# SensitiveAdminAction

- [JSON representation](https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SensitiveAdminAction#SCHEMA_REPRESENTATION)
- [SuperAdminPasswordResetEvent](https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SensitiveAdminAction#SuperAdminPasswordResetEvent)
  - [JSON representation](https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SensitiveAdminAction#SuperAdminPasswordResetEvent.SCHEMA_REPRESENTATION)

Alert that is triggered when Sensitive Admin Action occur in customer account.

| JSON representation |
|---|
| ``` { "eventTime": string, "actorEmail": string, "primaryAdminChangedEvent": { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/PrimaryAdminChangedEvent`) }, "ssoProfileCreatedEvent": { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SSOProfileCreatedEvent`) }, "ssoProfileUpdatedEvent": { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SSOProfileUpdatedEvent`) }, "ssoProfileDeletedEvent": { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SSOProfileDeletedEvent`) }, "superAdminPasswordResetEvent": { object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SensitiveAdminAction#SuperAdminPasswordResetEvent`) } } ``` |

| Fields ||
|---|---|
| `eventTime` | ``string (`https://protobuf.dev/reference/protobuf/google.protobuf#timestamp` format)`` The time at which event occurred |
| `actorEmail` | `string` Email of person who performed the action |
| Union field `action`. Sensitive event which have occurred `action` can be only one of the following: ||
| `primaryAdminChangedEvent` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/PrimaryAdminChangedEvent`)`` Event occurred when primary admin changed in customer's account |
| `ssoProfileCreatedEvent` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SSOProfileCreatedEvent`)`` Event occurred when SSO Profile created in customer's account |
| `ssoProfileUpdatedEvent` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SSOProfileUpdatedEvent`)`` Event occurred when SSO Profile updated in customer's account |
| `ssoProfileDeletedEvent` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SSOProfileDeletedEvent`)`` Event occurred when SSO Profile deleted in customer's account |
| `superAdminPasswordResetEvent` | ``object (`https://developers.google.com/workspace/admin/alertcenter/reference/rest/v1beta1/SensitiveAdminAction#SuperAdminPasswordResetEvent`)`` Event occurred when password was reset for super admin in customer's account |

## SuperAdminPasswordResetEvent

Event occurred when password was reset for super admin in customer's account. The event are being received from insight forwarder

| JSON representation |
|---|
| ``` { "userEmail": string } ``` |

| Fields ||
|---|---|
| `userEmail` | `string` email of person whose password was reset |