Enterprise Groups Audit Activity Events

This document lists the events and parameters for various types of Enterprise Groups Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=groups_enterprise.

Enterprise Groups Audit activities can also be forwarded to Google Cloud Audit Logs. For more information, see Share data with Google Cloud Platform services.

Moderator action

Action performed by moderator. Events of this type are returned with type=moderator_action.

Accept Invitation

Member accepted an invitation to join a group.

Event details
Event name	accept_invitation
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=accept_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} accepted an invitation to group {group_id}

Add Info Setting

Group info setting was added.

Event details
Event name	add_info_setting
Parameters	group_id string Identifier of the target group. info_setting string Group info setting. namespace string Namespace of the target group. value string Value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added {info_setting} with value {value} in group {group_id} for the {namespace} namespace

Add Member

Member was added to a group.

Event details
Event name	add_member
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_role string The role assigned to the member in the context of the group, such as owner, manager, or member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added {member_type} {member_id} to group {group_id} with role {member_role}

Add Member Role

Role was added to a member in a group.

Event details
Event name	add_member_role
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_role string The role assigned to the member in the context of the group, such as owner, manager, or member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_member_role&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added role(s) {member_role} for {member_type} {member_id} in group {group_id}

Add Security Setting

Group security setting was added.

Event details
Event name	add_security_setting
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group. security_setting string Group security setting. value string Value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added {security_setting} with value {value} in group {group_id} for the {namespace} namespace

Add Service Account Permission

Permission was added to a service account.

Event details
Event name	add_service_account_permission
Parameters	member_id string Identifier of the member. member_role string The role assigned to the member in the context of the group, such as owner, manager, or member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_service_account_permission&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added {member_role} permission to {member_type} {member_id} for the {namespace} namespace

Approve Join Request

Member approved a join request.

Event details
Event name	approve_join_request
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=approve_join_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} approved join request from {member_type} {member_id} to group {group_id}

Ban Member including with Moderation

Member was banned from group directly or with moderation.

Event details
Event name	ban_member_with_moderation
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=ban_member_with_moderation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} banned {member_type} {member_id} from group {group_id} during message moderation

Change Info Setting

Group info setting was changed.

Event details
Event name	change_info_setting
Parameters	group_id string Identifier of the target group. info_setting string Group info setting. namespace string Namespace of the target group. new_value string New value of a group setting. old_value string Old value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} changed {info_setting} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace

Change Security Setting

Group security setting was changed.

Event details
Event name	change_security_setting
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group. new_value string New value of a group setting. old_value string Old value of a group setting. security_setting string Group security setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} changed {security_setting} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace

Create Group

Group was created.

Event details
Event name	create_group
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=create_group&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} created group {group_id} for the {namespace} namespace

Create Namespace

Namespace was created.

Event details
Event name	create_namespace
Parameters	namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=create_namespace&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} created a namespace {namespace}

Delete Group

Group was deleted.

Event details
Event name	delete_group
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=delete_group&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} deleted group {group_id} for the {namespace} namespace

Delete Namespace

Namespace was deleted.

Event details
Event name	delete_namespace
Parameters	namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=delete_namespace&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} deleted a namespace {namespace}

Dynamic Group query was added

Dynamic Group query add event name.

Event details
Event name	add_dynamic_group_query
Parameters	dynamic_group_query string Dynamic group query. group_id string Identifier of the target group. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_dynamic_group_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added dynamic group query with value {dynamic_group_query} in group {group_id} for the {namespace} namespace

Dynamic Group query was changed

Dynamic Group query change event name.

Event details
Event name	change_dynamic_group_query
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group. new_value string New value of a group setting. old_value string Old value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_dynamic_group_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} changed dynamic group query from {old_value} to {new_value} in group {group_id} for the {namespace} namespace

Invite Member

Member was invited to a group.

Event details
Event name	invite_member
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=invite_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} invited {member_type} {member_id} to group {group_id}

Join

Member added themself to a group.

Event details
Event name	join
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=join&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added themself to group {group_id}

Membership expiration added

Membership expiration added event name.

Event details
Event name	add_membership_expiry
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. membership_expiry string Membership expiration time.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added membership expiration with value {membership_expiry} for {member_type} {member_id} in group {group_id}

Membership expiration removed

Membership expiration removed event name.

Event details
Event name	remove_membership_expiry
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. old_value string Old value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed membership expiration for {member_type} {member_id} in group {group_id}

Membership expiration updated

Membership expiration updated event name.

Event details
Event name	update_membership_expiry
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. new_value string New value of a group setting. old_value string Old value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=update_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} changed membership expiration of {member_type} {member_id} from {old_value} to {new_value} in group {group_id}

Reject Invitation

Member rejected an invitation to join a group.

Event details
Event name	reject_invitation
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=reject_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} rejected an invitation to group {group_id}

Reject Join Request

Member rejected a join request.

Event details
Event name	reject_join_request
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=reject_join_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} rejected join request from {member_type} {member_id} to group {group_id}

Remove Info Setting

Group info setting was removed.

Event details
Event name	remove_info_setting
Parameters	group_id string Identifier of the target group. info_setting string Group info setting. namespace string Namespace of the target group. value string Value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed {info_setting} with value {value} in group {group_id} for the {namespace} namespace

Remove Member

Member was removed from a group.

Event details
Event name	remove_member
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed {member_type} {member_id} from group {group_id}

Remove Member Role

Role was removed for a member in a group.

Event details
Event name	remove_member_role
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_role string The role assigned to the member in the context of the group, such as owner, manager, or member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_member_role&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed role(s) {member_role} for {member_type} {member_id} in group {group_id}

Remove Security Setting

Group security setting was removed.

Event details
Event name	remove_security_setting
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group. security_setting string Group security setting. value string Value of a group setting.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed {security_setting} with value {value} in group {group_id} for the {namespace} namespace

Remove Service Account Permission

Permission was removed for a service account.

Event details
Event name	remove_service_account_permission
Parameters	member_id string Identifier of the member. member_role string The role assigned to the member in the context of the group, such as owner, manager, or member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_service_account_permission&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed {member_role} permission of {member_type} {member_id} for the {namespace} namespace

Request to Join

Member requested to join a group.

Event details
Event name	request_to_join
Parameters	group_id string Identifier of the target group. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=request_to_join&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} requested to join group {group_id}

Revoke Invitation

Member revoked an invitation sent to another user.

Event details
Event name	revoke_invitation
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=revoke_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} revoked invitation to {member_type} {member_id} from group {group_id}

Unban Member

Member was unbanned from a group.

Event details
Event name	unban_member
Parameters	group_id string Identifier of the target group. member_id string Identifier of the member. member_type string A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. namespace string Namespace of the target group.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=unban_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed ban for {member_type} {member_id} for group {group_id}