SensitiveAdminAction

Alert that is triggered when Sensitive Admin Action occur in customer account.

JSON representation 
{
  "eventTime": string,
  "actorEmail": string,

  // Union field action can be only one of the following:
  "primaryAdminChangedEvent": {
    object (PrimaryAdminChangedEvent)
  },
  "ssoProfileCreatedEvent": {
    object (SSOProfileCreatedEvent)
  },
  "ssoProfileUpdatedEvent": {
    object (SSOProfileUpdatedEvent)
  },
  "ssoProfileDeletedEvent": {
    object (SSOProfileDeletedEvent)
  },
  "superAdminPasswordResetEvent": {
    object (SuperAdminPasswordResetEvent)
  }
  // End of list of possible types for union field action.
}
Fields
eventTime

string (Timestamp format)

The time at which event occurred
actorEmail

string

Email of person who performed the action
Union field action. Sensitive event which have occurred action can be only one of the following:
primaryAdminChangedEvent

object (PrimaryAdminChangedEvent)

Event occurred when primary admin changed in customer's account
ssoProfileCreatedEvent

object (SSOProfileCreatedEvent)

Event occurred when SSO Profile created in customer's account
ssoProfileUpdatedEvent

object (SSOProfileUpdatedEvent)

Event occurred when SSO Profile updated in customer's account
ssoProfileDeletedEvent

object (SSOProfileDeletedEvent)

Event occurred when SSO Profile deleted in customer's account
superAdminPasswordResetEvent

object (SuperAdminPasswordResetEvent)

Event occurred when password was reset for super admin in customer's account

SuperAdminPasswordResetEvent

Event occurred when password was reset for super admin in customer's account. The event are being received from insight forwarder

JSON representation 
{
  "userEmail": string
}
Fields
userEmail

string

email of person whose password was reset