Admin Audit Activity Events - Drive Settings

This document lists the events and parameters for Drive Settings Admin Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=admin.

Drive Settings

Events of this type are returned with type=DOCS_SETTINGS.

Document Ownership Change

Event details
Event name	TRANSFER_DOCUMENT_OWNERSHIP
Parameters	DOMAIN_NAME string The primary domain name. NEW_VALUE string The email address of the new owner of the file. USER_EMAIL string The email address of the original owner of the file.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TRANSFER_DOCUMENT_OWNERSHIP&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Owner of documents changed from {USER_EMAIL} to {NEW_VALUE}

Drive and Docs org branding provisioning initiated

Event details
Event name	DOCS_ORG_BRANDING_PROVISIONING
Parameters	ORG_BRANDING_PROVISIONING_STATUS string The response status for org branding provisioning. Possible values: FAILURE Failure response status value. SUCCESS Successful response status value. SERVICE_ACCOUNT_EMAIL string Email address of the customer service account. SHARED_DRIVE_NAME string Shared drive name.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DOCS_ORG_BRANDING_PROVISIONING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Organizational branding provisioning initiated for account {SERVICE_ACCOUNT_EMAIL} and shared drive {SHARED_DRIVE_NAME} with status {ORG_BRANDING_PROVISIONING_STATUS}

Drive and Docs org branding upload attempt

Event details
Event name	DOCS_ORG_BRANDING_UPLOAD
Parameters	DOCUMENT_ID string Document ID. ORG_BRANDING_EDITOR_TYPE string The editor type of the uploaded document. Possible values: FORMS The type of document is Forms. SITES THe type of document is Sites. SLIDES The type of document is Slides. ORG_BRANDING_UPLOAD_STATUS string The response status for org branding document upload. Possible values: FAILURE Failure response status value. SUCCESS Successful response status value.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DOCS_ORG_BRANDING_UPLOAD&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Organizational branding document upload attempted for document {DOCUMENT_ID} in editor {ORG_BRANDING_EDITOR_TYPE} with status {ORG_BRANDING_UPLOAD_STATUS}

Drive Data Restore

Event details
Event name	DRIVE_DATA_RESTORE
Parameters	BEGIN_DATE_TIME string Begin date and time. END_DATE_TIME string End date and time. USER_EMAIL string The user's primary email address.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=DRIVE_DATA_RESTORE&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Drive data restoration initiated for {USER_EMAIL}

Drive Setting Change

Event details
Event name	CHANGE_DOCS_SETTING
Parameters	DOMAIN_NAME string The primary domain name of the organization where the setting was applied. Only returned for settings that are organization-wide. For settings that can be applied at to specific OUs, ORG_UNIT_NAME will be returned instead. GROUP_EMAIL string The group's primary email address. NEW_VALUE string The new value of the setting. The special value INHERIT_FROM_PARENT may be returned for settings that can be applied to a specific OU, and indicates that the OU should inherited its value from its parent OU. OLD_VALUE string The old value of the setting. The special value INHERIT_FROM_PARENT may be returned for settings that can be applied to a specific OU, and indicates that the OU should inherited its value from its parent OU. ORG_UNIT_NAME string The organizational unit (OU) name (path) where the setting was applied, or the primary domain name if the setting was applied to the entire organization. Only returned for settings that can be applied to specific OUs. For organization-wide settings, DOMAIN_NAME will be returned instead. SETTING_NAME string The unique name (ID) of the setting that was changed.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHANGE_DOCS_SETTING&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{SETTING_NAME} for Drive changed from {OLD_VALUE} to {NEW_VALUE}

Shared Drive Moved

Event details
Event name	MOVE_SHARED_DRIVE_TO_ORG_UNIT
Parameters	NEW_VALUE string The new SETTING_NAME value that was set during this event. ORG_UNIT_NAME string The organizational unit (OU) name (path). SHARED_DRIVE_ID string Shared drive id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MOVE_SHARED_DRIVE_TO_ORG_UNIT&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	Shared drive {SHARED_DRIVE_ID} moved from {ORG_UNIT_NAME} to {NEW_VALUE}