Admin Audit Activity Events - Domain Settings

This document lists the events and parameters for Domain Settings Admin Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=admin.

Domain Settings

Events of this type are returned with type=DOMAIN_SETTINGS.

Account Automatic Renewal Change

Event details
Event name	CHANGE_ACCOUNT_AUTO_RENEWAL
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new renewal strategy. Possible values: NON_AUTO_RENEWAL RENEWAL_BY_LICENSES RENEWAL_BY_USERS .
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ACCOUNT_AUTO_RENEWAL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Account automatic renewal changed to {NEW_VALUE} on {DOMAIN_NAME}

Add Application

Event details
Event name	ADD_APPLICATION
Parameters	APP_ID string Application ID. APPLICATION_ENABLED string Application enabled. APPLICATION_NAME string The application's name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_APPLICATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Application {APPLICATION_NAME} with id {APP_ID} has been added to the domain

Add Application to Whitelist

Event details
Event name	ADD_APPLICATION_TO_WHITELIST
Parameters	APP_ID string Application ID. APPLICATION_NAME string The application's name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_APPLICATION_TO_WHITELIST&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Application {APPLICATION_NAME} with id {APP_ID} has been added to whitelist for the domain

Advertisement Option Change

Event details
Event name	CHANGE_ADVERTISEMENT_OPTION
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new advertising option. OLD_VALUE string The previous advertising option.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ADVERTISEMENT_OPTION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Advertisement option for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Alert Creation

Event details
Event name	CREATE_ALERT
Parameters	ALERT_NAME string The name of the alert.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_ALERT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Alert {ALERT_NAME} has been created

Alert Criteria Change

Event details
Event name	CHANGE_ALERT_CRITERIA
Parameters	ALERT_NAME string The name of the alert.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ALERT_CRITERIA&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Alert criteria for {ALERT_NAME} has been changed

Alert Deletion

Event details
Event name	DELETE_ALERT
Parameters	ALERT_NAME string The name of the alert.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_ALERT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Alert {ALERT_NAME} has been deleted

Alert Receivers Change

Event details
Event name	ALERT_RECEIVERS_CHANGED
Parameters	ALERT_NAME string The name of the alert. NEW_VALUE string A comma-separated list of new alert receivers. OLD_VALUE string A comma-separated list of old alert receivers.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ALERT_RECEIVERS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Alert receivers for {ALERT_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Alert Rename

Event details
Event name	RENAME_ALERT
Parameters	NEW_VALUE string The new value of the alert name. OLD_VALUE string The previous value of the alert name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RENAME_ALERT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Alert {OLD_VALUE} has been renamed to {NEW_VALUE}

Alert Status Change

Event details
Event name	ALERT_STATUS_CHANGED
Parameters	ALERT_NAME string The name of the alert. NEW_VALUE string The new value of the alert name. Can be on or off. OLD_VALUE string The previous value of the alert name. Can be on or off.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ALERT_STATUS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Alert status for {ALERT_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Alias Creation

Event details
Event name	ADD_DOMAIN_ALIAS
Parameters	DOMAIN_ALIAS string The new domain alias. For more information about a domain alias, see the administration help center. DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_DOMAIN_ALIAS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	An unverified {DOMAIN_ALIAS} created as an alias of {DOMAIN_NAME}

Alias Deletion

Event details
Event name	REMOVE_DOMAIN_ALIAS
Parameters	DOMAIN_ALIAS string The removed domain alias. For more information about a domain alias, see the administration help center. DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_DOMAIN_ALIAS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{DOMAIN_ALIAS} deleted as an alias of {DOMAIN_NAME}

Alias MX Record Setup Skipped

Event details
Event name	SKIP_DOMAIN_ALIAS_MX
Parameters	DOMAIN_ALIAS string The domain alias. For more information about a domain alias, see the administration help center. DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=SKIP_DOMAIN_ALIAS_MX&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Skipped MX record setup of alias {DOMAIN_ALIAS} of domain {DOMAIN_NAME}

Alias MX Record Verification

Event details
Event name	VERIFY_DOMAIN_ALIAS_MX
Parameters	DOMAIN_ALIAS string The domain alias. For more information about a domain alias, see the administration help center. DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_DOMAIN_ALIAS_MX&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Verified MX record of alias {DOMAIN_ALIAS} of domain {DOMAIN_NAME}

Alias Verification

Event details
Event name	VERIFY_DOMAIN_ALIAS
Parameters	DOMAIN_ALIAS string The domain alias. For more information about a domain alias, see the administration help center. DOMAIN_NAME string The primary domain name. DOMAIN_VERIFICATION_METHOD string The domain verification method. Possible values: DNS ANALYTICS META_TAG HTML_FILE .
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_DOMAIN_ALIAS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{DOMAIN_ALIAS} verified as an alias of {DOMAIN_NAME} using {DOMAIN_VERIFICATION_METHOD}

All API OAuth Access Change

Event details
Event name	TOGGLE_OAUTH_ACCESS_TO_ALL_APIS
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_OAUTH_ACCESS_TO_ALL_APIS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	OAuth access for all APIs changed to {NEW_VALUE} for your organization

Allow Admin Password Reset

Event details
Event name	TOGGLE_ALLOW_ADMIN_PASSWORD_RESET
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_ALLOW_ADMIN_PASSWORD_RESET&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Allow admin password reset setting changed to {NEW_VALUE}

API Access Change

Event details
Event name	ENABLE_API_ACCESS
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false. OLD_VALUE string The previous value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENABLE_API_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	API access for your organization changed from {OLD_VALUE} to {NEW_VALUE}

API Client Access Authorize

Event details
Event name	AUTHORIZE_API_CLIENT_ACCESS
Parameters	API_CLIENT_NAME string API Client Name. API_SCOPES string The API scopes. DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=AUTHORIZE_API_CLIENT_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	API client access to your organization from client {API_CLIENT_NAME} authorized for scopes {API_SCOPES}

API Client Access Remove

Event details
Event name	REMOVE_API_CLIENT_ACCESS
Parameters	API_CLIENT_NAME string The API client name. For more information about managing API client access, see the administration help center. DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_API_CLIENT_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	API client access to your organization from client {API_CLIENT_NAME} removed

App Licenses Redeemed

Licenses redeemed event name.

Event details
Event name	CHROME_LICENSES_REDEEMED
Parameters	APP_LICENSES_ORDER_NUMBER string Order number used to redeem licenses. APPLICATION_NAME string The application's name. CHROME_NUM_LICENSES_PURCHASED integer Number of licences purchased.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHROME_LICENSES_REDEEMED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{CHROME_NUM_LICENSES_PURCHASED} app licenses redeemed for application {APPLICATION_NAME} using order {APP_LICENSES_ORDER_NUMBER}

Automatic Addition Update

Event details
Event name	TOGGLE_AUTO_ADD_NEW_SERVICE
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new SETTING_NAME value that was set during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_AUTO_ADD_NEW_SERVICE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Automatic addition for new services and pre-release features for your organization changed to {NEW_VALUE}

Change Primary Domain Name

Event details
Event name	CHANGE_PRIMARY_DOMAIN
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new SETTING_NAME value that was set during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_PRIMARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Primary domain name changed from {DOMAIN_NAME} to {NEW_VALUE}

Change Whitelist Setting

Event details
Event name	CHANGE_WHITELIST_SETTING
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event. SETTING_NAME string The unique name (ID) of the setting that was changed.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_WHITELIST_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{SETTING_NAME} changed from {OLD_VALUE} to {NEW_VALUE} for the domain

Communication Preferences Setting Change

Event details
Event name	COMMUNICATION_PREFERENCES_SETTING_CHANGE
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event. SETTING_NAME string The unique name (ID) of the setting that was changed.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=COMMUNICATION_PREFERENCES_SETTING_CHANGE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{SETTING_NAME} setting in Communication Preferences changed from {OLD_VALUE} to {NEW_VALUE} (Domain Name : {DOMAIN_NAME})

Conflict Account Action Change

Event details
Event name	CHANGE_CONFLICT_ACCOUNT_ACTION
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new conflict resolution action to take. Possible values: ASSIGN_ON_CONFLICT INVITE_ON_CONFLICT ASK_ON_CONFLICT . OLD_VALUE string The previous conflict resolution action.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CONFLICT_ACCOUNT_ACTION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Conflict account action for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Contact for Feedback Setting Change

Event details
Event name	ENABLE_FEEDBACK_SOLICITATION
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false. OLD_VALUE string The previous value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENABLE_FEEDBACK_SOLICITATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Can contact for feedback setting for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Contact Sharing Change

Event details
Event name	TOGGLE_CONTACT_SHARING
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_CONTACT_SHARING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Contact sharing changed to {NEW_VALUE}

Create MDM vendor enrollment token

Event details
Event name	CREATE_PLAY_FOR_WORK_TOKEN
Parameters	PLAY_FOR_WORK_TOKEN_ID string The MDM vendor enrollment token.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_PLAY_FOR_WORK_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	MDM vendor enrollment token ({PLAY_FOR_WORK_TOKEN_ID}) created

Custom Logo Change

Event details
Event name	TOGGLE_USE_CUSTOM_LOGO
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false. To learn more about custom logos, see the administration help center.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_USE_CUSTOM_LOGO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Use custom logo changed to {NEW_VALUE}

Custom Logo Upload

Event details
Event name	CHANGE_CUSTOM_LOGO
Parameters	DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CUSTOM_LOGO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	New custom logo uploaded for your organization

Data Localization For Russian Federation Change

Event details
Event name	CHANGE_DATA_LOCALIZATION_FOR_RUSSIA
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event. ORG_UNIT_NAME string The organizational unit (OU) name (path).
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DATA_LOCALIZATION_FOR_RUSSIA&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Setting for Data Localization for Russian Federation changed from {OLD_VALUE} to {NEW_VALUE}

Data Localization Setting Change

Event details
Event name	CHANGE_DATA_LOCALIZATION_SETTING
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event. ORG_UNIT_NAME string The organizational unit (OU) name (path).
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DATA_LOCALIZATION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Setting for Data Localization changed from {OLD_VALUE} to {NEW_VALUE}

Data Protection Officer Contact Information Change

Part of an audit log event for contact info update for Data Protection Officer. This is used as an indicator of what kind of event log this message is.

Event details
Event name	CHANGE_DATA_PROTECTION_OFFICER_CONTACT_INFO
Parameters	INFO_TYPE string Part of an audit log event for contact info update for EU Representative or Data Protection Officer. This will be used to state what kind of information was changed: email, name, phone or address. It's the INFO_TYPE placeholder in 'EU Representative {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}'. Possible values: ADDRESS The address is expected to be a physical address of a person or institution. EMAIL_ID The email_id here will be a regular email address in the form [e-mail]. FULL_NAME A person's full name. PHONE_NUMBER The phone number will be a phone number with an international extension. NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DATA_PROTECTION_OFFICER_CONTACT_INFO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Data Protection Officer {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

Delete MDM vendor enrollment token

Event details
Event name	DELETE_PLAY_FOR_WORK_TOKEN
Parameters	PLAY_FOR_WORK_TOKEN_ID string The MDM vendor enrollment token.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_PLAY_FOR_WORK_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	MDM vendor enrollment token ({PLAY_FOR_WORK_TOKEN_ID}) deleted

DNS console login details viewed

Event details
Event name	VIEW_DNS_LOGIN_DETAILS
Parameters	DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VIEW_DNS_LOGIN_DETAILS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	DNS console login details for {DOMAIN_NAME} viewed

Domain Default Locale Change

Event details
Event name	CHANGE_DOMAIN_DEFAULT_LOCALE
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new locale. OLD_VALUE string The previous locale.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_DEFAULT_LOCALE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Default locale for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Domain Default Timezone Change

Event details
Event name	CHANGE_DOMAIN_DEFAULT_TIMEZONE
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new default timezone. OLD_VALUE string The previous default timezone.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_DEFAULT_TIMEZONE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Default time zone for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Domain Name Change

Event details
Event name	CHANGE_DOMAIN_NAME
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_NAME&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Change of domain name for {DOMAIN_NAME} to {NEW_VALUE} started

Domain Pre-release Setting Change

Event details
Event name	TOGGLE_ENABLE_PRE_RELEASE_FEATURES
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_ENABLE_PRE_RELEASE_FEATURES&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Pre-release features for your organization was set to {NEW_VALUE}

Domain Support Message Change

Event details
Event name	CHANGE_DOMAIN_SUPPORT_MESSAGE
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new domain support message. OLD_VALUE string The previous domain support message.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOMAIN_SUPPORT_MESSAGE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Support message for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Domains added to Trusted Domains

Event details
Event name	ADD_TRUSTED_DOMAINS
Parameters	DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_TRUSTED_DOMAINS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Domains {DOMAIN_NAME} added to Trusted Domains list

Domains removed from Trusted Domains

Event details
Event name	REMOVE_TRUSTED_DOMAINS
Parameters	DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_TRUSTED_DOMAINS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Domains {DOMAIN_NAME} removed from Trusted Domains list

Education Organization Type Change

Event details
Event name	CHANGE_EDU_TYPE
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_EDU_TYPE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Educational organization type changed from {OLD_VALUE} to {NEW_VALUE}

Enable OAuth Consumer Key

Event details
Event name	TOGGLE_ENABLE_OAUTH_CONSUMER_KEY
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_ENABLE_OAUTH_CONSUMER_KEY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Enabling OAuth consumer key changed to {NEW_VALUE} for your organization

Enable SSO Change

Event details
Event name	TOGGLE_SSO_ENABLED
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_SSO_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Enable SSO changed to {NEW_VALUE} for {DOMAIN_NAME}

Enforce SSL Change

Event details
Event name	TOGGLE_SSL
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_SSL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	SSL Enforcement changed to {NEW_VALUE} for {DOMAIN_NAME}

EU Representative Contact Information Change

Part of an audit log event for contact info update for EU Representative. This is used as an indicator of what kind of event log this message is.

Event details
Event name	CHANGE_EU_REPRESENTATIVE_CONTACT_INFO
Parameters	INFO_TYPE string Part of an audit log event for contact info update for EU Representative or Data Protection Officer. This will be used to state what kind of information was changed: email, name, phone or address. It's the INFO_TYPE placeholder in 'EU Representative {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}'. Possible values: ADDRESS The address is expected to be a physical address of a person or institution. EMAIL_ID The email_id here will be a regular email address in the form [e-mail]. FULL_NAME A person's full name. PHONE_NUMBER The phone number will be a phone number with an international extension. NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_EU_REPRESENTATIVE_CONTACT_INFO&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	EU Representative {INFO_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

Generate Transfer Token

Event details
Event name	GENERATE_TRANSFER_TOKEN
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=GENERATE_TRANSFER_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Transfer token generated

Login Background Color Change

Event details
Event name	CHANGE_LOGIN_BACKGROUND_COLOR
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new background color. OLD_VALUE string The previous background color.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_LOGIN_BACKGROUND_COLOR&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Login background color for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Login Border Color Change

Event details
Event name	CHANGE_LOGIN_BORDER_COLOR
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new border color. OLD_VALUE string The previous border color.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_LOGIN_BORDER_COLOR&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Login border color for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Marketplace Login Audit Change

Event details
Event name	CHANGE_LOGIN_ACTIVITY_TRACE
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new activity trace value. OLD_VALUE string The previous activity trace value.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_LOGIN_ACTIVITY_TRACE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Marketplace Login audit setting in {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

MDM vendor enrollment

Event details
Event name	PLAY_FOR_WORK_ENROLL
Parameters	PLAY_FOR_WORK_MDM_VENDOR_NAME string The MDM vendor's name. PLAY_FOR_WORK_TOKEN_ID string The MDM vendor enrollment token.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=PLAY_FOR_WORK_ENROLL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Enrolled for {PLAY_FOR_WORK_MDM_VENDOR_NAME} mobile device management services using token ({PLAY_FOR_WORK_TOKEN_ID})

MDM vendor unenrollment

Event details
Event name	PLAY_FOR_WORK_UNENROLL
Parameters	PLAY_FOR_WORK_MDM_VENDOR_NAME string The MDM vendor's name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=PLAY_FOR_WORK_UNENROLL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Unenrolled from {PLAY_FOR_WORK_MDM_VENDOR_NAME} mobile device management services

MX Record Verification Claim

Event details
Event name	MX_RECORD_VERIFICATION_CLAIM
Parameters	DOMAIN_NAME string The primary domain name. USER_EMAIL string Primary email address of user who claimed to verify the MX records for the DOMAIN_NAME.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MX_RECORD_VERIFICATION_CLAIM&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{USER_EMAIL} claimed to verify the MX record for {DOMAIN_NAME}

New App Features Update

Event details
Event name	TOGGLE_NEW_APP_FEATURES
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_NEW_APP_FEATURES&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	New app features for your organization changed to {NEW_VALUE}

Next Generation CPanel Setting Change

Event details
Event name	TOGGLE_USE_NEXT_GEN_CONTROL_PANEL
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_USE_NEXT_GEN_CONTROL_PANEL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	The setting to enable the new Admin Console changed to {NEW_VALUE} for your organization

OAuth Certificate Upload

Event details
Event name	UPLOAD_OAUTH_CERTIFICATE
Parameters	DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPLOAD_OAUTH_CERTIFICATE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	New OAuth certificate uploaded for your organization

OAuth Consumer Secret Regenerate

Event details
Event name	REGENERATE_OAUTH_CONSUMER_SECRET
Parameters	DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REGENERATE_OAUTH_CONSUMER_SECRET&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	New OAuth consumer secret generated for your organization

OpenId Change

Event details
Event name	TOGGLE_OPEN_ID_ENABLED
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_OPEN_ID_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	OpenId federated login for {DOMAIN_NAME} changed to {NEW_VALUE}

Organization Name Change

Event details
Event name	CHANGE_ORGANIZATION_NAME
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new organization name. OLD_VALUE string The previous organization name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_ORGANIZATION_NAME&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Organization name changed from {OLD_VALUE} to {NEW_VALUE}

Outbound Relay Change

Event details
Event name	TOGGLE_OUTBOUND_RELAY
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new value, either true or false. OLD_VALUE string The previous value, either true or false. ORG_UNIT_NAME string The organizational unit (OU) name (path).
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_OUTBOUND_RELAY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Outbound relay for your organization changed to {NEW_VALUE}

Password Maximum Length Change

Event details
Event name	CHANGE_PASSWORD_MAX_LENGTH
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new maximum password length. The maximum length allowed by the API is 100 characters. For additional information, see the administration help center". OLD_VALUE string The previous password length.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_PASSWORD_MAX_LENGTH&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Password maximum length for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Password Minimum Length Change

Event details
Event name	CHANGE_PASSWORD_MIN_LENGTH
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new minimum password length. The minimum length allowed by the API is 8 characters. For additional information, see the administration help center". OLD_VALUE string The previous password length.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_PASSWORD_MIN_LENGTH&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Password minimum length for {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Primary Admin Change

Event details
Event name	UPDATE_DOMAIN_PRIMARY_ADMIN_EMAIL
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new email address. OLD_VALUE string The previous email address.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_DOMAIN_PRIMARY_ADMIN_EMAIL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Primary admin for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Receive Email Notification Setting Change

Event details
Event name	ENABLE_SERVICE_OR_FEATURE_NOTIFICATIONS
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ENABLE_SERVICE_OR_FEATURE_NOTIFICATIONS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Receive email notification setting for your organization changed from {OLD_VALUE} to {NEW_VALUE}

Remove Application

Event details
Event name	REMOVE_APPLICATION
Parameters	APP_ID string Application ID. APPLICATION_NAME string The application's name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_APPLICATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Application {APPLICATION_NAME} with id {APP_ID} has been removed from the domain

Remove Application from Whitelist

Event details
Event name	REMOVE_APPLICATION_FROM_WHITELIST
Parameters	APP_ID string Application ID. APPLICATION_NAME string The application's name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_APPLICATION_FROM_WHITELIST&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Application {APPLICATION_NAME} with id {APP_ID} has been removed from whitelist for the domain

Renew Domain Registration Setting Change

Event details
Event name	CHANGE_RENEW_DOMAIN_REGISTRATION
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The domain's new registration value. OLD_VALUE string The domain's previous registration value.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_RENEW_DOMAIN_REGISTRATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Renew domain registration setting in {DOMAIN_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Reseller Access Change

Event details
Event name	CHANGE_RESELLER_ACCESS
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_RESELLER_ACCESS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Reseller access changed from {OLD_VALUE} to {NEW_VALUE}

Reseller Access Change for SKU

Event details
Event name	CHANGE_RESELLER_ACCESS_FOR_SKU
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event. SKU_NAME string The SKU name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_RESELLER_ACCESS_FOR_SKU&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Reseller access for {SKU_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Rule Actions Change

Event details
Event name	RULE_ACTIONS_CHANGED
Parameters	RULE_NAME string The name of the rule.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RULE_ACTIONS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Rule actions for {RULE_NAME} changed

Rule Creation

Event details
Event name	CREATE_RULE
Parameters	RULE_NAME string The name of the rule.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Rule {RULE_NAME} has been created

Rule Criteria Change

Event details
Event name	CHANGE_RULE_CRITERIA
Parameters	RULE_NAME string The name of the rule.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_RULE_CRITERIA&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Rule criteria for {RULE_NAME} has been changed

Rule Deletion

Event details
Event name	DELETE_RULE
Parameters	RULE_NAME string The name of the rule.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Rule {RULE_NAME} has been deleted

Rule Rename

Event details
Event name	RENAME_RULE
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RENAME_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Rule {OLD_VALUE} has been renamed to {NEW_VALUE}

Rule Status Change

Event details
Event name	RULE_STATUS_CHANGED
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. OLD_VALUE string The previous SETTING_NAME value that was replaced during this event. RULE_NAME string The name of the rule.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=RULE_STATUS_CHANGED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Rule status for {RULE_NAME} changed from {OLD_VALUE} to {NEW_VALUE}

Secondary Domain Creation

Event details
Event name	ADD_SECONDARY_DOMAIN
Parameters	DOMAIN_NAME string The primary domain name. SECONDARY_DOMAIN_NAME string The new additional domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ADD_SECONDARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	An unverified {SECONDARY_DOMAIN_NAME} created as a secondary domain of {DOMAIN_NAME}

Secondary Domain Deletion

Event details
Event name	REMOVE_SECONDARY_DOMAIN
Parameters	DOMAIN_NAME string The primary domain name. SECONDARY_DOMAIN_NAME string The removed secondary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_SECONDARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{SECONDARY_DOMAIN_NAME} deleted as a secondary domain of {DOMAIN_NAME}

Secondary Domain MX Record Setup Skipped

Event details
Event name	SKIP_SECONDARY_DOMAIN_MX
Parameters	DOMAIN_NAME string The primary domain name. SECONDARY_DOMAIN_NAME string The secondary domain name. For more information about MX records and mailflow, see the administration help center.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=SKIP_SECONDARY_DOMAIN_MX&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Skipped MX record setup of secondary domain {SECONDARY_DOMAIN_NAME} of domain {DOMAIN_NAME}

Secondary Domain MX Verification

Event details
Event name	VERIFY_SECONDARY_DOMAIN_MX
Parameters	DOMAIN_NAME string The primary domain name. SECONDARY_DOMAIN_NAME string The secondary domain name. For more information about MX records and mailflow, see the administration help center.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_SECONDARY_DOMAIN_MX&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Verified MX records of secondary domain {SECONDARY_DOMAIN_NAME} of domain {DOMAIN_NAME}

Secondary Domain Verification

Event details
Event name	VERIFY_SECONDARY_DOMAIN
Parameters	DOMAIN_NAME string The primary domain name. SECONDARY_DOMAIN_NAME string The secondary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=VERIFY_SECONDARY_DOMAIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{SECONDARY_DOMAIN_NAME} verified as a secondary domain of {DOMAIN_NAME}

Secondary Email Change

Event details
Event name	UPDATE_DOMAIN_SECONDARY_EMAIL
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The new email address. OLD_VALUE string The previous email address.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_DOMAIN_SECONDARY_EMAIL&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Secondary email for your organization changed from {OLD_VALUE} to {NEW_VALUE}

SSO Setting Change

Event details
Event name	CHANGE_SSO_SETTINGS
Parameters	DOMAIN_NAME string The primary domain name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_SSO_SETTINGS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	SSO settings changed for {DOMAIN_NAME}

Support PIN Generation

Event details
Event name	GENERATE_PIN
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=GENERATE_PIN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Customer support PIN generated

Update rule

Update rule event name.

Event details
Event name	UPDATE_RULE
Parameters	RULE_NAME string The name of the rule.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_RULE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Rule {RULE_NAME} has been updated