Drive Audit Activity Events

This document lists the events and parameters for various types of Drive Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=drive.

Access

Events of this type are returned with type=access.

Access request denied

An access request was denied.

Event details
Event name deny_access_request
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_user

string

The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=deny_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} denied an access request for {target_user}

Access request expired

An access request expired.

Event details
Event name expire_access_request
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_user

string

The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=expire_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
An access request for {target_user} expired

Access requested

Access requested to an item.

Event details
Event name request_access
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
requested_role

string

Requested access role. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
target_user

string

The email address of the user or group that the actor is requesting access for.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} requested access to an item for {target_user}

Add to folder

Document add to folder.

Event details
Event name add_to_folder
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

destination_folder_id

string

Destination folder Id.

destination_folder_title

string

Destination folder title.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_to_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added an item to {destination_folder_title}

Appeal abuse violation

Event details
Event name appeal_abuse_violation
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=appeal_abuse_violation&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} appealed an abuse violation

Approval canceled

Drive approval canceled.

Event details
Event name approval_canceled
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_canceled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} canceled an approval on an item

Approval comment added

Drive approval comment added.

Event details
Event name approval_comment_added
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_comment_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} added a comment on an approval on an item

Approval completed

Drive approval completed.

Event details
Event name approval_completed
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_completed&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
An approval was completed

Approval decisions reset

Drive approval decisions reset.

Event details
Event name approval_decisions_reset
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_decisions_reset&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Approval decisions were reset

Approval due time change

Drive approval due time change.

Event details
Event name approval_due_time_change
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_due_time_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} requested a due time change on an approval

Approval requested

Drive approval requested.

Event details
Event name approval_requested
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_requested&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} requested approval on an item

Approval reviewer change

Drive approval reviewer change.

Event details
Event name approval_reviewer_change
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} requested a reviewer change on an approval

Approval reviewer responded

Drive approval reviewer responded.

Event details
Event name approval_reviewer_responded
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_responded&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} reviewed an approval on an item

Comment created

A comment was created.

Event details
Event name create_comment
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} created a comment

Comment deleted

A comment was deleted.

Event details
Event name delete_comment
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted a comment

Comment edited

A comment was edited.

Event details
Event name edit_comment
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} edited a comment

Comment reassigned

A comment was reassigned.

Event details
Event name reassign_comment
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reassign_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} reassigned a comment

Comment reopened

A comment was reopened.

Event details
Event name reopen_comment
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reopen_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} reopened a comment

Comment resolved

A comment was resolved.

Event details
Event name resolve_comment
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=resolve_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} resolved a comment

Connected Sheets Query

Event details
Event name connected_sheets_query
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

data_connection_id

string

Data connection ID.

delegating_principal

string

Delegating user whose credentials are used.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
execution_id

string

Query execution ID.

execution_trigger

string

The trigger for the query execution. Possible values:

  • api
    One Platform API execution trigger.
  • apps_script
    Apps Script execution trigger.
  • scheduled
    Scheduled execution trigger.
  • sheets_ui
    Sheets UI execution trigger.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
query_type

string

Type of query. Possible values:

  • big_query
    BigQuery.
  • looker
    Looker.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=connected_sheets_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{execution_trigger} {query_type} query executed

Copy

Document copy. This event is present for the new item that was created during the copy. The source_copy event is present for the original item.

Event details
Event name copy
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

copy_type

string

Indicates whether the original item and new item are owned by the same organization. Possible values:

  • external
    The original item and new item are not owned by the same organization.
  • internal
    The original item and new item are owned by the same organization.
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
encryption_change

string

The encryption change that happened as part of this copy. An unset value indicates that no encryption change happened. Possible values:

  • decrypted_copy
    An unencrypted item was created from an encrypted item.
  • encrypted_copy
    An encrypted item was created from an unencrypted item.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

The title of the newly created document.

old_value

string

The title of the original document.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} created a copy of original document {old_value}

Create

Document create.

Event details
Event name create
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
encryption_enforcement_option

string

The client-side encryption policy being applied to the user at time of the item's creation. Possible values:

  • default
    The created item was required to be client-side encrypted by default.
  • disabled
    The created item was not required to be client-side encrypted.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} created an item

Delete

Document delete.

Event details
Event name delete
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted an item

Download

Document download.

Event details
Event name download
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} downloaded an item

Drive Email as Attachment

Event details
Event name email_as_attachment
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target

string

Target User or Group.

target_user

string

The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_as_attachment&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} shared this document as an email attachment to {target}

Edit

Document edit.

Event details
Event name edit
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} edited an item

Email collaborators

A user emailed this item's collaborators.

Event details
Event name email_collaborators
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
recipients

string

Email addresses of the recipients.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_collaborators&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} emailed collaborators of an item

eSignature canceled

Event details
Event name cancel_esignature
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=cancel_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} canceled an eSignature on an item

eSignature completed

An eSignature request was completed. This indicates that some reviewers declined to eSign, or the item was eSigned by required reviewers and signed copies were generated successfully.

Event details
Event name complete_esignature
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
esignature_status

string

The title of a field that describes the final state of an eSignature on a document. Possible values:

  • declined
    The eSignature on the document was declined.
  • signed
    The eSignature on the document was signed.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=complete_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
An eSignature was completed

eSignature requested

Event details
Event name request_esignature
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} requested an eSignature on an item

eSignature reviewer responded

An eSignature reviewer responded with a decision, such as eSigning the document or declining the request.

Event details
Event name review_esignature
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
esignature_decision

string

The title of a field describing a signer's decision to sign or decline a document's eSignature. Possible values:

  • declined
    The reviewer declined to eSign the document.
  • signed
    The reviewer eSigned the document.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=review_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} reviewed an eSignature on an item

Forms Responses Downloaded

Download Forms Response.

Event details
Event name download_forms_response
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_forms_response&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} downloaded forms responses

Item content accessed

An application accessed an item's content on behalf of a user.

Event details
Event name access_item_content
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

api_method

string

The API method used to generate the event.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
An application accessed an item's content on behalf of {actor}

Item content synced

Document synced.

Event details
Event name sync_item_content
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sync_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} synced item content

Label applied

Label was applied.

Event details
Event name label_added
Parameters
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

label

string

The unique Identifier of a Label.

label_title

string

Label title.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
reason

string

Reason for label addition, removal, or value change event. Possible values:

  • copy
    Reason for change Drive item copy.
  • default_label
    Reason for change default label behavior.
  • dlp_action
    Reason for change DLP.
  • reason_unspecified
    Reason for change unspecified.
  • user_action
    Reason for change is a user action.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} applied Label {label_title}.

Label applied on creation

Label was applied automatically when the Drive item was created.

Event details
Event name label_added_by_item_create
Parameters
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

label

string

The unique Identifier of a Label.

label_title

string

Label title.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
reason

string

Reason for label addition, removal, or value change event. Possible values:

  • copy
    Reason for change Drive item copy.
  • default_label
    Reason for change default label behavior.
  • dlp_action
    Reason for change DLP.
  • reason_unspecified
    Reason for change unspecified.
  • user_action
    Reason for change is a user action.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added_by_item_create&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Label {label_title} was automatically applied on creation.

Label field value changed

Label Field value was changed.

Event details
Event name label_field_changed
Parameters
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
field

string

Label Field display name.

field_id

string

Label Field ID.

is_encrypted

boolean

Whether the file is client-side encrypted.

label

string

The unique Identifier of a Label.

label_title

string

Label title.

new_value

string

New Value.

new_value_id

string

New Value IDs.

old_value

string

Old Value.

old_value_id

string

Old Value IDs.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
reason

string

Reason for label addition, removal, or value change event. Possible values:

  • copy
    Reason for change Drive item copy.
  • default_label
    Reason for change default label behavior.
  • dlp_action
    Reason for change DLP.
  • reason_unspecified
    Reason for change unspecified.
  • user_action
    Reason for change is a user action.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_field_changed&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed the value of field {field} (Label: {label_title}) from '{old_value}' to '{new_value}'.

Label removed

Label was removed.

Event details
Event name label_removed
Parameters
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

label

string

The unique Identifier of a Label.

label_title

string

Label title.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
reason

string

Reason for label addition, removal, or value change event. Possible values:

  • copy
    Reason for change Drive item copy.
  • default_label
    Reason for change default label behavior.
  • dlp_action
    Reason for change DLP.
  • reason_unspecified
    Reason for change unspecified.
  • user_action
    Reason for change is a user action.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_removed&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed Label {label_title}.

Lock

Document lock.

Event details
Event name add_lock
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

lock_type

string

The lock type on an item. Possible values:

  • domain_admin
    Domain Admin lock type.
  • editor
    Editor lock type.
  • owner
    Owner lock type.
  • unknown_lock_type
    Unknown lock type.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} locked an item

Move

Document move.

Event details
Event name move
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

destination_folder_id

string

Destination folder Id.

destination_folder_title

string

Destination folder title.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
source_folder_id

string

Source folder Id.

source_folder_title

string

Source folder title.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=move&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} moved an item from {source_folder_title} to {destination_folder_title}

Preview

Document preview.

Event details
Event name preview
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=preview&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} previewed an item

Print

Document print.

Event details
Event name print
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=print&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} printed an item

Remove from folder

Document remove from folder.

Event details
Event name remove_from_folder
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
source_folder_id

string

Source folder Id.

source_folder_title

string

Source folder title.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_from_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed an item from {source_folder_title}

Rename

Document rename.

Event details
Event name rename
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value.

old_value

string

Old Value.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=rename&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} renamed {old_value} to {new_value}

Report abuse

Event details
Event name report_abuse
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=report_abuse&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
An abuse report was submitted for an item

Restore

Document restore.

Event details
Event name untrash
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=untrash&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} restored an item

Revision deleted

A revision of an item was deleted.

Event details
Event name delete_revision
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
revision_create_timestamp

integer

The timestamp when the revision was originally created (in epoch microseconds).

revision_id

string

The ID of the revision.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted a revision of this item

Revision pinned

A revision of an item was pinned, indicating that the revision should be kept forever.

Event details
Event name pin_revision
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
revision_create_timestamp

integer

The timestamp when the revision was originally created (in epoch microseconds).

revision_id

string

The ID of the revision.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=pin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} pinned a revision of this item

Revision unpinned

A revision of an item was unpinned, indicating that the revision should not be kept forever.

Event details
Event name unpin_revision
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
revision_create_timestamp

integer

The timestamp when the revision was originally created (in epoch microseconds).

revision_id

string

The ID of the revision.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unpin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} unpinned a revision of this item

Script trigger created

Creation of an Apps Script trigger.

Event details
Event name create_script_trigger
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
script_container_app

string

The container application of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications. Possible values:

  • document
    Google Docs application.
  • form
    Google Forms application.
  • sites
    Google Sites application.
  • slides
    Google Slides application.
  • spreadsheet
    Google Sheets application.
  • unknown
    Unknown application.
script_container_id

string

The container ID of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.

script_trigger_id

string

The ID of an Apps Script trigger.

script_trigger_source_app

string

The source providing a trigger. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values:

  • calendar
    Google Calendar application.
  • clock
    System time.
  • document
    Google Docs application.
  • form
    Google Forms application.
  • slides
    Google Slides application.
  • spreadsheet
    Google Sheets application.
  • unknown
    Unknown application.
script_trigger_type

string

Script trigger type. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values:

  • event_any
    On any event.
  • event_on_change
    On change.
  • event_on_edit
    On edit.
  • event_on_event_created
    On calendar event created.
  • event_on_event_deleted
    On calendar event deleted.
  • event_on_event_updated
    On calendar event updated.
  • event_on_form_submit
    On form submit.
  • event_on_open
    On open.
  • timed_oneshot
    Oneshot.
  • timed_recurring
    Recurring.
  • trigger_type_unspecified
    Trigger type unspecified.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} created a script trigger

Script trigger deleted

Deletion of an Apps Script trigger.

Event details
Event name delete_script_trigger
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
script_container_app

string

The container application of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications. Possible values:

  • document
    Google Docs application.
  • form
    Google Forms application.
  • sites
    Google Sites application.
  • slides
    Google Slides application.
  • spreadsheet
    Google Sheets application.
  • unknown
    Unknown application.
script_container_id

string

The container ID of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.

script_trigger_id

string

The ID of an Apps Script trigger.

script_trigger_source_app

string

The source providing a trigger. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values:

  • calendar
    Google Calendar application.
  • clock
    System time.
  • document
    Google Docs application.
  • form
    Google Forms application.
  • slides
    Google Slides application.
  • spreadsheet
    Google Sheets application.
  • unknown
    Unknown application.
script_trigger_type

string

Script trigger type. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values:

  • event_any
    On any event.
  • event_on_change
    On change.
  • event_on_edit
    On edit.
  • event_on_event_created
    On calendar event created.
  • event_on_event_deleted
    On calendar event deleted.
  • event_on_event_updated
    On calendar event updated.
  • event_on_form_submit
    On form submit.
  • event_on_open
    On open.
  • timed_oneshot
    Oneshot.
  • timed_recurring
    Recurring.
  • trigger_type_unspecified
    Trigger type unspecified.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted a script trigger

Sheets Import Url

A Google Sheet fetched one or more urls via an Import function.

Event details
Event name sheets_import_url
Parameters
accessed_url

string

The URLs that were accessed.

actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
A url was imported from this item

Sheets ImportRange

Event details
Event name sheets_import_range
Parameters
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type.

is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.

sheets_import_range_recipient_doc

string

Sheets ImportRange recipient doc.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{sheets_import_range_recipient_doc} imported range from an item

Source Copy

Source document copy. This event is present for the original item that was copied. The copy event is present for the newly created item.

Event details
Event name source_copy
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

copy_type

string

Indicates whether the original item and new item are owned by the same organization. Possible values:

  • external
    The original item and new item are not owned by the same organization.
  • internal
    The original item and new item are owned by the same organization.
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
encryption_change

string

The encryption change that happened as part of this copy. An unset value indicates that no encryption change happened. Possible values:

  • decrypted_copy
    An unencrypted item was created from an encrypted item.
  • encrypted_copy
    An encrypted item was created from an unencrypted item.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

The title of the newly created document.

old_value

string

The title of the original document.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=source_copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} copied this item, creating a new item {copy_type} your organization {new_value}

Suggestion accepted

A suggestion was accepted.

Event details
Event name accept_suggestion
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=accept_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} accepted a suggestion

Suggestion created

A suggestion was created.

Event details
Event name create_suggestion
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} created a suggestion

Suggestion deleted

A suggestion was deleted.

Event details
Event name delete_suggestion
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted a suggestion

Suggestion rejected

A suggestion was rejected.

Event details
Event name reject_suggestion
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reject_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} rejected a suggestion

Trash

Document trash.

Event details
Event name trash
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=trash&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} trashed an item

Unlock

Document unlock.

Event details
Event name remove_lock
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

lock_type

string

The lock type on an item. Possible values:

  • domain_admin
    Domain Admin lock type.
  • editor
    Editor lock type.
  • owner
    Owner lock type.
  • unknown_lock_type
    Unknown lock type.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} unlocked an item

Unmovable item relocated

Unmovable document reparented.

Event details
Event name unmovable_item_reparented
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

destination_folder_id

string

Destination folder Id.

destination_folder_title

string

Destination folder title.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
source_folder_id

string

Source folder Id.

source_folder_title

string

Source folder title.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unmovable_item_reparented&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
When a parent folder was moved, an item that couldn't be moved was relocated from {source_folder_title} to {destination_folder_title}

Upload

Document upload.

Event details
Event name upload
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
encryption_enforcement_option

string

The client-side encryption policy being applied to the user at time of the item's creation. Possible values:

  • default
    The created item was required to be client-side encrypted by default.
  • disabled
    The created item was not required to be client-side encrypted.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} uploaded an item

URL accessed

A URL was accessed from an AppsScript, see URL Fetch Service for details.
Note: doc_id and other file-related fields, such as doc_type and owner, may not be reported.

Event details
Event name access_url
Parameters
accessed_url

string

The URLs that were accessed.

actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
script_id

string

The document ID of the executing script.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
A script accessed a url during execution

Video caption deleted

Delete video caption.

Event details
Event name delete_video_caption
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

track_name

string

Video caption track name.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} deleted a video caption

Video caption downloaded

Download video caption.

Event details
Event name download_video_caption
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

track_name

string

Video caption track name.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} downloaded a video caption

Video caption uploaded

Upload video caption.

Event details
Event name upload_video_caption
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

track_name

string

Video caption track name.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} uploaded a video caption

View

Document view.

Event details
Event name view
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=view&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} viewed an item

ACL changed

ACL Changed. Events of this type are returned with type=acl_change.

Apply Security Update

Document apply security update.

Event details
Event name apply_security_update
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} applied the security update to a file

Bulk Apply Security Update

Bulk apply security update.

Event details
Event name shared_drive_apply_security_update
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} applied the security update to all files in a shared drive

Bulk Remove Security Update

Bulk remove security update.

Event details
Event name shared_drive_remove_security_update
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed the security update from all files in a shared drive

Changed owners from parent folder

Change in owner of document due to hierarchy reconciliation.

Event details
Event name change_owner_hierarchy_reconciled
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_owner

string

The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name.

new_owner_is_shared_drive

boolean

Boolean flag denoting whether new owner is a shared drive.

new_owner_shared_drive_id

string

The shared drive root id if the new document owner is a shared drive.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Due to a change in a parent folder, the owner of an item was changed

Document changed owners

Event details
Event name change_owner
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_owner

string

The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name.

new_owner_is_shared_drive

boolean

Boolean flag denoting whether new owner is a shared drive.

new_owner_shared_drive_id

string

The shared drive root id if the new document owner is a shared drive.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed owner of an item

Drive Publish Status Change

Event details
Event name publish_change
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_publish_visibility

string

New Publish Visibility Value. Possible values:

  • nobody
    Nobody.
  • public_in_the_domain
    Anyone within the audience can view published document.
  • public_on_the_web
    Anyone on the web can view published document.
  • unchanged
    Unchanged.
new_value

string

New Value. Possible values:

  • auto
    Publish Live File.
  • fixed
    Publish a Version.
  • none
    Unpublished.
  • unchanged
    Unchanged.
old_publish_visibility

string

Old Publish Visibility Value. Possible values:

  • nobody
    Nobody.
  • public_in_the_domain
    Anyone within the audience can view published document.
  • public_on_the_web
    Anyone on the web can view published document.
  • unchanged
    Unchanged.
old_value

string

Old Value. Possible values:

  • auto
    Publish Live File.
  • fixed
    Publish a Version.
  • none
    Unpublished.
  • unchanged
    Unchanged.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed publish status from {old_value} to {new_value} and changed visibility from {old_publish_visibility} to {new_publish_visibility}

Editor Settings Change

Editor Settings Changed.

Event details
Event name change_acl_editors
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value. Possible values:

  • owner
    The person modifying the access on the file is the Owner of the file.
  • writers
    The person modifying the access on the file is a Writer (Editor) of the file.
old_value

string

Old Value. Possible values:

  • owner
    The person modifying the access on the file is the Owner of the file.
  • writers
    The person modifying the access on the file is a Writer (Editor) of the file.
old_visibility

string

Old Visibility of Target File. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
visibility_change

string

Change in overall visibility of the file. Possible values:

  • external
    Overall visibility changed from internal to external.
  • internal
    Overall visibility changed from external to internal.
  • none
    No change in overall visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_acl_editors&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed editor settings from {old_value} to {new_value}

Link Sharing Access Type Change

Change in link sharing access type of document.

Event details
Event name change_document_access_scope
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_value

string

Old Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_visibility

string

Old Visibility of Target File. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_domain

string

Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
visibility_change

string

Change in overall visibility of the file. Possible values:

  • external
    Overall visibility changed from internal to external.
  • internal
    Overall visibility changed from external to internal.
  • none
    No change in overall visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}

Link Sharing Access Type Change from Parent Folder

Change in link sharing access type of document due to hierarchy reconciliation.

Event details
Event name change_document_access_scope_hierarchy_reconciled
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_value

string

Old Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_visibility

string

Old Visibility of Target File. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_domain

string

Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
visibility_change

string

Change in overall visibility of the file. Possible values:

  • external
    Overall visibility changed from internal to external.
  • internal
    Overall visibility changed from external to internal.
  • none
    No change in overall visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}

Link Sharing visibility change

Change in link sharing visibility of document.

Event details
Event name change_document_visibility
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value. Possible values:

  • people_with_link
    Anyone with the link on the web can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • private
    Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).
  • public_in_the_domain
    Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • public_on_the_web
    Public on the web.
old_value

string

Old Value. Possible values:

  • people_with_link
    Anyone with the link on the web can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • private
    Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).
  • public_in_the_domain
    Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • public_on_the_web
    Public on the web.
old_visibility

string

Old Visibility of Target File. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_domain

string

Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
visibility_change

string

Change in overall visibility of the file. Possible values:

  • external
    Overall visibility changed from internal to external.
  • internal
    Overall visibility changed from external to internal.
  • none
    No change in overall visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed link sharing visibility from {old_value} to {new_value} for {target_domain}

Link Sharing visibility change from Parent Folder

Change in link sharing visibility of document due to hierarchy reconciliation.

Event details
Event name change_document_visibility_hierarchy_reconciled
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value. Possible values:

  • people_with_link
    Anyone with the link on the web can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • private
    Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).
  • public_in_the_domain
    Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • public_on_the_web
    Public on the web.
old_value

string

Old Value. Possible values:

  • people_with_link
    Anyone with the link on the web can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • private
    Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain).
  • public_in_the_domain
    Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience.
  • public_on_the_web
    Public on the web.
old_visibility

string

Old Visibility of Target File. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_domain

string

Optional. The domain for which the access scope was changed. This can also be the alias all to indicate the access scope was changed for all domains that have visibility for this document.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
visibility_change

string

Change in overall visibility of the file. Possible values:

  • external
    Overall visibility changed from internal to external.
  • internal
    Overall visibility changed from external to internal.
  • none
    No change in overall visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Due to a change in a parent folder, the link sharing visibility for {target_domain} changed from {old_value} to {new_value}

Publish new version

A new version of this item was published.

Event details
Event name publish_new_version
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_new_version&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} published a new version

Remove security update

Document remove security update.

Event details
Event name remove_security_update
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} removed the security update from a file

Shared Drive Membership Change

Shared drive Membership Change.

Event details
Event name shared_drive_membership_change
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

added_role

string

Added membership role to a user or group in a shared drive. See Shared drives access for more information about roles. Possible values:

  • commenter
    Shared drive role Commenter.
  • content_manager
    Shared drive role Content manager.
  • editor
    Shared drive role Contributor.
  • none
    No role in shared drive.
  • organizer
    Shared drive role Manager.
  • viewer
    Shared drive role Viewer.
billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

membership_change_type

string

Type of change in shared drive membership of a user/group. Possible values:

  • add_to_shared_drive
    Addition to a shared drive.
  • change_roles
    Change of a member's role in a shared drive.
  • re_share
    Re-share of a member's role in a shared drive.
  • remove_from_shared_drive
    Removal from a shared drive.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
removed_role

string

Removed membership role of a user/group in a shared drive. Possible values:

  • commenter
    Shared drive role Commenter.
  • content_manager
    Shared drive role Content manager.
  • editor
    Shared drive role Contributor.
  • none
    No role in shared drive.
  • organizer
    Shared drive role Manager.
  • viewer
    Shared drive role Viewer.
target

string

Target User or Group.

target_user

string

The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_membership_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} made a membership change of type {membership_change_type} for {target} by removing role(s) {removed_role} and adding role(s) {added_role}

Shared Drive Settings Change

Event details
Event name shared_drive_settings_change
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_settings_state

string

New state of shared drive settings. Possible values:

  • none
    Shared drive settings change value None.
  • restricted
    Shared drive settings change value Restricted.
  • unrestricted
    Shared drive settings change value Unrestricted.
old_settings_state

string

Old state of shared drive settings. Possible values:

  • none
    Shared drive settings change value None.
  • restricted
    Shared drive settings change value Restricted.
  • unrestricted
    Shared drive settings change value Unrestricted.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target

string

Target User or Group.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

shared_drive_settings_change_type

string

Type of change in shared drive settings. Possible values:

  • cross_domain_sharing
    A shared drive settings change that restricts or unrestricts the ability for the contents within the shared drive to be shared outside the domain.
  • direct_acl
    A shared drive settings change that restricts or unrestricts the ability to add users directly onto a file when they're not a member.
  • download
    A shared drive settings change that restricts or unrestricts a user's ability to download files from the shared drive.
  • drive_fs
    A shared drive settings change that restricts or unrestricts access to Google Drive for desktop.
  • file_organizer_can_share_folders
    A shared drive settings change that restricts or unrestricts a file organizer's ability to share folders.
visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_settings_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed {team_drive_settings_change_type} setting from {old_settings_state} to {new_settings_state}

Sheets ImportRange access change

Event details
Event name sheets_import_range_access_change
Parameters
doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type.

is_encrypted

boolean

Whether the file is client-side encrypted.

originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee.

sheets_import_range_enabled

boolean

Whether the recipient Sheet is enabled to import data from this Sheet.

sheets_import_range_recipient_doc

string

Sheets ImportRange recipient doc.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range_access_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} enabled Sheets range import to {sheets_import_range_recipient_doc}

User Sharing Permissions Change

User Sharing Permissions Changed.

Event details
Event name change_user_access
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_value

string

Old Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_visibility

string

Old Visibility of Target File. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_user

string

The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
visibility_change

string

Change in overall visibility of the file. Possible values:

  • external
    Overall visibility changed from internal to external.
  • internal
    Overall visibility changed from external to internal.
  • none
    No change in overall visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{actor} changed sharing permissions for {target_user} from {old_value} to {new_value}

User Sharing Permissions Change from Parent Folder

User Sharing Permissions Changed due to hierarchy reconciliation.

Event details
Event name change_user_access_hierarchy_reconciled
Parameters
actor_is_collaborator_account

boolean

Whether the actor is a collaborator account.

billable

boolean

Whether this activity is billable.

doc_id

string

Document ID.

doc_title

string

Document title.

doc_type

string

Document type. Possible values:

  • document
    Doc type document.
  • drawing
    Doc type drawing.
  • folder
    Doc type folder.
  • form
    Doc type form.
  • html
    Doc type HTML.
  • jam
    Doc type Jam.
  • jpeg
    Doc type JPEG.
  • mp4
    Doc type MP4.
  • mpeg
    Doc type MPEG.
  • msexcel
    Doc type MS Excel.
  • mspowerpoint
    Doc type MS Powerpoint.
  • msword
    Doc type MS Word.
  • pdf
    Doc type PDF.
  • png
    Doc type PNG.
  • presentation
    Doc type presentation.
  • quicktime
    Doc type Quicktime.
  • script
    Google Apps Script.
  • shortcut
    Doc type is Google Shortcut.
  • sites
    Doc type is Google Sites.
  • spreadsheet
    Doc type spreadsheet.
  • shared_drive
    Doc type is a shared drive.
  • txt
    Doc type txt.
  • unknown
    Doc type unknown.
  • video
    Doc type is a Google Vids Video.
is_encrypted

boolean

Whether the file is client-side encrypted.

new_value

string

New Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_value

string

Old Value. Possible values:

  • can_comment
    Can comment.
  • can_edit
    Can edit.
  • can_respond
    Can respond.
  • can_view
    Can view.
  • can_view_published
    Can view published.
  • none
    Scope none.
  • organizer
    Manager.
  • owner
    Is a owner.
old_visibility

string

Old Visibility of Target File. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
originating_app_id

string

The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.

owner

string

The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.

owner_is_shared_drive

boolean

Boolean flag denoting whether the owner is a shared drive.

owner_shared_drive_id

string

The shared drive root ID if the document owner is a shared drive.

primary_event

boolean

Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (primary_event=true). The remaining events are deemed to be side effects of the primary event(s) (primary_event=false). For example, when a user creates a document, several events are generated, with only the create event having primary_event=true. But when a user shares a document with multiple other users in one action, an access change event having primary_event=true is created for each sharee. Possible values:

  • false
    Boolean value false.
  • true
    Boolean value true.
target_user

string

The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.

shared_drive_id

string

The unique identifier of the shared drive. Only populated for events or items from a shared drive.

visibility

string

Visibility of target file. Possible values:

  • people_with_link
    Anyone with the link can access.
  • people_within_domain_with_link
    Anyone with the link within the audience can access.
  • private
    Private.
  • public_in_the_domain
    Anyone within the audience can access.
  • public_on_the_web
    Public on the web.
  • shared_externally
    Shared with explicit users/groups external to the domain.
  • shared_internally
    Shared with explicit users/groups internal to the domain.
  • unknown
    Unknown visibility.
visibility_change

string

Change in overall visibility of the file. Possible values:

  • external
    Overall visibility changed from internal to external.
  • internal
    Overall visibility changed from external to internal.
  • none
    No change in overall visibility.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Due to a change in a parent folder, the sharing permissions for {target_user} changed from {old_value} to {new_value}

Pooled quota metadata

Events of this type are returned with type=pooled_quota_metadata.

Storage Usage Update

Drive storage usage update.

Event details
Event name storage_usage_update
Parameters
storage_usage_in_bytes

integer

Storage usage (in bytes).

Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=storage_usage_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Storage usage update for {actor}