This document lists the events and parameters for
various types of
OAuth Token Audit activity events. You can retrieve these events by
calling Activities.list()
with applicationName=token.
Auth
Events of this type are returned with type=auth.
Activity
Access activity for an application.
| Event details |
| Event name |
activity |
| Parameters |
api_name |
string
The API name which was used in the OAuth Activity.
|
app_name |
string
The application for which access was granted or revoked.
|
client_id |
string
Client ID to which access has been granted / revoked.
|
client_type |
string
The client type.
Possible values:
CONNECTED_DEVICE
A connected device client.NATIVE_ANDROID
An Android application.NATIVE_APPLICATION
A native application.NATIVE_CHROME_EXTENSION
A Chrome application.NATIVE_DESKTOP
A native Desktop application.NATIVE_DEVICE
A native device application.NATIVE_IOS
An iOS application.NATIVE_SONY
A native Sony application.NATIVE_UNIVERSAL_WINDOWS_PLATFORM
A native Universal Windows Platform application.TYPE_UNSPECIFIED
An unspecified client type.WEB
A web application.
|
method_name |
string
The method name which was used in the OAuth Activity.
|
num_response_bytes |
integer
The number of response bytes in the OAuth Activity.
|
product_bucket |
string
The product bucket of the application associated with this OAuth Activity.
Possible values:
APPS_SCRIPT_API
The Apps Script API product bucket.APPS_SCRIPT_RUNTIME
The Apps Script runtime product bucket.CALENDAR
The Calendar product bucket.CLASSROOM
The Classroom product bucket.CLOUD_SEARCH
The Cloud Search product bucket.COMMUNICATIONS
The Communications product bucket.CONTACTS
The Contacts product bucket.DRIVE
The Drive product bucket.GMAIL
The Gmail product bucket.GPLUS
The G+ product bucket.GROUPS
The Groups product bucket.GSUITE_ADMIN
The Google Workspace Admin product bucket.IDENTITY
The Identity product bucket.OTHER
A product bucket for applications that don't fall into the other buckets.TASKS
The Tasks product bucket.VAULT
The Vault product bucket.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/token?eventName=activity&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{app_name} called {method_name} on behalf of {actor}
|
Authorize
A user authorized access to an application for their data.
| Event details |
| Event name |
authorize |
| Parameters |
app_name |
string
The application for which access was granted or revoked.
|
client_id |
string
Client ID to which access has been granted / revoked.
|
client_type |
string
The client type.
Possible values:
CONNECTED_DEVICE
A connected device client.NATIVE_ANDROID
An Android application.NATIVE_APPLICATION
A native application.NATIVE_CHROME_EXTENSION
A Chrome application.NATIVE_DESKTOP
A native Desktop application.NATIVE_DEVICE
A native device application.NATIVE_IOS
An iOS application.NATIVE_SONY
A native Sony application.NATIVE_UNIVERSAL_WINDOWS_PLATFORM
A native Universal Windows Platform application.TYPE_UNSPECIFIED
An unspecified client type.WEB
A web application.
|
scope |
string
Scopes under which access was granted / revoked.
|
scope_data |
message
Scope Data.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/token?eventName=authorize&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} authorized access to {app_name} for {scope} scopes
|
Request
Access requested for an application.
| Event details |
| Event name |
request |
| Parameters |
app_name |
string
The application for which access was granted or revoked.
|
client_id |
string
Client ID to which access has been granted / revoked.
|
client_type |
string
The client type.
Possible values:
CONNECTED_DEVICE
A connected device client.NATIVE_ANDROID
An Android application.NATIVE_APPLICATION
A native application.NATIVE_CHROME_EXTENSION
A Chrome application.NATIVE_DESKTOP
A native Desktop application.NATIVE_DEVICE
A native device application.NATIVE_IOS
An iOS application.NATIVE_SONY
A native Sony application.NATIVE_UNIVERSAL_WINDOWS_PLATFORM
A native Universal Windows Platform application.TYPE_UNSPECIFIED
An unspecified client type.WEB
A web application.
|
scope |
string
Scopes under which access was granted / revoked.
|
scope_data |
message
Scope Data.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/token?eventName=request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} requested access to {app_name} for {scope} scopes
|
Revoke
Access revoked for an application to a users data.
| Event details |
| Event name |
revoke |
| Parameters |
app_name |
string
The application for which access was granted or revoked.
|
client_id |
string
Client ID to which access has been granted / revoked.
|
client_type |
string
The client type.
Possible values:
CONNECTED_DEVICE
A connected device client.NATIVE_ANDROID
An Android application.NATIVE_APPLICATION
A native application.NATIVE_CHROME_EXTENSION
A Chrome application.NATIVE_DESKTOP
A native Desktop application.NATIVE_DEVICE
A native device application.NATIVE_IOS
An iOS application.NATIVE_SONY
A native Sony application.NATIVE_UNIVERSAL_WINDOWS_PLATFORM
A native Universal Windows Platform application.TYPE_UNSPECIFIED
An unspecified client type.WEB
A web application.
|
scope |
string
Scopes under which access was granted / revoked.
|
scope_data |
message
Scope Data.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/token?eventName=revoke&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} revoked access to {app_name} for {scope} scopes
|
