Enterprise Groups Audit Activity Events

This document lists the events and parameters for various types of Enterprise Groups Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=groups_enterprise.

Moderator action

Action performed by moderator. Events of this type are returned with type=moderator_action.

Accept Invitation

Member accepted an invitation to join a group.

Event details
Event name accept_invitation
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=accept_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} accepted an invitation to group {group_id}

Add Info Setting

Group info setting was added.

Event details
Event name add_info_setting
Parameters
group_id

string

Identifier of the target group.

info_setting

string

Group info setting.

namespace

string

Namespace of the target group.

value

string

Value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added {info_setting} with value {value} in group {group_id} for the {namespace} namespace

Add Member

Member was added to a group.

Event details
Event name add_member
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_role

string

The role assigned to the member in the context of the group, such as owner, manager, or member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added {member_type} {member_id} to group {group_id} with role {member_role}

Add Member Role

Role was added to a member in a group.

Event details
Event name add_member_role
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_role

string

The role assigned to the member in the context of the group, such as owner, manager, or member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_member_role&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added role(s) {member_role} for {member_type} {member_id} in group {group_id}

Add Security Setting

Group security setting was added.

Event details
Event name add_security_setting
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

security_setting

string

Group security setting.

value

string

Value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added {security_setting} with value {value} in group {group_id} for the {namespace} namespace

Add Service Account Permission

Permission was added to a service account.

Event details
Event name add_service_account_permission
Parameters
member_id

string

Identifier of the member.

member_role

string

The role assigned to the member in the context of the group, such as owner, manager, or member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_service_account_permission&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added {member_role} permission to {member_type} {member_id} for the {namespace} namespace

Approve Join Request

Member approved a join request.

Event details
Event name approve_join_request
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=approve_join_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} approved join request from {member_type} {member_id} to group {group_id}

Ban Member including with Moderation

Member was banned from group directly or with moderation.

Event details
Event name ban_member_with_moderation
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=ban_member_with_moderation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} banned {member_type} {member_id} from group {group_id} during message moderation

Change Info Setting

Group info setting was changed.

Event details
Event name change_info_setting
Parameters
group_id

string

Identifier of the target group.

info_setting

string

Group info setting.

namespace

string

Namespace of the target group.

new_value

string

New value of a group setting.

old_value

string

Old value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed {info_setting} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace

Change Security Setting

Group security setting was changed.

Event details
Event name change_security_setting
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

new_value

string

New value of a group setting.

old_value

string

Old value of a group setting.

security_setting

string

Group security setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed {security_setting} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace

Change Security Setting State

Group security setting state was changed.

Event details
Event name change_security_setting_state
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

new_value

string

New value of a group setting.

old_value

string

Old value of a group setting.

security_setting_state

string

Group security setting state.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_security_setting_state&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed {security_setting_state} from {old_value} to {new_value} in group {group_id} for the {namespace} namespace

Create Group

Group was created.

Event details
Event name create_group
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=create_group&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} created group {group_id} for the {namespace} namespace

Create Namespace

Namespace was created.

Event details
Event name create_namespace
Parameters
namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=create_namespace&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} created a namespace {namespace}

Delete Group

Group was deleted.

Event details
Event name delete_group
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=delete_group&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted group {group_id} for the {namespace} namespace

Delete Namespace

Namespace was deleted.

Event details
Event name delete_namespace
Parameters
namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=delete_namespace&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted a namespace {namespace}

Dynamic Group query was added

Dynamic Group query add event name.

Event details
Event name add_dynamic_group_query
Parameters
dynamic_group_query

string

Dynamic group query.

group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_dynamic_group_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added dynamic group query with value {dynamic_group_query} in group {group_id} for the {namespace} namespace

Dynamic Group query was changed

Dynamic Group query change event name.

Event details
Event name change_dynamic_group_query
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

new_value

string

New value of a group setting.

old_value

string

Old value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=change_dynamic_group_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed dynamic group query from {old_value} to {new_value} in group {group_id} for the {namespace} namespace

Invite Member

Member was invited to a group.

Event details
Event name invite_member
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=invite_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} invited {member_type} {member_id} to group {group_id}

Join

Member added themself to a group.

Event details
Event name join
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=join&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added themself to group {group_id}

Membership expiration added

Membership expiration added event name.

Event details
Event name add_membership_expiry
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

membership_expiry

string

Membership expiration time.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=add_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added membership expiration with value {membership_expiry} for {member_type} {member_id} in group {group_id}

Membership expiration removed

Membership expiration removed event name.

Event details
Event name remove_membership_expiry
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

old_value

string

Old value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed membership expiration for {member_type} {member_id} in group {group_id}

Membership expiration updated

Membership expiration updated event name.

Event details
Event name update_membership_expiry
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

new_value

string

New value of a group setting.

old_value

string

Old value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=update_membership_expiry&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed membership expiration of {member_type} {member_id} from {old_value} to {new_value} in group {group_id}

Reject Invitation

Member rejected an invitation to join a group.

Event details
Event name reject_invitation
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=reject_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} rejected an invitation to group {group_id}

Reject Join Request

Member rejected a join request.

Event details
Event name reject_join_request
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=reject_join_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} rejected join request from {member_type} {member_id} to group {group_id}

Remove Info Setting

Group info setting was removed.

Event details
Event name remove_info_setting
Parameters
group_id

string

Identifier of the target group.

info_setting

string

Group info setting.

namespace

string

Namespace of the target group.

value

string

Value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_info_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed {info_setting} with value {value} in group {group_id} for the {namespace} namespace

Remove Member

Member was removed from a group.

Event details
Event name remove_member
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed {member_type} {member_id} from group {group_id}

Remove Member Role

Role was removed for a member in a group.

Event details
Event name remove_member_role
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_role

string

The role assigned to the member in the context of the group, such as owner, manager, or member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_member_role&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed role(s) {member_role} for {member_type} {member_id} in group {group_id}

Remove Security Setting

Group security setting was removed.

Event details
Event name remove_security_setting
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

security_setting

string

Group security setting.

value

string

Value of a group setting.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_security_setting&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed {security_setting} with value {value} in group {group_id} for the {namespace} namespace

Remove Service Account Permission

Permission was removed for a service account.

Event details
Event name remove_service_account_permission
Parameters
member_id

string

Identifier of the member.

member_role

string

The role assigned to the member in the context of the group, such as owner, manager, or member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=remove_service_account_permission&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed {member_role} permission of {member_type} {member_id} for the {namespace} namespace

Request to Join

Member requested to join a group.

Event details
Event name request_to_join
Parameters
group_id

string

Identifier of the target group.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=request_to_join&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} requested to join group {group_id}

Revoke Invitation

Member revoked an invitation sent to another user.

Event details
Event name revoke_invitation
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=revoke_invitation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} revoked invitation to {member_type} {member_id} from group {group_id}

Unban Member

Member was unbanned from a group.

Event details
Event name unban_member
Parameters
group_id

string

Identifier of the target group.

member_id

string

Identifier of the member.

member_type

string

A member's type, such as user, group, or service account. In rare cases, a value of "other" appears when the member type is unknown.

namespace

string

Namespace of the target group.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/groups_enterprise?eventName=unban_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed ban for {member_type} {member_id} for group {group_id}