This document lists the events and parameters for various types of Drive Audit activity events. You can retrieve these events by calling [Activities.list()](https://developers.google.com/workspace/admin/reports/v1/reference/activities/list) with `applicationName=drive`. ## Access Events of this type are returned with `type=access`. ### Access request denied An access request was denied. Event details Event name `deny_access_request` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_user` `string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=deny_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} denied an access request for {target_user}` ### Access request expired An access request expired. Event details Event name `expire_access_request` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_user` `string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=expire_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `An access request for {target_user} expired` ### Access requested Access requested to an item. Event details Event name `request_access` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `requested_role` `string` Requested access role. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `target_user` `string` The email address of the user or group that the actor is requesting access for. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} requested access to an item for {target_user}` ### Add to folder Document add to folder. Event details Event name `add_to_folder` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `destination_folder_id` `string` Destination folder Id. `destination_folder_title` `string` Destination folder title. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_to_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} added an item to {destination_folder_title}` ### Appeal abuse violation Event details Event name `appeal_abuse_violation` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=appeal_abuse_violation&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} appealed an abuse violation` ### Approval canceled Drive approval canceled. Event details Event name `approval_canceled` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_canceled&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} canceled an approval on an item` ### Approval comment added Drive approval comment added. Event details Event name `approval_comment_added` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_comment_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} added a comment on an approval on an item` ### Approval completed Drive approval completed. Event details Event name `approval_completed` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_completed&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `An approval was completed` ### Approval decisions reset Drive approval decisions reset. Event details Event name `approval_decisions_reset` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_decisions_reset&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `Approval decisions were reset` ### Approval due time change Drive approval due time change. Event details Event name `approval_due_time_change` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_due_time_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} requested a due time change on an approval` ### Approval requested Drive approval requested. Event details Event name `approval_requested` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_requested&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} requested approval on an item` ### Approval reviewer change Drive approval reviewer change. Event details Event name `approval_reviewer_change` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} requested a reviewer change on an approval` ### Approval reviewer responded Drive approval reviewer responded. Event details Event name `approval_reviewer_responded` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_responded&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} reviewed an approval on an item` ### Comment created A comment was created. Event details Event name `create_comment` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} created a comment` ### Comment deleted A comment was deleted. Event details Event name `delete_comment` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} deleted a comment` ### Comment edited A comment was edited. Event details Event name `edit_comment` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} edited a comment` ### Comment reassigned A comment was reassigned. Event details Event name `reassign_comment` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reassign_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} reassigned a comment` ### Comment reopened A comment was reopened. Event details Event name `reopen_comment` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reopen_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} reopened a comment` ### Comment resolved A comment was resolved. Event details Event name `resolve_comment` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=resolve_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} resolved a comment` ### Connected Sheets Query Event details Event name `connected_sheets_query` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `data_connection_id` `string` Data connection ID. `delegating_principal` `string` Delegating user whose credentials are used. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `execution_id` `string` Query execution ID. `execution_trigger` `string` The trigger for the query execution. Possible values: - `api` One Platform API execution trigger. - `apps_script` Apps Script execution trigger. - `scheduled` Scheduled execution trigger. - `sheets_ui` Sheets UI execution trigger. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `query_type` `string` Type of query. Possible values: - `big_query` BigQuery. - `looker` Looker. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=connected_sheets_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{execution_trigger} {query_type} query executed` ### Copy Document copy. This event is present for the new item that was created during the copy. The `source_copy` event is present for the original item. Event details Event name `copy` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `copy_type` `string` Indicates whether the original item and new item are owned by the same organization. Possible values: - `external` The original item and new item are not owned by the same organization. - `internal` The original item and new item are owned by the same organization. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `encryption_change` `string` The encryption change that happened as part of this document modification. An unset value indicates that no encryption change happened. Possible values: - `decrypted_copy` An unencrypted item was created from an encrypted item. - `encrypted_copy` An encrypted item was created from an unencrypted item. - `encrypted_in_place` An unencrypted item was encrypted in-place. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` The title of the newly created document. `old_value` `string` The title of the original document. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} created a copy of original document {old_value}` ### Create Document create. Event details Event name `create` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `encryption_enforcement_option` `string` The client-side encryption policy being applied to the user at time of the item's creation. Possible values: - `default` The created item was required to be client-side encrypted by default. - `disabled` The created item was not required to be client-side encrypted. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} created an item` ### Delete Document delete. Event details Event name `delete` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `deletion_reason` `string` The reason an item was deleted. Possible values: - `empty_trash` The item was deleted from the trash being emptied. - `individual_delete` The item was deleted individually. - `owning_shared_drive_delete` The item was deleted because the shared drive that contained the item was deleted. - `subscription_canceled` The item was deleted because the Google Workspace subscription was canceled. - `tos_violation` The item was deleted because it violated Google's terms of service. - `trash_auto_delete` The item was automatically deleted after being in the trash. - `user_account_delete` The item was deleted because the user that owned the item was deleted. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} deleted an item` ### Download Document download. Event details Event name `download` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} downloaded an item` ### Drive Email as Attachment Event details Event name `email_as_attachment` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target` `string` Target User or Group. `target_user` `string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_as_attachment&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} shared this document as an email attachment to {target}` ### Edit Document edit. Event details Event name `edit` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} edited an item` ### Email collaborators A user emailed this item's collaborators. Event details Event name `email_collaborators` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `recipients` `string` Email addresses of the recipients. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_collaborators&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} emailed collaborators of an item` ### Encrypt Document encrypt. Event details Event name `encrypt` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `encryption_change` `string` The encryption change that happened as part of this document modification. An unset value indicates that no encryption change happened. Possible values: - `decrypted_copy` An unencrypted item was created from an encrypted item. - `encrypted_copy` An encrypted item was created from an unencrypted item. - `encrypted_in_place` An unencrypted item was encrypted in-place. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=encrypt&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} encrypted an item` ### eSignature canceled Event details Event name `cancel_esignature` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=cancel_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} canceled an eSignature on an item` ### eSignature completed An eSignature request was completed. This indicates that some reviewers declined to eSign, or the item was eSigned by required reviewers and signed copies were generated successfully. Event details Event name `complete_esignature` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `esignature_status` `string` The title of a field that describes the final state of an eSignature on a document. Possible values: - `declined` The eSignature on the document was declined. - `signed` The eSignature on the document was signed. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=complete_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `An eSignature was completed` ### eSignature requested Event details Event name `request_esignature` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} requested an eSignature on an item` ### eSignature reviewer responded An eSignature reviewer responded with a decision, such as eSigning the document or declining the request. Event details Event name `review_esignature` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `esignature_decision` `string` The title of a field describing a signer's decision to sign or decline a document's eSignature. Possible values: - `declined` The reviewer declined to eSign the document. - `signed` The reviewer eSigned the document. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=review_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} reviewed an eSignature on an item` ### Forms Responses Downloaded Download Forms Response. Event details Event name `download_forms_response` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_forms_response&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} downloaded forms responses` ### Item content accessed An application accessed an item's content on behalf of a user. Event details Event name `access_item_content` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `api_method` `string` The API method used to generate the event. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `An application accessed an item's content on behalf of {actor}` ### Item content prefetched An application prefetched an item's content on behalf of a user. Event details Event name `prefetch_item_content` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=prefetch_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `An application prefetched an item's content on behalf of {actor}` ### Item content synced Document synced. Event details Event name `sync_item_content` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sync_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} synced item content` ### Item search performed Event details Event name `search` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `parsed_query` `string` Internally parsed version of the user provided search query, which may include additional parameters added by Drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `user_query` `string` This search query encompasses user-initiated searches, queries generated from search chips, and those executed through the public API. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=search&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} searched for items.` ### Label applied Label was applied. Event details Event name `label_added` Parameters `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `label` `string` The unique Identifier of a Label. `label_title` `string` Label title. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `reason` `string` Reason for label addition, removal, or value change event. Possible values: - `copy` Reason for change Drive item copy. - `default_label` Reason for change default label behavior. - `dlp_action` Reason for change DLP. - `reason_unspecified` Reason for change unspecified. - `user_action` Reason for change is a user action. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} applied Label {label_title}.` ### Label applied on creation Label was applied automatically when the Drive item was created. Event details Event name `label_added_by_item_create` Parameters `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `label` `string` The unique Identifier of a Label. `label_title` `string` Label title. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `reason` `string` Reason for label addition, removal, or value change event. Possible values: - `copy` Reason for change Drive item copy. - `default_label` Reason for change default label behavior. - `dlp_action` Reason for change DLP. - `reason_unspecified` Reason for change unspecified. - `user_action` Reason for change is a user action. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added_by_item_create&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `Label {label_title} was automatically applied on creation.` ### Label field value changed Label Field value was changed. Event details Event name `label_field_changed` Parameters `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `field` `string` Label Field display name. `field_id` `string` Label Field ID. `is_encrypted` `boolean` Whether the file is client-side encrypted. `label` `string` The unique Identifier of a Label. `label_title` `string` Label title. `new_value` `string` New Value. `new_value_id` `string` New Value IDs. `old_value` `string` Old Value. `old_value_id` `string` Old Value IDs. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `reason` `string` Reason for label addition, removal, or value change event. Possible values: - `copy` Reason for change Drive item copy. - `default_label` Reason for change default label behavior. - `dlp_action` Reason for change DLP. - `reason_unspecified` Reason for change unspecified. - `user_action` Reason for change is a user action. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_field_changed&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed the value of field {field} (Label: {label_title}) from '{old_value}' to '{new_value}'.` ### Label removed Label was removed. Event details Event name `label_removed` Parameters `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `label` `string` The unique Identifier of a Label. `label_title` `string` Label title. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `reason` `string` Reason for label addition, removal, or value change event. Possible values: - `copy` Reason for change Drive item copy. - `default_label` Reason for change default label behavior. - `dlp_action` Reason for change DLP. - `reason_unspecified` Reason for change unspecified. - `user_action` Reason for change is a user action. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_removed&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} removed Label {label_title}.` ### Lock Document lock. Event details Event name `add_lock` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `lock_type` `string` The lock type on an item. Possible values: - `domain_admin` Domain Admin lock type. - `editor` Editor lock type. - `owner` Owner lock type. - `unknown_lock_type` Unknown lock type. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} locked an item` ### Move Document move. Event details Event name `move` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `destination_folder_id` `string` Destination folder Id. `destination_folder_title` `string` Destination folder title. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `source_folder_id` `string` Source folder Id. `source_folder_title` `string` Source folder title. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=move&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} moved an item from {source_folder_title} to {destination_folder_title}` ### Preview Document preview. Event details Event name `preview` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=preview&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} previewed an item` ### Print Document print. Event details Event name `print` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=print&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} printed an item` ### Remove from folder Document remove from folder. Event details Event name `remove_from_folder` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `source_folder_id` `string` Source folder Id. `source_folder_title` `string` Source folder title. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_from_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} removed an item from {source_folder_title}` ### Rename Document rename. Event details Event name `rename` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. `old_value` `string` Old Value. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=rename&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} renamed {old_value} to {new_value}` ### Report abuse Event details Event name `report_abuse` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=report_abuse&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `An abuse report was submitted for an item` ### Restore Document restore. Event details Event name `untrash` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=untrash&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} restored an item` ### Revision deleted A revision of an item was deleted. Event details Event name `delete_revision` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `revision_create_timestamp` `integer` The timestamp when the revision was originally created (in epoch microseconds). `revision_id` `string` The ID of the revision. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} deleted a revision of this item` ### Revision pinned A revision of an item was pinned, indicating that the revision should be kept forever. Event details Event name `pin_revision` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `revision_create_timestamp` `integer` The timestamp when the revision was originally created (in epoch microseconds). `revision_id` `string` The ID of the revision. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=pin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} pinned a revision of this item` ### Revision unpinned A revision of an item was unpinned, indicating that the revision should not be kept forever. Event details Event name `unpin_revision` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `revision_create_timestamp` `integer` The timestamp when the revision was originally created (in epoch microseconds). `revision_id` `string` The ID of the revision. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unpin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} unpinned a revision of this item` ### Script trigger created Creation of an Apps Script trigger. Event details Event name `create_script_trigger` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `script_container_app` `string` The container application of a container-bound Apps Script file. See the [Container-bound Scripts documentation](https://developers.google.com/apps-script/guides/bound) for more information about container applications. Possible values: - `document` Google Docs application. - `form` Google Forms application. - `sites` Google Sites application. - `slides` Google Slides application. - `spreadsheet` Google Sheets application. - `unknown` Unknown application. `script_container_id` `string` The container ID of a container-bound Apps Script file. See the [Container-bound Scripts documentation](https://developers.google.com/apps-script/guides/bound) for more information about container applications. `script_trigger_id` `string` The ID of an Apps Script trigger. `script_trigger_source_app` `string` The source providing a trigger. See the [Apps Script Installable Triggers documentation](https://developers.google.com/apps-script/guides/triggers/installable) for more information about script triggers. Possible values: - `calendar` Google Calendar application. - `clock` System time. - `document` Google Docs application. - `form` Google Forms application. - `slides` Google Slides application. - `spreadsheet` Google Sheets application. - `unknown` Unknown application. `script_trigger_type` `string` Script trigger type. See the [Apps Script Installable Triggers documentation](https://developers.google.com/apps-script/guides/triggers/installable) for more information about script triggers. Possible values: - `event_any` On any event. - `event_on_change` On change. - `event_on_edit` On edit. - `event_on_event_created` On calendar event created. - `event_on_event_deleted` On calendar event deleted. - `event_on_event_updated` On calendar event updated. - `event_on_form_submit` On form submit. - `event_on_open` On open. - `timed_oneshot` Oneshot. - `timed_recurring` Recurring. - `trigger_type_unspecified` Trigger type unspecified. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} created a script trigger` ### Script trigger deleted Deletion of an Apps Script trigger. Event details Event name `delete_script_trigger` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `script_container_app` `string` The container application of a container-bound Apps Script file. See the [Container-bound Scripts documentation](https://developers.google.com/apps-script/guides/bound) for more information about container applications. Possible values: - `document` Google Docs application. - `form` Google Forms application. - `sites` Google Sites application. - `slides` Google Slides application. - `spreadsheet` Google Sheets application. - `unknown` Unknown application. `script_container_id` `string` The container ID of a container-bound Apps Script file. See the [Container-bound Scripts documentation](https://developers.google.com/apps-script/guides/bound) for more information about container applications. `script_trigger_id` `string` The ID of an Apps Script trigger. `script_trigger_source_app` `string` The source providing a trigger. See the [Apps Script Installable Triggers documentation](https://developers.google.com/apps-script/guides/triggers/installable) for more information about script triggers. Possible values: - `calendar` Google Calendar application. - `clock` System time. - `document` Google Docs application. - `form` Google Forms application. - `slides` Google Slides application. - `spreadsheet` Google Sheets application. - `unknown` Unknown application. `script_trigger_type` `string` Script trigger type. See the [Apps Script Installable Triggers documentation](https://developers.google.com/apps-script/guides/triggers/installable) for more information about script triggers. Possible values: - `event_any` On any event. - `event_on_change` On change. - `event_on_edit` On edit. - `event_on_event_created` On calendar event created. - `event_on_event_deleted` On calendar event deleted. - `event_on_event_updated` On calendar event updated. - `event_on_form_submit` On form submit. - `event_on_open` On open. - `timed_oneshot` Oneshot. - `timed_recurring` Recurring. - `trigger_type_unspecified` Trigger type unspecified. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} deleted a script trigger` ### Sheets Import Url A Google Sheet fetched one or more urls via an [Import function](https://support.google.com/docs/answer/12188454). Event details Event name `sheets_import_url` Parameters `accessed_url` `string` The URLs that were accessed. `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `A url was imported from this item` ### Sheets ImportRange Event details Event name `sheets_import_range` Parameters `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. `sheets_import_range_recipient_doc` `string` Sheets ImportRange recipient doc. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{sheets_import_range_recipient_doc} imported range from an item` ### Source Copy Source document copy. This event is present for the original item that was copied. The `copy` event is present for the newly created item. Event details Event name `source_copy` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `copy_type` `string` Indicates whether the original item and new item are owned by the same organization. Possible values: - `external` The original item and new item are not owned by the same organization. - `internal` The original item and new item are owned by the same organization. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `encryption_change` `string` The encryption change that happened as part of this document modification. An unset value indicates that no encryption change happened. Possible values: - `decrypted_copy` An unencrypted item was created from an encrypted item. - `encrypted_copy` An encrypted item was created from an unencrypted item. - `encrypted_in_place` An unencrypted item was encrypted in-place. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` The title of the newly created document. `old_value` `string` The title of the original document. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=source_copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} copied this item, creating a new item {copy_type} your organization {new_value}` ### Suggestion accepted A suggestion was accepted. Event details Event name `accept_suggestion` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=accept_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} accepted a suggestion` ### Suggestion created A suggestion was created. Event details Event name `create_suggestion` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} created a suggestion` ### Suggestion deleted A suggestion was deleted. Event details Event name `delete_suggestion` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} deleted a suggestion` ### Suggestion rejected A suggestion was rejected. Event details Event name `reject_suggestion` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reject_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} rejected a suggestion` ### Sync client paused Event details Event name `pause_sync_client` Parameters `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_user` `string` The email address of the affected user. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=pause_sync_client&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `File syncing paused for {target_user} due to potential ransomware.` ### Sync client resumed Event details Event name `resume_sync_client` Parameters `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=resume_sync_client&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} resumed file syncing.` ### Trash Document trash. Event details Event name `trash` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=trash&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} trashed an item` ### Unlock Document unlock. Event details Event name `remove_lock` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `lock_type` `string` The lock type on an item. Possible values: - `domain_admin` Domain Admin lock type. - `editor` Editor lock type. - `owner` Owner lock type. - `unknown_lock_type` Unknown lock type. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} unlocked an item` ### Unmovable item relocated Unmovable document reparented. Event details Event name `unmovable_item_reparented` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `destination_folder_id` `string` Destination folder Id. `destination_folder_title` `string` Destination folder title. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `source_folder_id` `string` Source folder Id. `source_folder_title` `string` Source folder title. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unmovable_item_reparented&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `When a parent folder was moved, an item that couldn't be moved was relocated from {source_folder_title} to {destination_folder_title}` ### Upload Document upload. Event details Event name `upload` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `encryption_enforcement_option` `string` The client-side encryption policy being applied to the user at time of the item's creation. Possible values: - `default` The created item was required to be client-side encrypted by default. - `disabled` The created item was not required to be client-side encrypted. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} uploaded an item` ### URL accessed A URL was accessed from an AppsScript, see [URL Fetch Service](https://developers.google.com/apps-script/reference/url-fetch) for details. **Note:** doc_id and other file-related fields, such as doc_type and owner, may not be reported. Event details Event name `access_url` Parameters `accessed_url` `string` The URLs that were accessed. `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `script_id` `string` The document ID of the executing script. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `A script accessed a url during execution` ### Video caption deleted Delete video caption. Event details Event name `delete_video_caption` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `track_name` `string` Video caption track name. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} deleted a video caption` ### Video caption downloaded Download video caption. Event details Event name `download_video_caption` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `track_name` `string` Video caption track name. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} downloaded a video caption` ### Video caption uploaded Upload video caption. Event details Event name `upload_video_caption` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `track_name` `string` Video caption track name. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} uploaded a video caption` ### View Document view. Event details Event name `view` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=view&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} viewed an item` ## ACL changed ACL Changed. Events of this type are returned with `type=acl_change`. ### Apply Security Update Document apply security update. Event details Event name `apply_security_update` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} applied the security update to a file` ### Bulk Apply Security Update Bulk apply security update. Event details Event name `shared_drive_apply_security_update` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} applied the security update to all files in a shared drive` ### Bulk Remove Security Update Bulk remove security update. Event details Event name `shared_drive_remove_security_update` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} removed the security update from all files in a shared drive` ### Changed owners from parent folder Change in owner of document due to hierarchy reconciliation. Event details Event name `change_owner_hierarchy_reconciled` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_owner` `string` The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name. `new_owner_is_shared_drive` `boolean` Boolean flag denoting whether new owner is a shared drive. `new_owner_shared_drive_id` `string` The shared drive root id if the new document owner is a shared drive. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `Due to a change in a parent folder, the owner of an item was changed` ### Document changed owners Event details Event name `change_owner` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_owner` `string` The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name. `new_owner_is_shared_drive` `boolean` Boolean flag denoting whether new owner is a shared drive. `new_owner_shared_drive_id` `string` The shared drive root id if the new document owner is a shared drive. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed owner of an item` ### Drive Publish Status Change Event details Event name `publish_change` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_publish_visibility` `string` New Publish Visibility Value. Possible values: - `nobody` Nobody. - `public_in_the_domain` Anyone within the audience can view published document. - `public_on_the_web` Anyone on the web can view published document. - `unchanged` Unchanged. `new_value` `string` New Value. Possible values: - `auto` Publish Live File. - `fixed` Publish a Version. - `none` Unpublished. - `unchanged` Unchanged. `old_publish_visibility` `string` Old Publish Visibility Value. Possible values: - `nobody` Nobody. - `public_in_the_domain` Anyone within the audience can view published document. - `public_on_the_web` Anyone on the web can view published document. - `unchanged` Unchanged. `old_value` `string` Old Value. Possible values: - `auto` Publish Live File. - `fixed` Publish a Version. - `none` Unpublished. - `unchanged` Unchanged. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed publish status from {old_value} to {new_value} and changed visibility from {old_publish_visibility} to {new_publish_visibility}` ### Editor Settings Change Editor Settings Changed. Event details Event name `change_acl_editors` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. Possible values: - `owner` The person modifying the access on the file is the Owner of the file. - `writers` The person modifying the access on the file is a Writer (Editor) of the file. `old_value` `string` Old Value. Possible values: - `owner` The person modifying the access on the file is the Owner of the file. - `writers` The person modifying the access on the file is a Writer (Editor) of the file. `old_visibility` `string` Old Visibility of Target File. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `visibility_change` `string` Change in overall visibility of the file. Possible values: - `external` Overall visibility changed from internal to external. - `internal` Overall visibility changed from external to internal. - `none` No change in overall visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_acl_editors&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed editor settings from {old_value} to {new_value}` ### Inherited permissions disabled An item's inherited permissions were disabled. Event details Event name `disable_inherited_permissions` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=disable_inherited_permissions&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} disabled inherited permissions to an item` ### Inherited permissions enabled An item's inherited permissions were enabled. Event details Event name `enable_inherited_permissions` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=enable_inherited_permissions&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} enabled inherited permissions to an item` ### Link Sharing Access Type Change Change in link sharing access type of document. Event details Event name `change_document_access_scope` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_value` `string` Old Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_visibility` `string` Old Visibility of Target File. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_domain` `string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `visibility_change` `string` Change in overall visibility of the file. Possible values: - `external` Overall visibility changed from internal to external. - `internal` Overall visibility changed from external to internal. - `none` No change in overall visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}` ### Link Sharing Access Type Change from Parent Folder Change in link sharing access type of document due to hierarchy reconciliation. Event details Event name `change_document_access_scope_hierarchy_reconciled` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_value` `string` Old Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_visibility` `string` Old Visibility of Target File. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_domain` `string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `visibility_change` `string` Change in overall visibility of the file. Possible values: - `external` Overall visibility changed from internal to external. - `internal` Overall visibility changed from external to internal. - `none` No change in overall visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}` ### Link Sharing visibility change Change in link sharing visibility of document. Event details Event name `change_document_visibility` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. Possible values: - `people_with_link` Anyone with the link on the web can access. - `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). - `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `public_on_the_web` Public on the web. `old_value` `string` Old Value. Possible values: - `people_with_link` Anyone with the link on the web can access. - `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). - `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `public_on_the_web` Public on the web. `old_visibility` `string` Old Visibility of Target File. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_domain` `string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `visibility_change` `string` Change in overall visibility of the file. Possible values: - `external` Overall visibility changed from internal to external. - `internal` Overall visibility changed from external to internal. - `none` No change in overall visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed link sharing visibility from {old_value} to {new_value} for {target_domain}` ### Link Sharing visibility change from Parent Folder Change in link sharing visibility of document due to hierarchy reconciliation. Event details Event name `change_document_visibility_hierarchy_reconciled` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. Possible values: - `people_with_link` Anyone with the link on the web can access. - `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). - `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `public_on_the_web` Public on the web. `old_value` `string` Old Value. Possible values: - `people_with_link` Anyone with the link on the web can access. - `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). - `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. - `public_on_the_web` Public on the web. `old_visibility` `string` Old Visibility of Target File. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_domain` `string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `visibility_change` `string` Change in overall visibility of the file. Possible values: - `external` Overall visibility changed from internal to external. - `internal` Overall visibility changed from external to internal. - `none` No change in overall visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `Due to a change in a parent folder, the link sharing visibility for {target_domain} changed from {old_value} to {new_value}` ### Publish new version A new version of this item was published. Event details Event name `publish_new_version` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_new_version&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} published a new version` ### Remove security update Document remove security update. Event details Event name `remove_security_update` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} removed the security update from a file` ### Shared Drive Membership Change Shared drive Membership Change. Event details Event name `shared_drive_membership_change` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `added_role` `string` Added membership role to a user or group in a shared drive. See [Shared drives access](https://support.google.com/a/answer/7337554) for more information about roles. Possible values: - `commenter` Shared drive role Commenter. - `content_manager` Shared drive role Content manager. - `editor` Shared drive role Contributor. - `none` No role in shared drive. - `organizer` Shared drive role Manager. - `viewer` Shared drive role Viewer. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `membership_change_type` `string` Type of change in shared drive membership of a user/group. Possible values: - `add_to_shared_drive` Addition to a shared drive. - `change_roles` Change of a member's role in a shared drive. - `re_share` Re-share of a member's role in a shared drive. - `remove_from_shared_drive` Removal from a shared drive. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `removed_role` `string` Removed membership role of a user/group in a shared drive. Possible values: - `commenter` Shared drive role Commenter. - `content_manager` Shared drive role Content manager. - `editor` Shared drive role Contributor. - `none` No role in shared drive. - `organizer` Shared drive role Manager. - `viewer` Shared drive role Viewer. `target` `string` Target User or Group. `target_user` `string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_membership_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} made a membership change of type {membership_change_type} for {target} by removing role(s) {removed_role} and adding role(s) {added_role}` ### Shared Drive Settings Change Event details Event name `shared_drive_settings_change` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_settings_state` `string` New state of shared drive settings. Possible values: - `none` Shared drive settings change value None. - `restricted` Shared drive settings change value Restricted. - `unrestricted` Shared drive settings change value Unrestricted. `old_settings_state` `string` Old state of shared drive settings. Possible values: - `none` Shared drive settings change value None. - `restricted` Shared drive settings change value Restricted. - `unrestricted` Shared drive settings change value Unrestricted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target` `string` Target User or Group. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `shared_drive_settings_change_type` `string` Type of change in shared drive settings. Possible values: - `cross_domain_sharing` A shared drive settings change that restricts or unrestricts the ability for the contents within the shared drive to be shared outside the domain. - `direct_acl` A shared drive settings change that restricts or unrestricts the ability to add users directly onto a file when they're not a member. - `download` A shared drive settings change that restricts or unrestricts a user's ability to download files from the shared drive. - `drive_fs` A shared drive settings change that restricts or unrestricts access to Google Drive for desktop. - `file_organizer_can_share_folders` A shared drive settings change that restricts or unrestricts a file organizer's ability to share folders. - `readers_can_download` A shared drive settings change that restricts or unrestricts a reader's ability to download files from the shared drive. - `writers_can_download` A shared drive settings change that restricts or unrestricts a writer's ability to download files from the shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_settings_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed {shared_drive_settings_change_type} setting from {old_settings_state} to {new_settings_state}` ### Sheets ImportRange access change Event details Event name `sheets_import_range_access_change` Parameters `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. `is_encrypted` `boolean` Whether the file is client-side encrypted. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. `sheets_import_range_enabled` `boolean` Whether the recipient Sheet is enabled to import data from this Sheet. `sheets_import_range_recipient_doc` `string` Sheets ImportRange recipient doc. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range_access_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} enabled Sheets range import to {sheets_import_range_recipient_doc}` ### User Sharing Permissions Change User Sharing Permissions Changed. Event details Event name `change_user_access` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_value` `string` Old Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_visibility` `string` Old Visibility of Target File. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_user` `string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `visibility_change` `string` Change in overall visibility of the file. Possible values: - `external` Overall visibility changed from internal to external. - `internal` Overall visibility changed from external to internal. - `none` No change in overall visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `{actor} changed sharing permissions for {target_user} from {old_value} to {new_value}` ### User Sharing Permissions Change from Parent Folder User Sharing Permissions Changed due to hierarchy reconciliation. Event details Event name `change_user_access_hierarchy_reconciled` Parameters `actor_is_collaborator_account` `boolean` Whether the actor is a collaborator account. `billable` `boolean` Whether this activity is billable. `doc_id` `string` Document ID. `doc_title` `string` Document title. `doc_type` `string` Document type. Possible values: - `document` Doc type document. - `drawing` Doc type drawing. - `folder` Doc type folder. - `form` Doc type form. - `html` Doc type HTML. - `jam` Doc type Jam. - `jpeg` Doc type JPEG. - `mp4` Doc type MP4. - `mpeg` Doc type MPEG. - `msexcel` Doc type MS Excel. - `mspowerpoint` Doc type MS Powerpoint. - `msword` Doc type MS Word. - `pdf` Doc type PDF. - `png` Doc type PNG. - `presentation` Doc type presentation. - `quicktime` Doc type Quicktime. - `script` Google Apps Script. - `shortcut` Doc type is Google Shortcut. - `sites` Doc type is Google Sites. - `spreadsheet` Doc type spreadsheet. - `shared_drive` Doc type is a shared drive. - `txt` Doc type txt. - `unknown` Doc type unknown. - `video` Doc type is a Google Vids Video. `is_encrypted` `boolean` Whether the file is client-side encrypted. `new_value` `string` New Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_value` `string` Old Value. Possible values: - `can_comment` Can comment. - `can_edit` Can edit. - `can_respond` Can respond. - `can_view` Can view. - `can_view_published` Can view published. - `none` Scope none. - `organizer` Manager. - `owner` Is a owner. `old_visibility` `string` Old Visibility of Target File. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `originating_app_id` `string` The Google Cloud project number of the application that performed the action. Use the [Drive REST API](https://developers.google.com/drive/v2/reference/apps/get) to retrieve the app title. `owner` `string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive. `owner_is_shared_drive` `boolean` Boolean flag denoting whether the owner is a shared drive. `owner_shared_drive_id` `string` The shared drive root ID if the document owner is a shared drive. `primary_event` `boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: - `false` Boolean value false. - `true` Boolean value true. `target_user` `string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with. `shared_drive_id` `string` The unique identifier of the shared drive. Only populated for events or items from a shared drive. `visibility` `string` Visibility of target file. Possible values: - `people_with_link` Anyone with the link can access. - `people_within_domain_with_link` Anyone with the link within the audience can access. - `private` Private. - `public_in_the_domain` Anyone within the audience can access. - `public_on_the_web` Public on the web. - `shared_externally` Shared with explicit users/groups external to the domain. - `shared_internally` Shared with explicit users/groups internal to the domain. - `unknown` Unknown visibility. `visibility_change` `string` Change in overall visibility of the file. Possible values: - `external` Overall visibility changed from internal to external. - `internal` Overall visibility changed from external to internal. - `none` No change in overall visibility. Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `Due to a change in a parent folder, the sharing permissions for {target_user} changed from {old_value} to {new_value}` ## Pooled quota metadata Events of this type are returned with `type=pooled_quota_metadata`. ### Storage Usage Update Drive storage usage update. Event details Event name `storage_usage_update` Parameters `storage_usage_in_bytes` `integer` Storage usage (in bytes). Sample request `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=storage_usage_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN` Admin Console message format `Storage usage update for {actor}`