This document lists the events and parameters for
various types of
Drive Audit activity events. You can retrieve these events by
calling Activities.list()
with applicationName=drive.
Access
Events of this type are returned with type=access.
Access request denied
An access request was denied.
| Event details |
| Event name |
deny_access_request |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_user |
string
The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=deny_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} denied an access request for {target_user}
|
Access request expired
An access request expired.
| Event details |
| Event name |
expire_access_request |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_user |
string
The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=expire_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
An access request for {target_user} expired
|
Access requested
Access requested to an item.
| Event details |
| Event name |
request_access |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
requested_role |
string
Requested access role.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
target_user |
string
The email address of the user or group that the actor is requesting access for.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} requested access to an item for {target_user}
|
Add to folder
Document add to folder.
| Event details |
| Event name |
add_to_folder |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
destination_folder_id |
string
Destination folder Id.
|
destination_folder_title |
string
Destination folder title.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_to_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} added an item to {destination_folder_title}
|
Appeal abuse violation
| Event details |
| Event name |
appeal_abuse_violation |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=appeal_abuse_violation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} appealed an abuse violation
|
Approval canceled
Drive approval canceled.
| Event details |
| Event name |
approval_canceled |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_canceled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} canceled an approval on an item
|
Drive approval comment added.
| Event details |
| Event name |
approval_comment_added |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_comment_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} added a comment on an approval on an item
|
Approval completed
Drive approval completed.
| Event details |
| Event name |
approval_completed |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_completed&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
An approval was completed
|
Approval decisions reset
Drive approval decisions reset.
| Event details |
| Event name |
approval_decisions_reset |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_decisions_reset&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
Approval decisions were reset
|
Approval due time change
Drive approval due time change.
| Event details |
| Event name |
approval_due_time_change |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_due_time_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} requested a due time change on an approval
|
Approval requested
Drive approval requested.
| Event details |
| Event name |
approval_requested |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_requested&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} requested approval on an item
|
Approval reviewer change
Drive approval reviewer change.
| Event details |
| Event name |
approval_reviewer_change |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} requested a reviewer change on an approval
|
Approval reviewer responded
Drive approval reviewer responded.
| Event details |
| Event name |
approval_reviewer_responded |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_responded&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} reviewed an approval on an item
|
A comment was created.
| Event details |
| Event name |
create_comment |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} created a comment
|
A comment was deleted.
| Event details |
| Event name |
delete_comment |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} deleted a comment
|
A comment was edited.
| Event details |
| Event name |
edit_comment |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} edited a comment
|
A comment was reassigned.
| Event details |
| Event name |
reassign_comment |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reassign_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} reassigned a comment
|
A comment was reopened.
| Event details |
| Event name |
reopen_comment |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reopen_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} reopened a comment
|
A comment was resolved.
| Event details |
| Event name |
resolve_comment |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=resolve_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} resolved a comment
|
Connected Sheets Query
| Event details |
| Event name |
connected_sheets_query |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
data_connection_id |
string
Data connection ID.
|
delegating_principal |
string
Delegating user whose credentials are used.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
execution_id |
string
Query execution ID.
|
execution_trigger |
string
The trigger for the query execution.
Possible values:
api
One Platform API execution trigger.apps_script
Apps Script execution trigger.scheduled
Scheduled execution trigger.sheets_ui
Sheets UI execution trigger.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
query_type |
string
Type of query.
Possible values:
big_query
BigQuery.looker
Looker.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=connected_sheets_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{execution_trigger} {query_type} query executed
|
Copy
Document copy. This event is present for the new item that was created during the copy. The source_copy event is present for the original item.
| Event details |
| Event name |
copy |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
copy_type |
string
Indicates whether the original item and new item are owned by the same organization.
Possible values:
external
The original item and new item are not owned by the same organization.internal
The original item and new item are owned by the same organization.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
encryption_change |
string
The encryption change that happened as part of this copy. An unset value indicates that no encryption change happened.
Possible values:
decrypted_copy
An unencrypted item was created from an encrypted item.encrypted_copy
An encrypted item was created from an unencrypted item.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
The title of the newly created document.
|
old_value |
string
The title of the original document.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} created a copy of original document {old_value}
|
Create
Document create.
| Event details |
| Event name |
create |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
encryption_enforcement_option |
string
The client-side encryption policy being applied to the user at time of the item's creation.
Possible values:
default
The created item was required to be client-side encrypted by default.disabled
The created item was not required to be client-side encrypted.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} created an item
|
Delete
Document delete.
| Event details |
| Event name |
delete |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} deleted an item
|
Download
Document download.
| Event details |
| Event name |
download |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} downloaded an item
|
Drive Email as Attachment
| Event details |
| Event name |
email_as_attachment |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target |
string
Target User or Group.
|
target_user |
string
The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_as_attachment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} shared this document as an email attachment to {target}
|
Edit
Document edit.
| Event details |
| Event name |
edit |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} edited an item
|
Email collaborators
A user emailed this item's collaborators.
| Event details |
| Event name |
email_collaborators |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
recipients |
string
Email addresses of the recipients.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_collaborators&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} emailed collaborators of an item
|
eSignature canceled
| Event details |
| Event name |
cancel_esignature |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=cancel_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} canceled an eSignature on an item
|
eSignature completed
An eSignature request was completed. This indicates that some reviewers declined to eSign, or the item was eSigned by required reviewers and signed copies were generated successfully.
| Event details |
| Event name |
complete_esignature |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
esignature_status |
string
The title of a field that describes the final state of an eSignature on a document.
Possible values:
declined
The eSignature on the document was declined.signed
The eSignature on the document was signed.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=complete_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
An eSignature was completed
|
eSignature requested
| Event details |
| Event name |
request_esignature |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} requested an eSignature on an item
|
eSignature reviewer responded
An eSignature reviewer responded with a decision, such as eSigning the document or declining the request.
| Event details |
| Event name |
review_esignature |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
esignature_decision |
string
The title of a field describing a signer's decision to sign or decline a document's eSignature.
Possible values:
declined
The reviewer declined to eSign the document.signed
The reviewer eSigned the document.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=review_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} reviewed an eSignature on an item
|
Download Forms Response.
| Event details |
| Event name |
download_forms_response |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_forms_response&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} downloaded forms responses
|
Item content accessed
An application accessed an item's content on behalf of a user.
| Event details |
| Event name |
access_item_content |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
api_method |
string
The API method used to generate the event.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
An application accessed an item's content on behalf of {actor}
|
Item content synced
Document synced.
| Event details |
| Event name |
sync_item_content |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sync_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} synced item content
|
Label applied
Label was applied.
| Event details |
| Event name |
label_added |
| Parameters |
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
label |
string
The unique Identifier of a Label.
|
label_title |
string
Label title.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
reason |
string
Reason for label addition, removal, or value change event.
Possible values:
copy
Reason for change Drive item copy.default_label
Reason for change default label behavior.dlp_action
Reason for change DLP.reason_unspecified
Reason for change unspecified.user_action
Reason for change is a user action.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} applied Label {label_title}.
|
Label applied on creation
Label was applied automatically when the Drive item was created.
| Event details |
| Event name |
label_added_by_item_create |
| Parameters |
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
label |
string
The unique Identifier of a Label.
|
label_title |
string
Label title.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
reason |
string
Reason for label addition, removal, or value change event.
Possible values:
copy
Reason for change Drive item copy.default_label
Reason for change default label behavior.dlp_action
Reason for change DLP.reason_unspecified
Reason for change unspecified.user_action
Reason for change is a user action.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added_by_item_create&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
Label {label_title} was automatically applied on creation.
|
Label field value changed
Label Field value was changed.
| Event details |
| Event name |
label_field_changed |
| Parameters |
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
field |
string
Label Field display name.
|
field_id |
string
Label Field ID.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
label |
string
The unique Identifier of a Label.
|
label_title |
string
Label title.
|
new_value |
string
New Value.
|
new_value_id |
string
New Value IDs.
|
old_value |
string
Old Value.
|
old_value_id |
string
Old Value IDs.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
reason |
string
Reason for label addition, removal, or value change event.
Possible values:
copy
Reason for change Drive item copy.default_label
Reason for change default label behavior.dlp_action
Reason for change DLP.reason_unspecified
Reason for change unspecified.user_action
Reason for change is a user action.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_field_changed&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed the value of field {field} (Label: {label_title}) from '{old_value}' to '{new_value}'.
|
Label removed
Label was removed.
| Event details |
| Event name |
label_removed |
| Parameters |
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
label |
string
The unique Identifier of a Label.
|
label_title |
string
Label title.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
reason |
string
Reason for label addition, removal, or value change event.
Possible values:
copy
Reason for change Drive item copy.default_label
Reason for change default label behavior.dlp_action
Reason for change DLP.reason_unspecified
Reason for change unspecified.user_action
Reason for change is a user action.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_removed&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} removed Label {label_title}.
|
Lock
Document lock.
| Event details |
| Event name |
add_lock |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
lock_type |
string
The lock type on an item.
Possible values:
domain_admin
Domain Admin lock type.editor
Editor lock type.owner
Owner lock type.unknown_lock_type
Unknown lock type.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} locked an item
|
Move
Document move.
| Event details |
| Event name |
move |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
destination_folder_id |
string
Destination folder Id.
|
destination_folder_title |
string
Destination folder title.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
source_folder_id |
string
Source folder Id.
|
source_folder_title |
string
Source folder title.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=move&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} moved an item from {source_folder_title} to {destination_folder_title}
|
Preview
Document preview.
| Event details |
| Event name |
preview |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=preview&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} previewed an item
|
Print
Document print.
| Event details |
| Event name |
print |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=print&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} printed an item
|
Remove from folder
Document remove from folder.
| Event details |
| Event name |
remove_from_folder |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
source_folder_id |
string
Source folder Id.
|
source_folder_title |
string
Source folder title.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_from_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} removed an item from {source_folder_title}
|
Rename
Document rename.
| Event details |
| Event name |
rename |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
|
old_value |
string
Old Value.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=rename&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} renamed {old_value} to {new_value}
|
Report abuse
| Event details |
| Event name |
report_abuse |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=report_abuse&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
An abuse report was submitted for an item
|
Restore
Document restore.
| Event details |
| Event name |
untrash |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=untrash&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} restored an item
|
Revision deleted
A revision of an item was deleted.
| Event details |
| Event name |
delete_revision |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
revision_create_timestamp |
integer
The timestamp when the revision was originally created (in epoch microseconds).
|
revision_id |
string
The ID of the revision.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} deleted a revision of this item
|
Revision pinned
A revision of an item was pinned, indicating that the revision should be kept forever.
| Event details |
| Event name |
pin_revision |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
revision_create_timestamp |
integer
The timestamp when the revision was originally created (in epoch microseconds).
|
revision_id |
string
The ID of the revision.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=pin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} pinned a revision of this item
|
Revision unpinned
A revision of an item was unpinned, indicating that the revision should not be kept forever.
| Event details |
| Event name |
unpin_revision |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
revision_create_timestamp |
integer
The timestamp when the revision was originally created (in epoch microseconds).
|
revision_id |
string
The ID of the revision.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unpin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} unpinned a revision of this item
|
Script trigger created
Creation of an Apps Script trigger.
| Event details |
| Event name |
create_script_trigger |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
script_container_app |
string
The container application of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.
Possible values:
document
Google Docs application.form
Google Forms application.sites
Google Sites application.slides
Google Slides application.spreadsheet
Google Sheets application.unknown
Unknown application.
|
script_container_id |
string
The container ID of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.
|
script_trigger_id |
string
The ID of an Apps Script trigger.
|
script_trigger_source_app |
string
The source providing a trigger. See the Apps Script Installable Triggers documentation for more information about script triggers.
Possible values:
calendar
Google Calendar application.clock
System time.document
Google Docs application.form
Google Forms application.slides
Google Slides application.spreadsheet
Google Sheets application.unknown
Unknown application.
|
script_trigger_type |
string
Script trigger type. See the Apps Script Installable Triggers documentation for more information about script triggers.
Possible values:
event_any
On any event.event_on_change
On change.event_on_edit
On edit.event_on_event_created
On calendar event created.event_on_event_deleted
On calendar event deleted.event_on_event_updated
On calendar event updated.event_on_form_submit
On form submit.event_on_open
On open.timed_oneshot
Oneshot.timed_recurring
Recurring.trigger_type_unspecified
Trigger type unspecified.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} created a script trigger
|
Script trigger deleted
Deletion of an Apps Script trigger.
| Event details |
| Event name |
delete_script_trigger |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
script_container_app |
string
The container application of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.
Possible values:
document
Google Docs application.form
Google Forms application.sites
Google Sites application.slides
Google Slides application.spreadsheet
Google Sheets application.unknown
Unknown application.
|
script_container_id |
string
The container ID of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.
|
script_trigger_id |
string
The ID of an Apps Script trigger.
|
script_trigger_source_app |
string
The source providing a trigger. See the Apps Script Installable Triggers documentation for more information about script triggers.
Possible values:
calendar
Google Calendar application.clock
System time.document
Google Docs application.form
Google Forms application.slides
Google Slides application.spreadsheet
Google Sheets application.unknown
Unknown application.
|
script_trigger_type |
string
Script trigger type. See the Apps Script Installable Triggers documentation for more information about script triggers.
Possible values:
event_any
On any event.event_on_change
On change.event_on_edit
On edit.event_on_event_created
On calendar event created.event_on_event_deleted
On calendar event deleted.event_on_event_updated
On calendar event updated.event_on_form_submit
On form submit.event_on_open
On open.timed_oneshot
Oneshot.timed_recurring
Recurring.trigger_type_unspecified
Trigger type unspecified.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} deleted a script trigger
|
Sheets Import Url
A Google Sheet fetched one or more urls via an Import function.
| Event details |
| Event name |
sheets_import_url |
| Parameters |
accessed_url |
string
The URLs that were accessed.
|
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
A url was imported from this item
|
Sheets ImportRange
| Event details |
| Event name |
sheets_import_range |
| Parameters |
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
|
sheets_import_range_recipient_doc |
string
Sheets ImportRange recipient doc.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{sheets_import_range_recipient_doc} imported range from an item
|
Source Copy
Source document copy. This event is present for the original item that was copied. The copy event is present for the newly created item.
| Event details |
| Event name |
source_copy |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
copy_type |
string
Indicates whether the original item and new item are owned by the same organization.
Possible values:
external
The original item and new item are not owned by the same organization.internal
The original item and new item are owned by the same organization.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
encryption_change |
string
The encryption change that happened as part of this copy. An unset value indicates that no encryption change happened.
Possible values:
decrypted_copy
An unencrypted item was created from an encrypted item.encrypted_copy
An encrypted item was created from an unencrypted item.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
The title of the newly created document.
|
old_value |
string
The title of the original document.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=source_copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} copied this item, creating a new item {copy_type} your organization {new_value}
|
Suggestion accepted
A suggestion was accepted.
| Event details |
| Event name |
accept_suggestion |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=accept_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} accepted a suggestion
|
Suggestion created
A suggestion was created.
| Event details |
| Event name |
create_suggestion |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} created a suggestion
|
Suggestion deleted
A suggestion was deleted.
| Event details |
| Event name |
delete_suggestion |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} deleted a suggestion
|
Suggestion rejected
A suggestion was rejected.
| Event details |
| Event name |
reject_suggestion |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reject_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} rejected a suggestion
|
Trash
Document trash.
| Event details |
| Event name |
trash |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=trash&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} trashed an item
|
Unlock
Document unlock.
| Event details |
| Event name |
remove_lock |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
lock_type |
string
The lock type on an item.
Possible values:
domain_admin
Domain Admin lock type.editor
Editor lock type.owner
Owner lock type.unknown_lock_type
Unknown lock type.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} unlocked an item
|
Unmovable item relocated
Unmovable document reparented.
| Event details |
| Event name |
unmovable_item_reparented |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
destination_folder_id |
string
Destination folder Id.
|
destination_folder_title |
string
Destination folder title.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
source_folder_id |
string
Source folder Id.
|
source_folder_title |
string
Source folder title.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unmovable_item_reparented&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
When a parent folder was moved, an item that couldn't be moved was relocated from {source_folder_title} to {destination_folder_title}
|
Upload
Document upload.
| Event details |
| Event name |
upload |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
encryption_enforcement_option |
string
The client-side encryption policy being applied to the user at time of the item's creation.
Possible values:
default
The created item was required to be client-side encrypted by default.disabled
The created item was not required to be client-side encrypted.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} uploaded an item
|
URL accessed
A URL was accessed from an AppsScript, see URL Fetch Service for details.
Note: doc_id and other file-related fields, such as doc_type and owner, may not be reported.
| Event details |
| Event name |
access_url |
| Parameters |
accessed_url |
string
The URLs that were accessed.
|
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
script_id |
string
The document ID of the executing script.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
A script accessed a url during execution
|
Video caption deleted
Delete video caption.
| Event details |
| Event name |
delete_video_caption |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
track_name |
string
Video caption track name.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} deleted a video caption
|
Video caption downloaded
Download video caption.
| Event details |
| Event name |
download_video_caption |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
track_name |
string
Video caption track name.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} downloaded a video caption
|
Video caption uploaded
Upload video caption.
| Event details |
| Event name |
upload_video_caption |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
track_name |
string
Video caption track name.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} uploaded a video caption
|
View
Document view.
| Event details |
| Event name |
view |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=view&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} viewed an item
|
ACL changed
ACL Changed.
Events of this type are returned with type=acl_change.
Apply Security Update
Document apply security update.
| Event details |
| Event name |
apply_security_update |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} applied the security update to a file
|
Bulk Apply Security Update
Bulk apply security update.
| Event details |
| Event name |
shared_drive_apply_security_update |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} applied the security update to all files in a shared drive
|
Bulk Remove Security Update
Bulk remove security update.
| Event details |
| Event name |
shared_drive_remove_security_update |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} removed the security update from all files in a shared drive
|
Changed owners from parent folder
Change in owner of document due to hierarchy reconciliation.
| Event details |
| Event name |
change_owner_hierarchy_reconciled |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_owner |
string
The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name.
|
new_owner_is_shared_drive |
boolean
Boolean flag denoting whether new owner is a shared drive.
|
new_owner_shared_drive_id |
string
The shared drive root id if the new document owner is a shared drive.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
Due to a change in a parent folder, the owner of an item was changed
|
Document changed owners
| Event details |
| Event name |
change_owner |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_owner |
string
The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name.
|
new_owner_is_shared_drive |
boolean
Boolean flag denoting whether new owner is a shared drive.
|
new_owner_shared_drive_id |
string
The shared drive root id if the new document owner is a shared drive.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed owner of an item
|
Drive Publish Status Change
| Event details |
| Event name |
publish_change |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_publish_visibility |
string
New Publish Visibility Value.
Possible values:
nobody
Nobody.public_in_the_domain
Anyone within the audience can view published document.public_on_the_web
Anyone on the web can view published document.unchanged
Unchanged.
|
new_value |
string
New Value.
Possible values:
auto
Publish Live File.fixed
Publish a Version.none
Unpublished.unchanged
Unchanged.
|
old_publish_visibility |
string
Old Publish Visibility Value.
Possible values:
nobody
Nobody.public_in_the_domain
Anyone within the audience can view published document.public_on_the_web
Anyone on the web can view published document.unchanged
Unchanged.
|
old_value |
string
Old Value.
Possible values:
auto
Publish Live File.fixed
Publish a Version.none
Unpublished.unchanged
Unchanged.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed publish status from {old_value} to {new_value} and changed visibility from {old_publish_visibility} to {new_publish_visibility}
|
Editor Settings Change
Editor Settings Changed.
| Event details |
| Event name |
change_acl_editors |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
Possible values:
owner
The person modifying the access on the file is the Owner of the file.writers
The person modifying the access on the file is a Writer (Editor) of the file.
|
old_value |
string
Old Value.
Possible values:
owner
The person modifying the access on the file is the Owner of the file.writers
The person modifying the access on the file is a Writer (Editor) of the file.
|
old_visibility |
string
Old Visibility of Target File.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
visibility_change |
string
Change in overall visibility of the file.
Possible values:
external
Overall visibility changed from internal to external.internal
Overall visibility changed from external to internal.none
No change in overall visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_acl_editors&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed editor settings from {old_value} to {new_value}
|
Link Sharing Access Type Change
Change in link sharing access type of document.
| Event details |
| Event name |
change_document_access_scope |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_value |
string
Old Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_visibility |
string
Old Visibility of Target File.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_domain |
string
Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
visibility_change |
string
Change in overall visibility of the file.
Possible values:
external
Overall visibility changed from internal to external.internal
Overall visibility changed from external to internal.none
No change in overall visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}
|
Link Sharing Access Type Change from Parent Folder
Change in link sharing access type of document due to hierarchy reconciliation.
| Event details |
| Event name |
change_document_access_scope_hierarchy_reconciled |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_value |
string
Old Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_visibility |
string
Old Visibility of Target File.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_domain |
string
Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
visibility_change |
string
Change in overall visibility of the file.
Possible values:
external
Overall visibility changed from internal to external.internal
Overall visibility changed from external to internal.none
No change in overall visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}
|
Link Sharing visibility change
Change in link sharing visibility of document.
| Event details |
| Event name |
change_document_visibility |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
Possible values:
people_with_link
Anyone with the link on the web can access.people_within_domain_with_link
Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.private
Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).public_in_the_domain
Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.public_on_the_web
Public on the web.
|
old_value |
string
Old Value.
Possible values:
people_with_link
Anyone with the link on the web can access.people_within_domain_with_link
Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.private
Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).public_in_the_domain
Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.public_on_the_web
Public on the web.
|
old_visibility |
string
Old Visibility of Target File.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_domain |
string
Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
visibility_change |
string
Change in overall visibility of the file.
Possible values:
external
Overall visibility changed from internal to external.internal
Overall visibility changed from external to internal.none
No change in overall visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed link sharing visibility from {old_value} to {new_value} for {target_domain}
|
Link Sharing visibility change from Parent Folder
Change in link sharing visibility of document due to hierarchy reconciliation.
| Event details |
| Event name |
change_document_visibility_hierarchy_reconciled |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
Possible values:
people_with_link
Anyone with the link on the web can access.people_within_domain_with_link
Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.private
Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).public_in_the_domain
Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.public_on_the_web
Public on the web.
|
old_value |
string
Old Value.
Possible values:
people_with_link
Anyone with the link on the web can access.people_within_domain_with_link
Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.private
Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).public_in_the_domain
Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.public_on_the_web
Public on the web.
|
old_visibility |
string
Old Visibility of Target File.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_domain |
string
Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
visibility_change |
string
Change in overall visibility of the file.
Possible values:
external
Overall visibility changed from internal to external.internal
Overall visibility changed from external to internal.none
No change in overall visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
Due to a change in a parent folder, the link sharing visibility for {target_domain} changed from {old_value} to {new_value}
|
Publish new version
A new version of this item was published.
| Event details |
| Event name |
publish_new_version |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_new_version&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} published a new version
|
Remove security update
Document remove security update.
| Event details |
| Event name |
remove_security_update |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} removed the security update from a file
|
Shared Drive Membership Change
Shared drive Membership Change.
| Event details |
| Event name |
shared_drive_membership_change |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
added_role |
string
Added membership role to a user or group in a shared drive. See Shared drives access for more information about roles.
Possible values:
commenter
Shared drive role Commenter.content_manager
Shared drive role Content manager.editor
Shared drive role Contributor.none
No role in shared drive.organizer
Shared drive role Manager.viewer
Shared drive role Viewer.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
membership_change_type |
string
Type of change in shared drive membership of a user/group.
Possible values:
add_to_shared_drive
Addition to a shared drive.change_roles
Change of a member's role in a shared drive.re_share
Re-share of a member's role in a shared drive.remove_from_shared_drive
Removal from a shared drive.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
removed_role |
string
Removed membership role of a user/group in a shared drive.
Possible values:
commenter
Shared drive role Commenter.content_manager
Shared drive role Content manager.editor
Shared drive role Contributor.none
No role in shared drive.organizer
Shared drive role Manager.viewer
Shared drive role Viewer.
|
target |
string
Target User or Group.
|
target_user |
string
The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_membership_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} made a membership change of type {membership_change_type} for {target} by removing role(s) {removed_role} and adding role(s) {added_role}
|
Shared Drive Settings Change
| Event details |
| Event name |
shared_drive_settings_change |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_settings_state |
string
New state of shared drive settings.
Possible values:
none
Shared drive settings change value None.restricted
Shared drive settings change value Restricted.unrestricted
Shared drive settings change value Unrestricted.
|
old_settings_state |
string
Old state of shared drive settings.
Possible values:
none
Shared drive settings change value None.restricted
Shared drive settings change value Restricted.unrestricted
Shared drive settings change value Unrestricted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target |
string
Target User or Group.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
shared_drive_settings_change_type |
string
Type of change in shared drive settings.
Possible values:
cross_domain_sharing
A shared drive settings change that restricts or unrestricts the ability for the contents within the shared drive to be shared outside the domain.direct_acl
A shared drive settings change that restricts or unrestricts the ability to add users directly onto a file when they're not a member.download
A shared drive settings change that restricts or unrestricts a user's ability to download files from the shared drive.drive_fs
A shared drive settings change that restricts or unrestricts access to Google Drive for desktop.file_organizer_can_share_folders
A shared drive settings change that restricts or unrestricts a file organizer's ability to share folders.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_settings_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed {team_drive_settings_change_type} setting from {old_settings_state} to {new_settings_state}
|
Sheets ImportRange access change
| Event details |
| Event name |
sheets_import_range_access_change |
| Parameters |
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
|
sheets_import_range_enabled |
boolean
Whether the recipient Sheet is enabled to import data from this Sheet.
|
sheets_import_range_recipient_doc |
string
Sheets ImportRange recipient doc.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range_access_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} enabled Sheets range import to {sheets_import_range_recipient_doc}
|
User Sharing Permissions Change
User Sharing Permissions Changed.
| Event details |
| Event name |
change_user_access |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_value |
string
Old Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_visibility |
string
Old Visibility of Target File.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_user |
string
The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
visibility_change |
string
Change in overall visibility of the file.
Possible values:
external
Overall visibility changed from internal to external.internal
Overall visibility changed from external to internal.none
No change in overall visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
{actor} changed sharing permissions for {target_user} from {old_value} to {new_value}
|
User Sharing Permissions Change from Parent Folder
User Sharing Permissions Changed due to hierarchy reconciliation.
| Event details |
| Event name |
change_user_access_hierarchy_reconciled |
| Parameters |
actor_is_collaborator_account |
boolean
Whether the actor is a collaborator account.
|
billable |
boolean
Whether this activity is billable.
|
doc_id |
string
Document ID.
|
doc_title |
string
Document title.
|
doc_type |
string
Document type.
Possible values:
document
Doc type document.drawing
Doc type drawing.folder
Doc type folder.form
Doc type form.html
Doc type HTML.jam
Doc type Jam.jpeg
Doc type JPEG.mp4
Doc type MP4.mpeg
Doc type MPEG.msexcel
Doc type MS Excel.mspowerpoint
Doc type MS Powerpoint.msword
Doc type MS Word.pdf
Doc type PDF.png
Doc type PNG.presentation
Doc type presentation.quicktime
Doc type Quicktime.script
Google Apps Script.shortcut
Doc type is Google Shortcut.sites
Doc type is Google Sites.spreadsheet
Doc type spreadsheet.shared_drive
Doc type is a shared drive.txt
Doc type txt.unknown
Doc type unknown.video
Doc type is a Google Vids Video.
|
is_encrypted |
boolean
Whether the file is client-side encrypted.
|
new_value |
string
New Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_value |
string
Old Value.
Possible values:
can_comment
Can comment.can_edit
Can edit.can_respond
Can respond.can_view
Can view.can_view_published
Can view published.none
Scope none.organizer
Manager.owner
Is a owner.
|
old_visibility |
string
Old Visibility of Target File.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
originating_app_id |
string
The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
|
owner |
string
The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
|
owner_is_shared_drive |
boolean
Boolean flag denoting whether the owner is a shared drive.
|
owner_shared_drive_id |
string
The shared drive root ID if the document owner is a shared drive.
|
primary_event |
boolean
Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.
Possible values:
false
Boolean value false.true
Boolean value true.
|
target_user |
string
The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
|
shared_drive_id |
string
The unique identifier of the shared drive. Only populated for events or items from a shared drive.
|
visibility |
string
Visibility of target file.
Possible values:
people_with_link
Anyone with the link can access.people_within_domain_with_link
Anyone with the link within the audience can access.private
Private.public_in_the_domain
Anyone within the audience can access.public_on_the_web
Public on the web.shared_externally
Shared with explicit users/groups external to the domain.shared_internally
Shared with explicit users/groups internal to the domain.unknown
Unknown visibility.
|
visibility_change |
string
Change in overall visibility of the file.
Possible values:
external
Overall visibility changed from internal to external.internal
Overall visibility changed from external to internal.none
No change in overall visibility.
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
Due to a change in a parent folder, the sharing permissions for {target_user} changed from {old_value} to {new_value}
|
Events of this type are returned with type=pooled_quota_metadata.
Storage Usage Update
Drive storage usage update.
| Event details |
| Event name |
storage_usage_update |
| Parameters |
storage_usage_in_bytes |
integer
Storage usage (in bytes).
|
|
| Sample request |
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=storage_usage_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
|
| Admin Console message format |
Storage usage update for {actor}
|
