Reports API: Mobile Audit Activity Report

The Mobile audit activity report returns information on all activities in a mobile device with Work account, managed by Google Mobile Management. Each report uses the basic report endpoint request with report-specific parameters such as a user's email. The maximum time period for each report is the last 180 days.

The mobile audit activity report may be used only for lawful purposes in accordance with your Customer Agreement. These reports are only available for accounts which have license assigned for one of the following SKUs:

  • G Suite Business
  • G Suite Enterprise

Retrieve G Suite mobile audit events for a domain

To retrieve all mobile audit events for all users within your domain, use the following GET HTTP request and include the authorization token described in the authorization documentation. For more information about the request query strings and response properties, see the API Reference. For readability purposes, the following example is formatted with line returns:

GET https://www.googleapis.com/admin/reports/v1/activity/users/all
/applications/mobile?endTime=end date&startTime=start date
&maxResults=maximum number of events returned on a response page

The following example gets a report on all of your account's mobile audit events for the past 180 days. The maxResults query parameter has this report return 25 results per page.

GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?maxResults=25

The following example gets a report on all of a customer's mobile audit events for the past 180 days. The customerId specifies which customer the report is to be retrieved for.

GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?customerId=C03az79cb

Retrieve G Suite mobile audit events by event name

In some instances, you may want to retrieve specific events, such as suspicious activity events. To do this, use a GET HTTP request of the following form:

GET https://www.googleapis.com/admin/reports/v1/activity/users/all
/applications/mobile?maxResults=maximum number of events returned on a response page
&eventName=name of the mobile event
&filters=event parameter relational operator parameter value

The following example shows how to retrieve all suspicious actvity events for Android users within the domain:

GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?eventName=SUSPICIOUS_ACTIVITY_EVENT&filters=DEVICE_TYPE==ANDROID&maxResults=25