ORG_UNIT_NAME}
REMOVE_FROM_BLOCKED_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_FROM_BLOCKED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} removed from Blocked list for {ORG_UNIT_NAME}
REMOVE_FROM_LIMITED_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_FROM_LIMITED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} removed from Limited list for {ORG_UNIT_NAME}
REMOVE_FROM_TRUSTED_BY_OAUTH_SCOPE_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_FROM_TRUSTED_BY_OAUTH_SCOPE_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} removed from trusted by OAuth scope list for {ORG_UNIT_NAME}
ADD_TO_TRUSTED_OAUTH2_APPS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
OAUTH2_APP_TYPE
string
OAuth2 application type. Possible values:
ANDROID
CHROME_EXTENSION
IOS
OAUTH2_CLIENT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_TO_TRUSTED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_APP_NAME} trusted for {ORG_UNIT_NAME}
MULTIPLE_ADD_TO_BLOCKED_OAUTH2_APPS
Parameters OAUTH2_NUM_APPS
integer
Number of OAuth2 apps.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MULTIPLE_ADD_TO_BLOCKED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_NUM_APPS} apps added to Blocked list for {ORG_UNIT_NAME}
MULTIPLE_ADD_TO_LIMITED_OAUTH2_APPS
Parameters OAUTH2_NUM_APPS
integer
Number of OAuth2 apps.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MULTIPLE_ADD_TO_LIMITED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_NUM_APPS} apps added to Limited list for {ORG_UNIT_NAME}
MULTIPLE_ADD_TO_TRUSTED_BY_OAUTH_SCOPE_OAUTH2_APPS
Parameters OAUTH2_NUM_APPS
integer
Number of OAuth2 apps.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MULTIPLE_ADD_TO_TRUSTED_BY_OAUTH_SCOPE_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_NUM_APPS} apps added to Trusted by OAuth Scope list for {ORG_UNIT_NAME}
MULTIPLE_ADD_TO_TRUSTED_OAUTH2_APPS
Parameters OAUTH2_NUM_APPS
integer
Number of OAuth2 apps.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MULTIPLE_ADD_TO_TRUSTED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{OAUTH2_NUM_APPS} apps added to Trusted list for {ORG_UNIT_NAME}
OAUTH_APPS_BULK_UPLOAD
Parameters BULK_UPLOAD_SUCCESS_OAUTH_APPS_NUMBER
string
Bulk upload successful oauth app number.
BULK_UPLOAD_TOTAL_OAUTH_APPS_NUMBER
string
Bulk upload total oauth app number.
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=OAUTH_APPS_BULK_UPLOAD&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{BULK_UPLOAD_SUCCESS_OAUTH_APPS_NUMBER} of {BULK_UPLOAD_TOTAL_OAUTH_APPS_NUMBER} rows successfully uploaded
OAUTH_APPS_BULK_UPLOAD_NOTIFICATION_SENT
Parameters USER_EMAIL
string
The user's primary email address.
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=OAUTH_APPS_BULK_UPLOAD_NOTIFICATION_SENT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Notification of bulk upload for apps list sent to {USER_EMAIL}
Summary message to display in the audit log when device access for OAuth2 apps is blocked.
Event details Event nameBLOCK_ON_DEVICE_ACCESS
Parameters OAUTH2_SERVICE_NAME
string
OAuth2 service name. Possible values:
APPS_SCRIPT
APPS_SCRIPT_RUNTIME
CALENDAR
CLASSROOM
CLOUD_BILLING
CLOUD_MACHINE_LEARNING
CLOUD_PLATFORM
CLOUD_SEARCH
CONTACTS
DRIVE
DRIVE_HIGH_RISK
GMAIL
GMAIL_HIGH_RISK
GROUPS
GSUITE_ADMIN
TASKS
VAULT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=BLOCK_ON_DEVICE_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Block on device {OAUTH2_SERVICE_NAME} access for {ORG_UNIT_NAME}
CHANGE_TWO_STEP_VERIFICATION_ENROLLMENT_PERIOD_DURATION
Parameters GROUP_EMAIL
string
The group's primary email address.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_TWO_STEP_VERIFICATION_ENROLLMENT_PERIOD_DURATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
2-step verification enrollment period duration for {ORG_UNIT_NAME} changed from {OLD_VALUE} to {NEW_VALUE}
CHANGE_TWO_STEP_VERIFICATION_FREQUENCY
Parameters GROUP_EMAIL
string
The group's primary email address.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_TWO_STEP_VERIFICATION_FREQUENCY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
2-step verification frequency for {ORG_UNIT_NAME} changed from {OLD_VALUE} to {NEW_VALUE}
CHANGE_TWO_STEP_VERIFICATION_GRACE_PERIOD_DURATION
Parameters GROUP_EMAIL
string
The group's primary email address.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_TWO_STEP_VERIFICATION_GRACE_PERIOD_DURATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
2-step verification grace period duration for {ORG_UNIT_NAME} changed from {OLD_VALUE} to {NEW_VALUE}
CHANGE_TWO_STEP_VERIFICATION_START_DATE
Parameters GROUP_EMAIL
string
The group's primary email address.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_TWO_STEP_VERIFICATION_START_DATE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
2-step verification start date has been changed from {OLD_VALUE} to {NEW_VALUE}
CHANGE_ALLOWED_TWO_STEP_VERIFICATION_METHODS
Parameters ALLOWED_TWO_STEP_VERIFICATION_METHOD
string
Allowed two-step verification method. Possible values:
ANY
ONLY_SECURITY_KEY
GROUP_EMAIL
string
The group's primary email address.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ALLOWED_TWO_STEP_VERIFICATION_METHODS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
2-step verification allowed 2-step verification methods for {ORG_UNIT_NAME} changed to {ALLOWED_TWO_STEP_VERIFICATION_METHOD}
TOGGLE_CAA_ENABLEMENT
Parameters NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_CAA_ENABLEMENT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Context Aware Access has been {NEW_VALUE}.
CHANGE_CAA_ERROR_MESSAGE
Parameters NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CAA_ERROR_MESSAGE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Error message has been changed to [{NEW_VALUE}]. (OrgUnit Name: {ORG_UNIT_NAME})
TOGGLE_CAA_REMEDIATION_ENABLEMENT
Parameters NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_CAA_REMEDIATION_ENABLEMENT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Context Aware Access Remediation has been {NEW_VALUE}. (OrgUnit Name: {ORG_UNIT_NAME})
EDU_OVER_18_APPROVAL_WORKFLOW_DISABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=EDU_OVER_18_APPROVAL_WORKFLOW_DISABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Disabled Edu over 18 users apps requests for {ORG_UNIT_NAME}
EDU_DELEGATED_USER_APPROVAL_WORKFLOW_DISABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=EDU_DELEGATED_USER_APPROVAL_WORKFLOW_DISABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Disabled over 18 users making delegated apps requests for {ORG_UNIT_NAME}
UNDERAGE_USER_APPROVAL_WORKFLOW_DISABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNDERAGE_USER_APPROVAL_WORKFLOW_DISABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Disabled under 18 users apps requests for {ORG_UNIT_NAME}
USER_APPROVAL_WORKFLOW_DISABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=USER_APPROVAL_WORKFLOW_DISABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Disabled users over 18 to make apps requests for {ORG_UNIT_NAME}
UNTRUST_DOMAIN_OWNED_OAUTH2_APPS
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNTRUST_DOMAIN_OWNED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Domain Owned Apps removed from trusted list
TRUST_DOMAIN_OWNED_OAUTH2_APPS
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TRUST_DOMAIN_OWNED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Domain Owned Apps added to trusted list
ENABLE_NON_ADMIN_USER_PASSWORD_RECOVERY
Parameters GROUP_EMAIL
string
The group's primary email address.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENABLE_NON_ADMIN_USER_PASSWORD_RECOVERY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Enable non-admin user password recovery setting in {ORG_UNIT_NAME} organization changed from {OLD_VALUE} to {NEW_VALUE}
EDU_OVER_18_APPROVAL_WORKFLOW_ENABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=EDU_OVER_18_APPROVAL_WORKFLOW_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Enabled Edu over 18 users apps requests for {ORG_UNIT_NAME}
EDU_DELEGATED_USER_APPROVAL_WORKFLOW_ENABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=EDU_DELEGATED_USER_APPROVAL_WORKFLOW_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Enabled over 18 users making delegated apps requests for {ORG_UNIT_NAME}
UNDERAGE_USER_APPROVAL_WORKFLOW_ENABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNDERAGE_USER_APPROVAL_WORKFLOW_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Enabled under 18 users apps requests for {ORG_UNIT_NAME}
USER_APPROVAL_WORKFLOW_ENABLED
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=USER_APPROVAL_WORKFLOW_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Enabled users over 18 to make apps requests for {ORG_UNIT_NAME}
ENFORCE_STRONG_AUTHENTICATION
Parameters DOMAIN_NAME
string
The primary domain name.
GROUP_EMAIL
string
The group's primary email address.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
SETTING_NAME
string
The unique name (ID) of the setting that was changed.
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENFORCE_STRONG_AUTHENTICATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
{SETTING_NAME} in security settings for your organization changed from {OLD_VALUE} to {NEW_VALUE}
Summary message to display in the audit log for Oauth2 scope management settings.
Event details Event nameUPDATE_ERROR_MSG_FOR_RESTRICTED_OAUTH2_APPS
Parameters NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_ERROR_MSG_FOR_RESTRICTED_OAUTH2_APPS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Error message for restricted OAuth2 apps for your organization updated from {OLD_VALUE} to {NEW_VALUE}
WEAK_PROGRAMMATIC_LOGIN_SETTINGS_CHANGED
Parameters GROUP_EMAIL
string
The group's primary email address.
NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=WEAK_PROGRAMMATIC_LOGIN_SETTINGS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Setting changed for {ORG_UNIT_NAME} organization unit from {OLD_VALUE} to {NEW_VALUE}
Event name for change in session control settings.
Event details Event nameSESSION_CONTROL_SETTINGS_CHANGE
Parameters ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
REAUTH_APPLICATION
string
Application for with reauthentication settings apply. Possible values:
ADMIN_CONSOLE
CLOUD_ADMIN_TOOLS
REAUTH_SETTING_NEW
string
Old Session control settings. Possible values:
INHERIT
NEVER
REAUTH_SETTING_OLD
string
Old Session control settings. Possible values:
INHERIT
NEVER
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=SESSION_CONTROL_SETTINGS_CHANGE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Session Control Settings updated for {REAUTH_APPLICATION} from {REAUTH_SETTING_OLD} to {REAUTH_SETTING_NEW}. (OrgUnit Name: {ORG_UNIT_NAME})
CHANGE_SESSION_LENGTH
Parameters NEW_VALUE
string
The new SETTING_NAME
value that was set during this event.
OLD_VALUE
string
The previous SETTING_NAME
value that was replaced during this event.
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_SESSION_LENGTH&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Session length has been changed from {OLD_VALUE} to {NEW_VALUE}
Summary message to display in the audit log when device access for OAuth2 apps is unblocked.
Event details Event nameUNBLOCK_ON_DEVICE_ACCESS
Parameters OAUTH2_SERVICE_NAME
string
OAuth2 service name. Possible values:
APPS_SCRIPT
APPS_SCRIPT_RUNTIME
CALENDAR
CLASSROOM
CLOUD_BILLING
CLOUD_MACHINE_LEARNING
CLOUD_PLATFORM
CLOUD_SEARCH
CONTACTS
DRIVE
DRIVE_HIGH_RISK
GMAIL
GMAIL_HIGH_RISK
GROUPS
GSUITE_ADMIN
TASKS
VAULT
ORG_UNIT_NAME
string
The organizational unit (OU) name (path).
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNBLOCK_ON_DEVICE_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Unblock on device {OAUTH2_SERVICE_NAME} access for {ORG_UNIT_NAME}
DOWNLOAD_PENDING_APP_USER_REQUESTS
Parameters OAUTH2_APP_ID
string
OAuth2 application ID.
OAUTH2_APP_NAME
string
Name of service.
Sample requestGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DOWNLOAD_PENDING_APP_USER_REQUESTS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Downloaded list of users requesting access to {OAUTH2_APP_NAME}
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4