Admin Audit Activity Events - Domain Settings

This document lists the events and parameters for Domain Settings Admin Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=admin.

Domain Settings

Events of this type are returned with type=DOMAIN_SETTINGS.

Account Automatic Renewal Change

Event details
Event name CHANGE_ACCOUNT_AUTO_RENEWAL
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new renewal strategy. Possible values:

  • NON_AUTO_RENEWAL
  • RENEWAL_BY_LICENSES
  • RENEWAL_BY_USERS
.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ACCOUNT_AUTO_RENEWAL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Account automatic renewal changed to {NEW_VALUE} on {DOMAIN_NAME}

Add Application

Event details
Event name ADD_APPLICATION
Parameters
APP_ID

string

Application ID.

APPLICATION_ENABLED

string

Application enabled.

APPLICATION_NAME

string

The application's name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_APPLICATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Application {APPLICATION_NAME} with id {APP_ID} has been added to the domain

Add Application to Whitelist

Event details
Event name ADD_APPLICATION_TO_WHITELIST
Parameters
APP_ID

string

Application ID.

APPLICATION_NAME

string

The application's name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_APPLICATION_TO_WHITELIST&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Application {APPLICATION_NAME} with id {APP_ID} has been added to whitelist for the domain

Advertisement Option Change

Event details
Event name CHANGE_ADVERTISEMENT_OPTION
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new advertising option.

OLD_VALUE

string

The previous advertising option.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ADVERTISEMENT_OPTION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Advertisement option for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Alert Creation

Event details
Event name CREATE_ALERT
Parameters
ALERT_NAME

string

The name of the alert.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_ALERT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Alert {ALERT_NAME} has been created

Alert Criteria Change

Event details
Event name CHANGE_ALERT_CRITERIA
Parameters
ALERT_NAME

string

The name of the alert.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ALERT_CRITERIA&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Alert criteria for {ALERT_NAME} has been changed

Alert Deletion

Event details
Event name DELETE_ALERT
Parameters
ALERT_NAME

string

The name of the alert.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_ALERT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Alert {ALERT_NAME} has been deleted

Alert Receivers Change

Event details
Event name ALERT_RECEIVERS_CHANGED
Parameters
ALERT_NAME

string

The name of the alert.

NEW_VALUE

string

A comma-separated list of new alert receivers.

OLD_VALUE

string

A comma-separated list of old alert receivers.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ALERT_RECEIVERS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Alert receivers for {ALERT_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Alert Rename

Event details
Event name RENAME_ALERT
Parameters
NEW_VALUE

string

The new value of the alert name.

OLD_VALUE

string

The previous value of the alert name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RENAME_ALERT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Alert {OLD_VALUE} has been renamed to {NEW_VALUE}

Alert Status Change

Event details
Event name ALERT_STATUS_CHANGED
Parameters
ALERT_NAME

string

The name of the alert.

NEW_VALUE

string

The new value of the alert name. Can be on or off.

OLD_VALUE

string

The previous value of the alert name. Can be on or off.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ALERT_STATUS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Alert status for {ALERT_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Alias Creation

Event details
Event name ADD_DOMAIN_ALIAS
Parameters
DOMAIN_ALIAS

string

The new domain alias. For more information about a domain alias, see the administration help center.

DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_DOMAIN_ALIAS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
An unverified {DOMAIN_ALIAS} created as an alias of {DOMAIN_NAME}

Alias Deletion

Event details
Event name REMOVE_DOMAIN_ALIAS
Parameters
DOMAIN_ALIAS

string

The removed domain alias. For more information about a domain alias, see the administration help center.

DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_DOMAIN_ALIAS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{DOMAIN_ALIAS} deleted as an alias of {DOMAIN_NAME}

Alias MX Record Verification

Event details
Event name VERIFY_DOMAIN_ALIAS_MX
Parameters
DOMAIN_ALIAS

string

The domain alias. For more information about a domain alias, see the administration help center.

DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_DOMAIN_ALIAS_MX&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Verified MX record of alias {DOMAIN_ALIAS} of domain {DOMAIN_NAME}

Alias Verification

Event details
Event name VERIFY_DOMAIN_ALIAS
Parameters
DOMAIN_ALIAS

string

The domain alias. For more information about a domain alias, see the administration help center.

DOMAIN_NAME

string

The primary domain name.

DOMAIN_VERIFICATION_METHOD

string

The domain verification method. Possible values:

  • DNS
  • ANALYTICS
  • META_TAG
  • HTML_FILE
.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_DOMAIN_ALIAS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{DOMAIN_ALIAS} verified as an alias of {DOMAIN_NAME} using {DOMAIN_VERIFICATION_METHOD}

All API OAuth Access Change

Event details
Event name TOGGLE_OAUTH_ACCESS_TO_ALL_APIS
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_OAUTH_ACCESS_TO_ALL_APIS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
OAuth access for all APIs changed to {NEW_VALUE} for {DOMAIN_NAME}

Allow Admin Password Reset

Event details
Event name TOGGLE_ALLOW_ADMIN_PASSWORD_RESET
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_ALLOW_ADMIN_PASSWORD_RESET&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Allow admin password reset setting in {DOMAIN_NAME} changed to {NEW_VALUE}

API Access Change

Event details
Event name ENABLE_API_ACCESS
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

OLD_VALUE

string

The previous value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENABLE_API_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
API access for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

API Client Access Authorize

Event details
Event name AUTHORIZE_API_CLIENT_ACCESS
Parameters
API_CLIENT_NAME

string

API Client Name.

API_SCOPES

string

The API scopes.

DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=AUTHORIZE_API_CLIENT_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
API Client Access to {DOMAIN_NAME} from client {API_CLIENT_NAME} authorized for scopes {API_SCOPES}.

API Client Access Remove

Event details
Event name REMOVE_API_CLIENT_ACCESS
Parameters
API_CLIENT_NAME

string

The API client name. For more information about managing API client access, see the administration help center.

DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_API_CLIENT_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
API Client Access to {DOMAIN_NAME} from client {API_CLIENT_NAME} removed

Change Primary Domain Name

Event details
Event name CHANGE_PRIMARY_DOMAIN
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new SETTING_NAME value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_PRIMARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Primary domain name changed from {DOMAIN_NAME} to {NEW_VALUE}

Change Whitelist Setting

Event details
Event name CHANGE_WHITELIST_SETTING
Parameters
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_WHITELIST_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} changed from {OLD_VALUE} to {NEW_VALUE} for the domain

Communication Preferences Setting Change

Event details
Event name COMMUNICATION_PREFERENCES_SETTING_CHANGE
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=COMMUNICATION_PREFERENCES_SETTING_CHANGE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} setting in Communication Preferences changed from {OLD_VALUE} to {NEW_VALUE} (Domain Name : {DOMAIN_NAME})

Conflict Account Action Change

Event details
Event name CHANGE_CONFLICT_ACCOUNT_ACTION
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new conflict resolution action to take. Possible values:

  • ASSIGN_ON_CONFLICT
  • INVITE_ON_CONFLICT
  • ASK_ON_CONFLICT
.

OLD_VALUE

string

The previous conflict resolution action.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CONFLICT_ACCOUNT_ACTION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Conflict account action for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Contact for Feedback Setting Change

Event details
Event name ENABLE_FEEDBACK_SOLICITATION
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

OLD_VALUE

string

The previous value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENABLE_FEEDBACK_SOLICITATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Can contact for feedback setting in {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Contact Sharing Change

Event details
Event name TOGGLE_CONTACT_SHARING
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_CONTACT_SHARING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Contact sharing changed to {NEW_VALUE} on {DOMAIN_NAME}

Create MDM vendor enrollment token

Event details
Event name CREATE_PLAY_FOR_WORK_TOKEN
Parameters
PLAY_FOR_WORK_TOKEN_ID

string

The MDM vendor enrollment token.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_PLAY_FOR_WORK_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
MDM vendor enrollment token ({PLAY_FOR_WORK_TOKEN_ID}) created
Event details
Event name TOGGLE_USE_CUSTOM_LOGO
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false. To learn more about custom logos, see the administration help center.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_USE_CUSTOM_LOGO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Use custom logo changed to {NEW_VALUE} on {DOMAIN_NAME}
Event details
Event name CHANGE_CUSTOM_LOGO
Parameters
DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CUSTOM_LOGO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
New custom logo uploaded for {DOMAIN_NAME}

Data Localization For Russian Federation Change

Event details
Event name CHANGE_DATA_LOCALIZATION_FOR_RUSSIA
Parameters
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DATA_LOCALIZATION_FOR_RUSSIA&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Setting for Data Localization for Russian Federation changed from {OLD_VALUE} to {NEW_VALUE}

Data Localization Setting Change

Event details
Event name CHANGE_DATA_LOCALIZATION_SETTING
Parameters
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DATA_LOCALIZATION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Setting for Data Localization changed from {OLD_VALUE} to {NEW_VALUE}

Data Protection Officer Contact Information Change

Part of an audit log event for contact info update for Data Protection Officer. This is used as an indicator of what kind of event log this message is.

Event details
Event name CHANGE_DATA_PROTECTION_OFFICER_CONTACT_INFO
Parameters
INFO_TYPE

string

Part of an audit log event for contact info update for EU Representative or Data Protection Officer. This will be used to state what kind of information was changed: email, name, phone or address. It's the INFO_TYPE placeholder in 'EU Representative {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}'. Possible values:

  • ADDRESS
    The address is expected to be a physical address of a person or institution.
  • EMAIL_ID
    The email_id here will be a regular email address in the form abc@xyz.com.
  • FULL_NAME
    A person's full name.
  • PHONE_NUMBER
    The phone number will be a phone number with an international extension.
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DATA_PROTECTION_OFFICER_CONTACT_INFO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Data Protection Officer {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

Delete MDM vendor enrollment token

Event details
Event name DELETE_PLAY_FOR_WORK_TOKEN
Parameters
PLAY_FOR_WORK_TOKEN_ID

string

The MDM vendor enrollment token.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_PLAY_FOR_WORK_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
MDM vendor enrollment token ({PLAY_FOR_WORK_TOKEN_ID}) deleted

DNS console login details viewed

Event details
Event name VIEW_DNS_LOGIN_DETAILS
Parameters
DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VIEW_DNS_LOGIN_DETAILS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
DNS console login details for {DOMAIN_NAME} viewed

Domain Default Locale Change

Event details
Event name CHANGE_DOMAIN_DEFAULT_LOCALE
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new locale.

OLD_VALUE

string

The previous locale.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_DEFAULT_LOCALE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Default locale for domain {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Domain Default Timezone Change

Event details
Event name CHANGE_DOMAIN_DEFAULT_TIMEZONE
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new default timezone.

OLD_VALUE

string

The previous default timezone.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_DEFAULT_TIMEZONE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Default timezone for domain {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Domain Name Change

Event details
Event name CHANGE_DOMAIN_NAME
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_NAME&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Change of domain name for {DOMAIN_NAME} to {NEW_VALUE} initiated

Domain Pre-release Setting Change

Event details
Event name TOGGLE_ENABLE_PRE_RELEASE_FEATURES
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_ENABLE_PRE_RELEASE_FEATURES&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Pre-release features on {DOMAIN_NAME} has been set to {NEW_VALUE}

Domain Support Message Change

Event details
Event name CHANGE_DOMAIN_SUPPORT_MESSAGE
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new domain support message.

OLD_VALUE

string

The previous domain support message.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_SUPPORT_MESSAGE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Support message for domain {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Domains added to Trusted Domains

Event details
Event name ADD_TRUSTED_DOMAINS
Parameters
DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_TRUSTED_DOMAINS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Domains {DOMAIN_NAME} added to Trusted Domains list

Domains removed from Trusted Domains

Event details
Event name REMOVE_TRUSTED_DOMAINS
Parameters
DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_TRUSTED_DOMAINS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Domains {DOMAIN_NAME} removed from Trusted Domains list

Education Organization Type Change

Event details
Event name CHANGE_EDU_TYPE
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_EDU_TYPE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Education organization type for domain {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Enable OAuth Consumer Key

Event details
Event name TOGGLE_ENABLE_OAUTH_CONSUMER_KEY
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_ENABLE_OAUTH_CONSUMER_KEY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Enabling OAuth consumer key changed to {NEW_VALUE} for {DOMAIN_NAME}

Enable SSO Change

Event details
Event name TOGGLE_SSO_ENABLED
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_SSO_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Enable SSO changed to {NEW_VALUE} for {DOMAIN_NAME}

Enforce SSL Change

Event details
Event name TOGGLE_SSL
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_SSL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
SSL Enforcement changed to {NEW_VALUE} for {DOMAIN_NAME}

EU Representative Contact Information Change

Part of an audit log event for contact info update for EU Representative. This is used as an indicator of what kind of event log this message is.

Event details
Event name CHANGE_EU_REPRESENTATIVE_CONTACT_INFO
Parameters
INFO_TYPE

string

Part of an audit log event for contact info update for EU Representative or Data Protection Officer. This will be used to state what kind of information was changed: email, name, phone or address. It's the INFO_TYPE placeholder in 'EU Representative {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}'. Possible values:

  • ADDRESS
    The address is expected to be a physical address of a person or institution.
  • EMAIL_ID
    The email_id here will be a regular email address in the form abc@xyz.com.
  • FULL_NAME
    A person's full name.
  • PHONE_NUMBER
    The phone number will be a phone number with an international extension.
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_EU_REPRESENTATIVE_CONTACT_INFO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
EU Representative {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

Generate Transfer Token

Event details
Event name GENERATE_TRANSFER_TOKEN
Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=GENERATE_TRANSFER_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Transfer token generated

Login Background Color Change

Event details
Event name CHANGE_LOGIN_BACKGROUND_COLOR
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new background color.

OLD_VALUE

string

The previous background color.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_LOGIN_BACKGROUND_COLOR&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Login background color for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Login Border Color Change

Event details
Event name CHANGE_LOGIN_BORDER_COLOR
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new border color.

OLD_VALUE

string

The previous border color.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_LOGIN_BORDER_COLOR&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Login border color for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Marketplace Login Audit Change

Event details
Event name CHANGE_LOGIN_ACTIVITY_TRACE
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new activity trace value.

OLD_VALUE

string

The previous activity trace value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_LOGIN_ACTIVITY_TRACE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Marketplace Login audit setting in {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

MDM vendor enrollment

Event details
Event name PLAY_FOR_WORK_ENROLL
Parameters
PLAY_FOR_WORK_MDM_VENDOR_NAME

string

The MDM vendor's name.

PLAY_FOR_WORK_TOKEN_ID

string

The MDM vendor enrollment token.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=PLAY_FOR_WORK_ENROLL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Enrolled for {PLAY_FOR_WORK_MDM_VENDOR_NAME} mobile device management services using token ({PLAY_FOR_WORK_TOKEN_ID})

MDM vendor unenrollment

Event details
Event name PLAY_FOR_WORK_UNENROLL
Parameters
PLAY_FOR_WORK_MDM_VENDOR_NAME

string

The MDM vendor's name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=PLAY_FOR_WORK_UNENROLL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Unenrolled from {PLAY_FOR_WORK_MDM_VENDOR_NAME} mobile device management services

MX Record Verification Claim

Event details
Event name MX_RECORD_VERIFICATION_CLAIM
Parameters
DOMAIN_NAME

string

The primary domain name.

USER_EMAIL

string

Primary email address of user who claimed to verify the MX records for the DOMAIN_NAME.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MX_RECORD_VERIFICATION_CLAIM&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{USER_EMAIL} claimed to verify the MX record for {DOMAIN_NAME}

New Service Update

Event details
Event name TOGGLE_AUTO_ADD_NEW_SERVICE
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_AUTO_ADD_NEW_SERVICE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Automatic addition for new services and pre-release features on {DOMAIN_NAME} changed to {NEW_VALUE}

Next Generation CPanel Setting Change

Event details
Event name TOGGLE_USE_NEXT_GEN_CONTROL_PANEL
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_USE_NEXT_GEN_CONTROL_PANEL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
The setting to enable the new Admin Console was changed to {NEW_VALUE} for {DOMAIN_NAME}

OAuth Certificate Upload

Event details
Event name UPLOAD_OAUTH_CERTIFICATE
Parameters
DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPLOAD_OAUTH_CERTIFICATE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
New OAuth certificate uploaded for {DOMAIN_NAME}

OAuth Consumer Secret Regenerate

Event details
Event name REGENERATE_OAUTH_CONSUMER_SECRET
Parameters
DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REGENERATE_OAUTH_CONSUMER_SECRET&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
New OAuth consumer secret generated for {DOMAIN_NAME}

OpenId Change

Event details
Event name TOGGLE_OPEN_ID_ENABLED
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_OPEN_ID_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
OpenId federated login for {DOMAIN_NAME} changed to {NEW_VALUE}

Organization Name Change

Event details
Event name CHANGE_ORGANIZATION_NAME
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new organization name.

OLD_VALUE

string

The previous organization name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ORGANIZATION_NAME&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Organization name for domain {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Outbound Relay Change

Event details
Event name TOGGLE_OUTBOUND_RELAY
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new value, either true or false.

OLD_VALUE

string

The previous value, either true or false.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_OUTBOUND_RELAY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Outbound relay for {DOMAIN_NAME} changed to {NEW_VALUE}

Password Maximum Length Change

Event details
Event name CHANGE_PASSWORD_MAX_LENGTH
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new maximum password length. The maximum length allowed by the API is 100 characters. For additional information, see the administration help center".

OLD_VALUE

string

The previous password length.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_PASSWORD_MAX_LENGTH&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Password maximum length for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Password Minimum Length Change

Event details
Event name CHANGE_PASSWORD_MIN_LENGTH
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new minimum password length. The minimum length allowed by the API is 8 characters. For additional information, see the administration help center".

OLD_VALUE

string

The previous password length.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_PASSWORD_MIN_LENGTH&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Password minimum length for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Primary Admin Change

Event details
Event name UPDATE_DOMAIN_PRIMARY_ADMIN_EMAIL
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new email address.

OLD_VALUE

string

The previous email address.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_DOMAIN_PRIMARY_ADMIN_EMAIL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
The primary admin for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Receive Email Notification Setting Change

Event details
Event name ENABLE_SERVICE_OR_FEATURE_NOTIFICATIONS
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENABLE_SERVICE_OR_FEATURE_NOTIFICATIONS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Receive email notification setting in {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Remove Application

Event details
Event name REMOVE_APPLICATION
Parameters
APP_ID

string

Application ID.

APPLICATION_NAME

string

The application's name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_APPLICATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Application {APPLICATION_NAME} with id {APP_ID} has been removed from the domain

Remove Application from Whitelist

Event details
Event name REMOVE_APPLICATION_FROM_WHITELIST
Parameters
APP_ID

string

Application ID.

APPLICATION_NAME

string

The application's name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_APPLICATION_FROM_WHITELIST&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Application {APPLICATION_NAME} with id {APP_ID} has been removed from whitelist for the domain

Renew Domain Registration Setting Change

Event details
Event name CHANGE_RENEW_DOMAIN_REGISTRATION
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The domain's new registration value.

OLD_VALUE

string

The domain's previous registration value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_RENEW_DOMAIN_REGISTRATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Renew domain registration setting in {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Reseller Access Change

Event details
Event name CHANGE_RESELLER_ACCESS
Parameters
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_RESELLER_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Reseller access changed from {OLD_VALUE} to {NEW_VALUE}

Rule Actions Change

Event details
Event name RULE_ACTIONS_CHANGED
Parameters
RULE_NAME

string

The name of the rule.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RULE_ACTIONS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule actions for {RULE_NAME} changed

Rule Creation

Event details
Event name CREATE_RULE
Parameters
RULE_NAME

string

The name of the rule.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule {RULE_NAME} has been created

Rule Criteria Change

Event details
Event name CHANGE_RULE_CRITERIA
Parameters
RULE_NAME

string

The name of the rule.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_RULE_CRITERIA&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule criteria for {RULE_NAME} has been changed

Rule Deletion

Event details
Event name DELETE_RULE
Parameters
RULE_NAME

string

The name of the rule.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule {RULE_NAME} has been deleted

Rule Rename

Event details
Event name RENAME_RULE
Parameters
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RENAME_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule {OLD_VALUE} has been renamed to {NEW_VALUE}

Rule Status Change

Event details
Event name RULE_STATUS_CHANGED
Parameters
NEW_VALUE

string

The new SETTING_NAME value.

OLD_VALUE

string

The previous SETTING_NAME value.

RULE_NAME

string

The name of the rule.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RULE_STATUS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule status for {RULE_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Secondary Domain Creation

Event details
Event name ADD_SECONDARY_DOMAIN
Parameters
DOMAIN_NAME

string

The primary domain name.

SECONDARY_DOMAIN_NAME

string

The new additional domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_SECONDARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
An unverified {SECONDARY_DOMAIN_NAME} created as a secondary domain of {DOMAIN_NAME}

Secondary Domain Deletion

Event details
Event name REMOVE_SECONDARY_DOMAIN
Parameters
DOMAIN_NAME

string

The primary domain name.

SECONDARY_DOMAIN_NAME

string

The removed secondary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_SECONDARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SECONDARY_DOMAIN_NAME} deleted as a secondary domain of {DOMAIN_NAME}

Secondary Domain MX Verification

Event details
Event name VERIFY_SECONDARY_DOMAIN_MX
Parameters
DOMAIN_NAME

string

The primary domain name.

SECONDARY_DOMAIN_NAME

string

The secondary domain name. For more information about MX records and mailflow, see the administration help center.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_SECONDARY_DOMAIN_MX&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Verified MX records of secondary domain {SECONDARY_DOMAIN_NAME} of domain {DOMAIN_NAME}

Secondary Domain Verification

Event details
Event name VERIFY_SECONDARY_DOMAIN
Parameters
DOMAIN_NAME

string

The primary domain name.

SECONDARY_DOMAIN_NAME

string

The secondary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_SECONDARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SECONDARY_DOMAIN_NAME} verified as a secondary domain of {DOMAIN_NAME}

Secondary Email Change

Event details
Event name UPDATE_DOMAIN_SECONDARY_EMAIL
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new email address.

OLD_VALUE

string

The previous email address.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_DOMAIN_SECONDARY_EMAIL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
The secondary email for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

SSO Setting Change

Event details
Event name CHANGE_SSO_SETTINGS
Parameters
DOMAIN_NAME

string

The primary domain name.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_SSO_SETTINGS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
SSO settings changed for {DOMAIN_NAME}

Support PIN Generation

Event details
Event name GENERATE_PIN
Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=GENERATE_PIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Customer support PIN generated

Update rule

Update rule event name.

Event details
Event name UPDATE_RULE
Parameters
RULE_NAME

string

The name of the rule.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule {RULE_NAME} has been updated