# Enterprise Groups Audit Activity Events

This document lists the events and parameters for
various types of
Enterprise Groups Audit activity events. You can retrieve these events by
calling [Activities.list()](https://developers.google.com/workspace/admin/reports/v1/reference/activities/list)
with `applicationName=groups_enterprise`.

> [!NOTE]
> Enterprise Groups Audit activities can also be forwarded to Google Cloud Audit Logs. For more
> information, see [Share data with Google Cloud Platform services](https://support.google.com/a/answer/9320190).

## Moderator action


Action performed by moderator.
Events of this type are returned with `type=moderator_action`.

### Accept Invitation

Member accepted an invitation to join a group.

| Event details ||
|---|---|
| Event name | `accept_invitation` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=accept_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} accepted an invitation to group {group_id}` |

### Add Info Setting

Group info setting was added.

| Event details ||
|---|---|
| Event name | `add_info_setting` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `info_setting` | `string` Group info setting. | | `namespace` | `string` Namespace of the target group. | | `value` | `string` Value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added {info_setting} with value {value} in group {group_id} for the {namespace} namespace` |

### Add Member

Member was added to a group.

| Event details ||
|---|---|
| Event name | `add_member` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_role` | `string` The role assigned to the member in the context of the group, such as owner, manager, or member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added {member_type} {member_id} to group {group_id} with role {member_role}` |

### Add Member Role

Role was added to a member in a group.

| Event details ||
|---|---|
| Event name | `add_member_role` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_role` | `string` The role assigned to the member in the context of the group, such as owner, manager, or member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_member_role&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added role(s) {member_role} for {member_type} {member_id} in group {group_id}` |

### Add Security Setting

Group security setting was added.

| Event details ||
|---|---|
| Event name | `add_security_setting` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | | `security_setting` | `string` Group security setting. | | `value` | `string` Value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added {security_setting} with value {value} in group {group_id} for the {namespace} namespace` |

### Add Service Account Permission

Permission was added to a service account.

| Event details ||
|---|---|
| Event name | `add_service_account_permission` |
| Parameters | |---|---| | `member_id` | `string` Identifier of the member. | | `member_role` | `string` The role assigned to the member in the context of the group, such as owner, manager, or member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_service_account_permission&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added {member_role} permission to {member_type} {member_id} for the {namespace} namespace` |

### Approve Join Request

Member approved a join request.

| Event details ||
|---|---|
| Event name | `approve_join_request` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=approve_join_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} approved join request from {member_type} {member_id} to group {group_id}` |

### Ban Member including with Moderation

Member was banned from group directly or with moderation.

| Event details ||
|---|---|
| Event name | `ban_member_with_moderation` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=ban_member_with_moderation&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} banned {member_type} {member_id} from group {group_id} during message moderation` |

### Change Info Setting

Group info setting was changed.

| Event details ||
|---|---|
| Event name | `change_info_setting` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `info_setting` | `string` Group info setting. | | `namespace` | `string` Namespace of the target group. | | `new_value` | `string` New value of a group setting. | | `old_value` | `string` Old value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} changed {info_setting} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace` |

### Change Security Setting

Group security setting was changed.

| Event details ||
|---|---|
| Event name | `change_security_setting` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | | `new_value` | `string` New value of a group setting. | | `old_value` | `string` Old value of a group setting. | | `security_setting` | `string` Group security setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} changed {security_setting} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace` |

### Change Security Setting State

Group security setting state was changed.

| Event details ||
|---|---|
| Event name | `change_security_setting_state` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | | `new_value` | `string` New value of a group setting. | | `old_value` | `string` Old value of a group setting. | | `security_setting_state` | `string` Group security setting state. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_security_setting_state&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} changed {security_setting_state} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace` |

### Create Group

Group was created.

| Event details ||
|---|---|
| Event name | `create_group` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=create_group&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} created group {group_id} for the {namespace} namespace` |

### Create Namespace

Namespace was created.

| Event details ||
|---|---|
| Event name | `create_namespace` |
| Parameters | |---|---| | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=create_namespace&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} created a namespace {namespace}` |

### Delete Group

Group was deleted.

| Event details ||
|---|---|
| Event name | `delete_group` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=delete_group&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} deleted group {group_id} for the {namespace} namespace` |

### Delete Namespace

Namespace was deleted.

| Event details ||
|---|---|
| Event name | `delete_namespace` |
| Parameters | |---|---| | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=delete_namespace&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} deleted a namespace {namespace}` |

### Dynamic Group query was added

Dynamic Group query add event name.

| Event details ||
|---|---|
| Event name | `add_dynamic_group_query` |
| Parameters | |---|---| | `dynamic_group_query` | `string` Dynamic group query. | | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_dynamic_group_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added dynamic group query with value {dynamic_group_query} in group {group_id} for the {namespace} namespace` |

### Dynamic Group query was changed

Dynamic Group query change event name.

| Event details ||
|---|---|
| Event name | `change_dynamic_group_query` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | | `new_value` | `string` New value of a group setting. | | `old_value` | `string` Old value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_dynamic_group_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} changed dynamic group query from {old_value} to {new_value} in group {group_id} for the {namespace} namespace` |

### Invite Member

Member was invited to a group.

| Event details ||
|---|---|
| Event name | `invite_member` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=invite_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} invited {member_type} {member_id} to group {group_id}` |

### Join

Member added themself to a group.

| Event details ||
|---|---|
| Event name | `join` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=join&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added themself to group {group_id}` |

### Membership expiration added

Membership expiration added event name.

| Event details ||
|---|---|
| Event name | `add_membership_expiry` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `membership_expiry` | `string` Membership expiration time. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} added membership expiration with value {membership_expiry} for {member_type} {member_id} in group {group_id}` |

### Membership expiration removed

Membership expiration removed event name.

| Event details ||
|---|---|
| Event name | `remove_membership_expiry` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `old_value` | `string` Old value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} removed membership expiration for {member_type} {member_id} in group {group_id}` |

### Membership expiration updated

Membership expiration updated event name.

| Event details ||
|---|---|
| Event name | `update_membership_expiry` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `new_value` | `string` New value of a group setting. | | `old_value` | `string` Old value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=update_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} changed membership expiration of {member_type} {member_id} from {old_value} to {new_value} in group {group_id}` |

### Reject Invitation

Member rejected an invitation to join a group.

| Event details ||
|---|---|
| Event name | `reject_invitation` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=reject_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} rejected an invitation to group {group_id}` |

### Reject Join Request

Member rejected a join request.

| Event details ||
|---|---|
| Event name | `reject_join_request` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=reject_join_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} rejected join request from {member_type} {member_id} to group {group_id}` |

### Remove Info Setting

Group info setting was removed.

| Event details ||
|---|---|
| Event name | `remove_info_setting` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `info_setting` | `string` Group info setting. | | `namespace` | `string` Namespace of the target group. | | `value` | `string` Value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} removed {info_setting} with value {value} in group {group_id} for the {namespace} namespace` |

### Remove Member

Member was removed from a group.

| Event details ||
|---|---|
| Event name | `remove_member` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} removed {member_type} {member_id} from group {group_id}` |

### Remove Member Role

Role was removed for a member in a group.

| Event details ||
|---|---|
| Event name | `remove_member_role` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_role` | `string` The role assigned to the member in the context of the group, such as owner, manager, or member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_member_role&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} removed role(s) {member_role} for {member_type} {member_id} in group {group_id}` |

### Remove Security Setting

Group security setting was removed.

| Event details ||
|---|---|
| Event name | `remove_security_setting` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | | `security_setting` | `string` Group security setting. | | `value` | `string` Value of a group setting. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} removed {security_setting} with value {value} in group {group_id} for the {namespace} namespace` |

### Remove Service Account Permission

Permission was removed for a service account.

| Event details ||
|---|---|
| Event name | `remove_service_account_permission` |
| Parameters | |---|---| | `member_id` | `string` Identifier of the member. | | `member_role` | `string` The role assigned to the member in the context of the group, such as owner, manager, or member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_service_account_permission&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} removed {member_role} permission of {member_type} {member_id} for the {namespace} namespace` |

### Request to Join

Member requested to join a group.

| Event details ||
|---|---|
| Event name | `request_to_join` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=request_to_join&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} requested to join group {group_id}` |

### Revoke Invitation

Member revoked an invitation sent to another user.

| Event details ||
|---|---|
| Event name | `revoke_invitation` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=revoke_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} revoked invitation to {member_type} {member_id} from group {group_id}` |

### Unban Member

Member was unbanned from a group.

| Event details ||
|---|---|
| Event name | `unban_member` |
| Parameters | |---|---| | `group_id` | `string` Identifier of the target group. | | `member_id` | `string` Identifier of the member. | | `member_type` | `string` A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown. | | `namespace` | `string` Namespace of the target group. | |
| Sample request | `GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=unban_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN` |
| Admin Console message format | `{actor} removed ban for {member_type} {member_id} for group {group_id}` |