SensitiveAdminAction

Alert that is triggered when Sensitive Admin Action occur in customer account.

JSON representation
{
  "eventTime": string,
  "actorEmail": string,

  // Union field action can be only one of the following:
  "primaryAdminChangedEvent": {
    object (PrimaryAdminChangedEvent)
  },
  "ssoProfileCreatedEvent": {
    object (SSOProfileCreatedEvent)
  },
  "ssoProfileUpdatedEvent": {
    object (SSOProfileUpdatedEvent)
  },
  "ssoProfileDeletedEvent": {
    object (SSOProfileDeletedEvent)
  },
  "superAdminPasswordResetEvent": {
    object (SuperAdminPasswordResetEvent)
  }
  // End of list of possible types for union field action.
}
Fields
eventTime

string (Timestamp format)

The time at which event occurred

actorEmail

string

Email of person who performed the action

Union field action. Sensitive event which have occurred action can be only one of the following:
primaryAdminChangedEvent

object (PrimaryAdminChangedEvent)

Event occurred when primary admin changed in customer's account

ssoProfileCreatedEvent

object (SSOProfileCreatedEvent)

Event occurred when SSO Profile created in customer's account

ssoProfileUpdatedEvent

object (SSOProfileUpdatedEvent)

Event occurred when SSO Profile updated in customer's account

ssoProfileDeletedEvent

object (SSOProfileDeletedEvent)

Event occurred when SSO Profile deleted in customer's account

superAdminPasswordResetEvent

object (SuperAdminPasswordResetEvent)

Event occurred when password was reset for super admin in customer's account

SuperAdminPasswordResetEvent

Event occurred when password was reset for super admin in customer's account. The event are being received from insight forwarder

JSON representation
{
  "userEmail": string
}
Fields
userEmail

string

email of person whose password was reset