Admin Audit Activity Events - ChromeOS Settings

This document lists the events and parameters for ChromeOS Settings Admin Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=admin.

ChromeOS Settings

Events of this type are returned with type=CHROME_OS_SETTINGS.

Android Application Setting Change

Event details
Event name CHANGE_CHROME_OS_ANDROID_APPLICATION_SETTING
Parameters
APP_ID

string

Application ID.

CHROME_OS_SESSION_TYPE

string

ChromeOS sessiom type.

GROUP_EMAIL

string

The group's primary email address.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_ANDROID_APPLICATION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for Android app {APP_ID} for session type {CHROME_OS_SESSION_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

Change device state

Event for 'Change device state'.

Event details
Event name CHANGE_DEVICE_STATE
Parameters
DEVICE_NEW_STATE

string

The new state after the change state got called.

DEVICE_PREVIOUS_STATE

string

The original state before the change state got called.

DEVICE_SERIAL_NUMBER

string

The device's serial number.

DEVICE_TYPE

string

The device's type.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DEVICE_STATE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Changed the state of {DEVICE_TYPE} {DEVICE_SERIAL_NUMBER} from {DEVICE_PREVIOUS_STATE} to {DEVICE_NEW_STATE}

Change Device Upgrade

Event details
Event name CHANGE_DEVICE_UPGRADE
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DEVICE_UPGRADE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Changed upgrade from {OLD_VALUE} to {NEW_VALUE} for device with serial number {DEVICE_SERIAL_NUMBER}.

Chrome Application Setting Change

Event details
Event name CHANGE_CHROME_OS_APPLICATION_SETTING
Parameters
APP_ID

string

Application ID.

CHROME_OS_SESSION_TYPE

string

Chrome OS session type.

GROUP_EMAIL

string

The group's primary email address.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_APPLICATION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for Chrome app {APP_ID} for session type {CHROME_OS_SESSION_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

ChromeOS Device Command

Event details
Event name SEND_CHROME_OS_DEVICE_COMMAND
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=SEND_CHROME_OS_DEVICE_COMMAND&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Sent {NEW_VALUE} command to ChromeOS device {DEVICE_SERIAL_NUMBER}

ChromeOS Device Property Change

Event details
Event name CHANGE_CHROME_OS_DEVICE_ANNOTATION
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_DEVICE_ANNOTATION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
ChromeOS device {DEVICE_SERIAL_NUMBER} had its properties updated

ChromeOS Device Setting Change

Event details
Event name CHANGE_CHROME_OS_DEVICE_SETTING
Parameters
NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_DEVICE_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for ChromeOS devices in {ORG_UNIT_NAME} organization unit changed from {OLD_VALUE} to {NEW_VALUE}

ChromeOS Device State Change

Event details
Event name CHANGE_CHROME_OS_DEVICE_STATE
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_DEVICE_STATE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
State of ChromeOS device {DEVICE_SERIAL_NUMBER} changed from {OLD_VALUE} to {NEW_VALUE}

ChromeOS managed guest session setting change

Event details
Event name CHANGE_CHROME_OS_PUBLIC_SESSION_SETTING
Parameters
NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_PUBLIC_SESSION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for ChromeOS managed guest session in {ORG_UNIT_NAME} organization unit changed from {OLD_VALUE} to {NEW_VALUE}

ChromeOS Print Server Added

Print server is added.

Event details
Event name INSERT_CHROME_OS_PRINT_SERVER
Parameters
PRINT_SERVER_NAME

string

Name of a print server.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=INSERT_CHROME_OS_PRINT_SERVER&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Print server named {PRINT_SERVER_NAME} added.

ChromeOS Print Server Deleted

Existing print server is deleted.

Event details
Event name DELETE_CHROME_OS_PRINT_SERVER
Parameters
PRINT_SERVER_NAME

string

Name of a print server.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_CHROME_OS_PRINT_SERVER&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Print server {PRINT_SERVER_NAME} deleted.

ChromeOS Print Server Updated

Existing print server is updated.

Event details
Event name UPDATE_CHROME_OS_PRINT_SERVER
Parameters
NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

PRINT_SERVER_NAME

string

Name of a print server.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_CHROME_OS_PRINT_SERVER&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Print server {PRINT_SERVER_NAME} updated from {OLD_VALUE} to {NEW_VALUE}.

ChromeOS Printer Added

Printer is added.

Event details
Event name INSERT_CHROME_OS_PRINTER
Parameters
PRINTER_NAME

string

Name of a printer.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=INSERT_CHROME_OS_PRINTER&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Printer named {PRINTER_NAME} added.

ChromeOS Printer Deleted

Existing printer is deleted.

Event details
Event name DELETE_CHROME_OS_PRINTER
Parameters
PRINTER_NAME

string

Name of a printer.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_CHROME_OS_PRINTER&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Printer {PRINTER_NAME} deleted.

ChromeOS Printer Updated

Existing printer is updated.

Event details
Event name UPDATE_CHROME_OS_PRINTER
Parameters
NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

PRINTER_NAME

string

Name of a printer.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_CHROME_OS_PRINTER&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Printer {PRINTER_NAME} updated from {OLD_VALUE} to {NEW_VALUE}.

ChromeOS Setting Change

Event details
Event name CHANGE_CHROME_OS_SETTING
Parameters
DOMAIN_NAME

string

The primary domain name.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for ChromeOS devices in your organization changed from {OLD_VALUE} to {NEW_VALUE}

ChromeOS User Setting Change

Event details
Event name CHANGE_CHROME_OS_USER_SETTING
Parameters
NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_USER_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for ChromeOS users in {ORG_UNIT_NAME} organization unit changed from {OLD_VALUE} to {NEW_VALUE}

Create ChromeOS enrollment token

Event for 'Create ChromeOS enrollment token'.

Event details
Event name CREATE_CHROME_OS_ENROLLMENT_TOKEN
Parameters
FULL_ORG_UNIT_PATH

string

The org unit path including the root org unit name.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_CHROME_OS_ENROLLMENT_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Generated a new ChromeOS enrollment token for {FULL_ORG_UNIT_PATH}

Custom Configurations JSON Setting Change

Event details
Event name CHANGE_CHROME_OS_CUSTOM_CONFIGURATIONS_JSON_SETTING
Parameters
NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_CUSTOM_CONFIGURATIONS_JSON_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Custom configurations JSON field in the {ORG_UNIT_NAME} organizational unit changed from {OLD_VALUE} to {NEW_VALUE}

Delete ChromeOS device

Event for 'Delete ChromeOS device'.

Event details
Event name DELETE_CHROME_OS_DEVICE
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_CHROME_OS_DEVICE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Deleted ChromeOS device with serial number {DEVICE_SERIAL_NUMBER}

Delete duplicate ChromeOS device

Event for 'Delete duplicate ChromeOS device'.

Event details
Event name DELETE_DUPLICATE_CHROME_OS_DEVICE
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

DIRECTORY_API_ID

string

Parameter for Chrome Directory API ID.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DELETE_DUPLICATE_CHROME_OS_DEVICE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Deleted duplicate ChromeOS device with directory API ID {DIRECTORY_API_ID} and device serial number {DEVICE_SERIAL_NUMBER}

Isolated Web Application Setting Change

Event details
Event name CHANGE_CHROME_OS_ISOLATED_WEB_APPLICATION_SETTING
Parameters
APP_ID

string

Application ID.

CHROME_OS_SESSION_TYPE

string

ChromeOS sessiom type.

GROUP_EMAIL

string

The group's primary email address.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_ISOLATED_WEB_APPLICATION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for Isolated Web app {APP_ID} for session type {CHROME_OS_SESSION_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

Issue device command

Event for 'Issue device command'.

Event details
Event name ISSUE_DEVICE_COMMAND
Parameters
DEVICE_COMMAND_DETAILS

string

Details regarding the command that was issued.

DEVICE_SERIAL_NUMBER

string

The device's serial number.

DEVICE_TYPE

string

The device's type.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ISSUE_DEVICE_COMMAND&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Issued command to {DEVICE_TYPE} {DEVICE_SERIAL_NUMBER}: {DEVICE_COMMAND_DETAILS}

Move device to Organizational unit

Event for 'Move device to Org Unit'.

Event details
Event name MOVE_DEVICE_TO_ORG_UNIT_DETAILED
Parameters
DEVICE_NEW_ORG_UNIT

string

The organizational unit where the Device moved to.

DEVICE_PREVIOUS_ORG_UNIT

string

The organizational unit where the Device used to belong.

DEVICE_SERIAL_NUMBER

string

The device's serial number.

DEVICE_TYPE

string

The device's type.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MOVE_DEVICE_TO_ORG_UNIT_DETAILED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Moved {DEVICE_TYPE} {DEVICE_SERIAL_NUMBER} from {DEVICE_PREVIOUS_ORG_UNIT} to {DEVICE_NEW_ORG_UNIT}

Pre-provision ChromeOS device

Event for 'Pre-provision ChromeOS device'.

Event details
Event name PRE_PROVISION_CHROME_OS_DEVICE
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=PRE_PROVISION_CHROME_OS_DEVICE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Pre-provisioned ChromeOS device with serial number {DEVICE_SERIAL_NUMBER}

Remove Application Setting

Event details
Event name REMOVE_CHROME_OS_APPLICATION_SETTING
Parameters
APP_ID

string

Application ID.

APP_TYPE

string

Application type.

CHROME_OS_SESSION_TYPE

string

ChromeOS sessiom type.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_CHROME_OS_APPLICATION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{APP_TYPE} app {APP_ID} for session type {CHROME_OS_SESSION_TYPE} removed

Remove Chrome Application Settings

Event details
Event name REMOVE_CHROME_OS_APPLICATION_SETTINGS
Parameters
APP_ID

string

Application ID.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_CHROME_OS_APPLICATION_SETTINGS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Settings for Chrome app {APP_ID} removed

Remove Web Origin Settings

Event details
Event name REMOVE_CHROME_OS_WEB_ORIGIN_SETTINGS
Parameters
CHROME_OS_SESSION_TYPE

string

ChromeOS sessiom type.

GROUP_EMAIL

string

The group's primary email address.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

WEB_ORIGIN

string

Web Origin.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_CHROME_OS_WEB_ORIGIN_SETTINGS&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Settings for web origin {WEB_ORIGIN} for session type {CHROME_OS_SESSION_TYPE} removed

Repair Center deprovision

Event for 'Repair Center deprovision'.

Event details
Event name REPAIR_CENTER_DEPROVISION
Parameters
DEVICE_PREVIOUS_STATE

string

The original state before the change state got called.

DEVICE_SERIAL_NUMBER

string

The device's serial number.

DEVICE_TYPE

string

The device's type.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REPAIR_CENTER_DEPROVISION&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Automatic deprovision by Repair Center for {DEVICE_TYPE} {DEVICE_SERIAL_NUMBER}. The previous device state was {DEVICE_PREVIOUS_STATE}.

Revoke ChromeOS enrollment token

Event for 'Revoke ChromeOS enrollment token'.

Event details
Event name REVOKE_CHROME_OS_ENROLLMENT_TOKEN
Parameters
FULL_ORG_UNIT_PATH

string

The org unit path including the root org unit name.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REVOKE_CHROME_OS_ENROLLMENT_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Revoked the ChromeOS enrollment token of {FULL_ORG_UNIT_PATH}

Update device

Event for 'Update device'.

Event details
Event name UPDATE_DEVICE
Parameters
DEVICE_SERIAL_NUMBER

string

The device's serial number.

DEVICE_TYPE

string

The device's type.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UPDATE_DEVICE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Updated {DEVICE_TYPE} {DEVICE_SERIAL_NUMBER}

Web Application Setting Change

Event details
Event name CHANGE_CHROME_OS_WEB_APPLICATION_SETTING
Parameters
APP_ID

string

Application ID.

CHROME_OS_SESSION_TYPE

string

ChromeOS sessiom type.

GROUP_EMAIL

string

The group's primary email address.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_WEB_APPLICATION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for Web app {APP_ID} for session type {CHROME_OS_SESSION_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}

Web Permission Setting Change

Event details
Event name CHANGE_CHROME_OS_WEB_PERMISSION_SETTING
Parameters
CHROME_OS_SESSION_TYPE

string

ChromeOS sessiom type.

GROUP_EMAIL

string

The group's primary email address.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SETTING_NAME

string

The unique name (ID) of the setting that was changed.

WEB_ORIGIN

string

Web Origin.

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_CHROME_OS_WEB_PERMISSION_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{SETTING_NAME} for {WEB_ORIGIN} for session type {CHROME_OS_SESSION_TYPE} changed from {OLD_VALUE} to {NEW_VALUE}