Directory Sync Audit Activity Events

This document lists the events and parameters for various types of Directory Sync Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=directory_sync.

Sync entity events

The processing of user and group entities. Events of this type are returned with type=DIRECTORY_SYNC_ENTITY.

Group Membership Added

This event occurs when an entity is added to a group.

Event details
Event name	ADDED_GROUP_MEMBERSHIP
Parameters	DRY_RUN boolean True if this event is for a dry run. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. GROUP_ID string The email id of the group. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. NEW_MEMBERSHIP_ROLE string The new role for the membership. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ADDED_GROUP_MEMBERSHIP&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Added {TARGET_OBJECT_ID} in group {GROUP_ID} as {NEW_MEMBERSHIP_ROLE}

Group Membership Removed

This event occurs when an entity is removed from a group.

Event details
Event name	REMOVED_GROUP_MEMBERSHIP
Parameters	DRY_RUN boolean True if this event is for a dry run. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. GROUP_ID string The email id of the group. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. OLD_MEMBERSHIP_ROLE string The previous role for the membership. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOVED_GROUP_MEMBERSHIP&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Removed {TARGET_OBJECT_ID} from group {GROUP_ID} as {OLD_MEMBERSHIP_ROLE}

Group Membership Updated

This event occurs when an entity's membership in a group is updated.

Event details
Event name	UPDATED_GROUP_MEMBERSHIP
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. GROUP_ID string The email id of the group. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. NEW_MEMBERSHIP_ROLE string The new role for the membership. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=UPDATED_GROUP_MEMBERSHIP&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Updated {ENTITY_TYPE} {TARGET_OBJECT_ID}'s role in group {GROUP_ID} to {NEW_MEMBERSHIP_ROLE}

Object Created

Occurs when a new entity is created.

Event details
Event name	ENTITY_CREATED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_CREATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Created {ENTITY_TYPE} {TARGET_OBJECT_ID}

Object Deprovisioned

Occurs when an object is deprovisioned.

Event details
Event name	OBJECT_DEPROVISIONED
Parameters	DEPROVISION_ACTION string The action of deprovisioning an object. DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=OBJECT_DEPROVISIONED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{ENTITY_TYPE} {TARGET_OBJECT_ID} {DEPROVISION_ACTION} because {MESSAGE}

Object Excluded

Occurs when an entity is excluded from a sync.

Event details
Event name	ENTITY_EXCLUDED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. EXCLUSION_RULE string The exclusion rule. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_EXCLUDED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Excluded {ENTITY_TYPE} {SOURCE_OBJECT_ID} due to the exclusion rule {EXCLUSION_RULE}

Object Excluded Summary

Provides a summary of entities excluded from a sync.

Event details
Event name	ENTITY_EXCLUSIONS_SUMMARY
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. EXCLUDED_COUNT integer The count of items excluded. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_EXCLUSIONS_SUMMARY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Excluded {EXCLUDED_COUNT} {ENTITY_TYPE} entities from directory {SOURCE_DIRECTORY_DISPLAY_NAME}

Object Skipped - Source object

Occurs when an entity is skipped during a sync.

Event details
Event name	ENTITY_SKIPPED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_SKIPPED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Skipped syncing {ENTITY_TYPE} {SOURCE_OBJECT_ID}. {MESSAGE}

Object Skipped - Target object

Occurs when a target entity is skipped during a sync.

Event details
Event name	TARGET_ENTITY_SKIPPED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=TARGET_ENTITY_SKIPPED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Skipped syncing {ENTITY_TYPE} {TARGET_OBJECT_ID}. {MESSAGE}

Object Skipped - Unexpected error

Occurs when an entity could not be processed.

Event details
Event name	ENTITY_SYNC_FAILED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. GROUP_ID string The email id of the group. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_SYNC_FAILED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Skipped syncing {ENTITY_TYPE}. {MESSAGE}

Object Updated

Occurs when an entity's attributes are updated.

Event details
Event name	ENTITY_UPDATED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. NEW_ATTRIBUTES string The new attributes for the entity. OLD_ATTRIBUTES string The previous attributes for the entity. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_UPDATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Updated {ENTITY_TYPE} {TARGET_OBJECT_ID}. Old attributes {OLD_ATTRIBUTES}, new attributes {NEW_ATTRIBUTES}

Read Objects

Occurs when an entity is read from the remote directory.

Event details
Event name	REMOTE_DIRECTORY_ENTITY_READ
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. OLD_ATTRIBUTES string The previous attributes for the entity. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOTE_DIRECTORY_ENTITY_READ&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Read {SOURCE_OBJECT_ID} with attributes {OLD_ATTRIBUTES}

Read Objects - Initiating read from source directory

Occurs when the sync process starts reading entities from the remote directory.

Event details
Event name	REMOTE_DIRECTORY_READ
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. FILTER string The remote directory filter. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOTE_DIRECTORY_READ&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Reading {ENTITY_TYPE}s from source directory {SOURCE_DIRECTORY_DISPLAY_NAME} with filter {FILTER}

Read Objects - Initiating read from target directory

Occurs when the sync process starts reading entities from the Google directory.

Event details
Event name	CLOUD_DIRECTORY_READ
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=CLOUD_DIRECTORY_READ&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Reading {ENTITY_TYPE}s from your Google directory

Read Objects - Source directory read summary

Provides a summary of entities read from the remote directory.

Event details
Event name	REMOTE_DIRECTORY_READ_FINISHED
Parameters	COUNT integer The count of items affected. DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOTE_DIRECTORY_READ_FINISHED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Retrieved {COUNT} {ENTITY_TYPE}s from source directory {SOURCE_DIRECTORY_DISPLAY_NAME}

Read Objects - Target directory read summary

Provides a summary of entities read from the Google directory.

Event details
Event name	CLOUD_DIRECTORY_READ_FINISHED
Parameters	COUNT integer The count of items affected. DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=CLOUD_DIRECTORY_READ_FINISHED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Retrieved {COUNT} {ENTITY_TYPE}s from your Google directory

Sync Error

Indicates an error occurred during the sync process.

Event details
Event name	ERROR
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ERROR&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{MESSAGE}

Sync Error - Individual object

Occurs when an entity could not be created in the target directory.

Event details
Event name	ENTITY_NOT_CREATED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SOURCE_IMMUTABLE_ID string The immutable id of source object. SOURCE_OBJECT_ID string The id of the source object. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. TARGET_OBJECT_ID string The id of the target object. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_NOT_CREATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{ENTITY_TYPE} {TARGET_OBJECT_ID} could not be created. Message: {MESSAGE}

Sync Summary

Provides a summary of entity changes.

Event details
Event name	ENTITY_CHANGES
Parameters	CREATED_COUNT integer The count of items created. DELETED_COUNT integer The count of items deleted. DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. FAILED_COUNT integer The count of entities that failed to sync. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SKIPPED_COUNT integer The count of entities that are skipped in sync due to other non error flows. SKIPPED_ERROR_COUNT integer The count of entities that are skipped in sync because of errors. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. UPDATED_COUNT integer The count of items updated. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_CHANGES&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{ENTITY_TYPE} changes: {CREATED_COUNT} created, {UPDATED_COUNT} updated, {DELETED_COUNT} suspended, {FAILED_COUNT} failed, {SKIPPED_ERROR_COUNT} skipped (errors), {SKIPPED_COUNT} skipped (other)

Sync Job execution

A Sync Job executed. Events of this type are returned with type=DIRECTORY_SYNC_EXECUTION.

Sync Completed

Indicates that the sync run has completed.

Event details
Event name	SYNC_RUN_END
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_END&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Completed syncing {ENTITY_TYPE}s from {SOURCE_DIRECTORY_DISPLAY_NAME}

Sync Failed

Indicates that the sync run has failed.

Event details
Event name	SYNC_RUN_FAILED
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_FAILED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{ENTITY_TYPE} sync from {SOURCE_DIRECTORY_DISPLAY_NAME} failed. Error: {MESSAGE}

Sync Failed - Retry scheduled

Indicates that a failed sync run is scheduled for retry.

Event details
Event name	SYNC_RUN_FAILED_RETRY
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. MESSAGE string The reason for the event. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_FAILED_RETRY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{ENTITY_TYPE} sync from {SOURCE_DIRECTORY_DISPLAY_NAME} failed. Sync will be retried soon. Error: {MESSAGE}

Sync Started

Indicates that a sync run has started.

Event details
Event name	SYNC_RUN_START
Parameters	DRY_RUN boolean True if this event is for a dry run. Possible values: false Enum value of dry run disabled. true Enum value of dry run enabled. ENTITY_TYPE string The type of the entity. Possible values: GROUP Represents a group entity. GROUP_MEMBERSHIP Represents a group membership entity. USER Represents a user entity. LOG_LEVEL string The severity level of audit event. Possible values: DEBUG Debug log. ERROR Error log. FATAL Fatal log. INFORMATION Information log. WARNING Warning log. REMOTE_DIRECTORY string The name of the Sync remote directory. SOURCE_DIRECTORY_DISPLAY_NAME string The display name of the source directory. SYNC_JOB string The name of the Sync Job. SYNC_JOB_CONFIG string The config of the sync job. SYNC_RUN string The name of the Sync Run. VERBOSE boolean True if this is a verbose log event. Possible values: false Enum value for non verbose event. true Enum value for verbose event.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_START&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Started syncing {ENTITY_TYPE}s from {SOURCE_DIRECTORY_DISPLAY_NAME} using {SYNC_JOB_CONFIG}