Registro de auditoria do complemento do Google Workspace
Mantenha tudo organizado com as coleções
Salve e categorize o conteúdo com base nas suas preferências.
Este documento descreve o registro de auditoria dos complementos do Google Workspace. Os serviços do Google Cloud
geram registros de auditoria que registram atividades administrativas e de acesso nos recursos do Google Cloud.
Para mais informações sobre os Registros de auditoria do Cloud, consulte:
Nome do serviço
Os registros de auditoria dos complementos do Google Workspace usam o nome de serviço gsuiteaddons.googleapis.com.
Filtrar por este serviço:
protoPayload.serviceName="gsuiteaddons.googleapis.com"
Métodos por tipo de permissão
Cada permissão do IAM tem uma propriedade type, que tem o valor de um tipo enumerado
que pode ser um dos quatro valores: ADMIN_READ, ADMIN_WRITE,
DATA_READ ou DATA_WRITE. Quando você chama um método,
os complementos do Google Workspace geram um registro de auditoria com uma categoria que depende da
propriedade type da permissão necessária para executar o método.
Métodos que exigem uma permissão do IAM com o valor da propriedade type
de DATA_READ, DATA_WRITE ou ADMIN_READ geram
registros de auditoria de acesso aos dados.
Métodos que exigem uma permissão do IAM com o valor da propriedade type
de ADMIN_WRITE geram
registros de auditoria de Atividade do administrador.
| Tipo de permissão |
Métodos |
ADMIN_READ |
google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetAuthorization
google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetDeployment
google.cloud.gsuiteaddons.v1.GSuiteAddOns.ListDeployments
google.cloud.gsuiteaddons.v1.GSuiteAddOns.UninstallDeployment |
ADMIN_WRITE |
google.cloud.gsuiteaddons.v1.GSuiteAddOns.CreateDeployment
google.cloud.gsuiteaddons.v1.GSuiteAddOns.DeleteDeployment
google.cloud.gsuiteaddons.v1.GSuiteAddOns.InstallDeployment
google.cloud.gsuiteaddons.v1.GSuiteAddOns.ReplaceDeployment |
Registros de auditoria da interface da API
Para informações sobre como e quais permissões são avaliadas para cada método,
consulte a documentação do Identity and Access Management para os complementos do Google Workspace.
google.cloud.gsuiteaddons.v1.GSuiteAddOns
Os registros de auditoria a seguir estão associados a métodos que pertencem a
google.cloud.gsuiteaddons.v1.GSuiteAddOns.
CreateDeployment
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.CreateDeployment
- Tipo de registro de auditoria: atividade do administrador
- Permissões:
gsuiteaddons.deployments.create - ADMIN_WRITE
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.CreateDeployment"
DeleteDeployment
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.DeleteDeployment
- Tipo de registro de auditoria: atividade do administrador
- Permissões:
gsuiteaddons.deployments.delete - ADMIN_WRITE
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.DeleteDeployment"
GetAuthorization
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetAuthorization
- Tipo de registro de auditoria: acesso a dados
- Permissões:
gsuiteaddons.authorizations.get - ADMIN_READ
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetAuthorization"
GetDeployment
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetDeployment
- Tipo de registro de auditoria: acesso a dados
- Permissões:
gsuiteaddons.deployments.get - ADMIN_READ
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetDeployment"
InstallDeployment
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.InstallDeployment
- Tipo de registro de auditoria: atividade do administrador
- Permissões:
gsuiteaddons.deployments.install - ADMIN_WRITE
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.InstallDeployment"
ListDeployments
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.ListDeployments
- Tipo de registro de auditoria: acesso a dados
- Permissões:
gsuiteaddons.deployments.list - ADMIN_READ
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.ListDeployments"
ReplaceDeployment
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.ReplaceDeployment
- Tipo de registro de auditoria: atividade do administrador
- Permissões:
gsuiteaddons.deployments.update - ADMIN_WRITE
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.ReplaceDeployment"
UninstallDeployment
- Método:
google.cloud.gsuiteaddons.v1.GSuiteAddOns.UninstallDeployment
- Tipo de registro de auditoria: acesso a dados
- Permissões:
gsuiteaddons.deployments.execute - ADMIN_READ
- O método é uma operação de streaming ou de longa duração:
No
- Filtrar para este método:
protoPayload.methodName="google.cloud.gsuiteaddons.v1.GSuiteAddOns.UninstallDeployment"
Exceto em caso de indicação contrária, o conteúdo desta página é licenciado de acordo com a Licença de atribuição 4.0 do Creative Commons, e as amostras de código são licenciadas de acordo com a Licença Apache 2.0. Para mais detalhes, consulte as políticas do site do Google Developers. Java é uma marca registrada da Oracle e/ou afiliadas.
Última atualização 2025-01-30 UTC.
[null,null,["Última atualização 2025-01-30 UTC."],[[["\u003cp\u003eGoogle Workspace Add-ons generate audit logs that record administrative and access activities, categorized as either Data Access or Admin Activity based on the permission type required for the method call.\u003c/p\u003e\n"],["\u003cp\u003eAudit logs for Google Workspace Add-ons utilize the service name \u003ccode\u003egsuiteaddons.googleapis.com\u003c/code\u003e and can be filtered using \u003ccode\u003eprotoPayload.serviceName="gsuiteaddons.googleapis.com"\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eMethods requiring \u003ccode\u003eDATA_READ\u003c/code\u003e, \u003ccode\u003eDATA_WRITE\u003c/code\u003e, or \u003ccode\u003eADMIN_READ\u003c/code\u003e permissions generate Data Access audit logs, while those requiring \u003ccode\u003eADMIN_WRITE\u003c/code\u003e permissions generate Admin Activity audit logs.\u003c/p\u003e\n"],["\u003cp\u003eThis document provides a detailed breakdown of each method within \u003ccode\u003egoogle.cloud.gsuiteaddons.v1.GSuiteAddOns\u003c/code\u003e, specifying the audit log type, required permissions, and filtering criteria.\u003c/p\u003e\n"]]],["Google Workspace add-ons generate audit logs under the service name `gsuiteaddons.googleapis.com`. Log categories are determined by IAM permission types (`ADMIN_READ`, `ADMIN_WRITE`, `DATA_READ`, `DATA_WRITE`). `ADMIN_WRITE` permissions trigger Admin Activity logs, while `ADMIN_READ`, `DATA_READ`, and `DATA_WRITE` trigger Data Access logs. Specific methods like `CreateDeployment` and `DeleteDeployment` require `ADMIN_WRITE` permissions, generating Admin Activity logs. Methods such as `GetAuthorization` and `UninstallDeployment` need `ADMIN_READ` permissions and thus generate Data access logs. Filters are provided for each method.\n"],null,["This document describes audit logging for Google Workspace add-ons. Google Cloud services\ngenerate audit logs that record administrative and access activities within your Google Cloud resources.\nFor more information about Cloud Audit Logs, see the following:\n\n- [Types of audit logs](https://cloud.google.com/logging/docs/audit#types)\n- [Audit log entry structure](https://cloud.google.com/logging/docs/audit#audit_log_entry_structure)\n- [Storing and routing audit logs](https://cloud.google.com/logging/docs/audit#storing_and_routing_audit_logs)\n- [Cloud Logging pricing summary](https://cloud.google.com/stackdriver/pricing#logs-pricing-summary)\n- [Enable Data Access audit logs](https://cloud.google.com/logging/docs/audit/configure-data-access)\n\n\u003cbr /\u003e\n\nService name\n\nGoogle Workspace add-ons audit logs use the service name `gsuiteaddons.googleapis.com`.\nFilter for this service: \n\n```gdscript\n protoPayload.serviceName=\"gsuiteaddons.googleapis.com\"\n \n```\n\n\u003cbr /\u003e\n\nMethods by permission type\n\nEach IAM permission has a `type` property, whose value is an enum\nthat can be one of four values: `ADMIN_READ`, `ADMIN_WRITE`,\n`DATA_READ`, or `DATA_WRITE`. When you call a method,\nGoogle Workspace add-ons generates an audit log whose category is dependent on the\n`type` property of the permission required to perform the method.\n\nMethods that require an IAM permission with the `type` property value\nof `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ` generate\n[Data Access](https://cloud.google.com/logging/docs/audit#data-access) audit logs.\n\nMethods that require an IAM permission with the `type` property value\nof `ADMIN_WRITE` generate\n[Admin Activity](https://cloud.google.com/logging/docs/audit#admin-activity) audit logs.\n\n| Permission type | Methods |\n|-----------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `ADMIN_READ` | `google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetAuthorization` `google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetDeployment` `google.cloud.gsuiteaddons.v1.GSuiteAddOns.ListDeployments` `google.cloud.gsuiteaddons.v1.GSuiteAddOns.UninstallDeployment` |\n| `ADMIN_WRITE` | `google.cloud.gsuiteaddons.v1.GSuiteAddOns.CreateDeployment` `google.cloud.gsuiteaddons.v1.GSuiteAddOns.DeleteDeployment` `google.cloud.gsuiteaddons.v1.GSuiteAddOns.InstallDeployment` `google.cloud.gsuiteaddons.v1.GSuiteAddOns.ReplaceDeployment` |\n\nAPI interface audit logs\n\nFor information about how and which permissions are evaluated for each method,\nsee the Identity and Access Management documentation for Google Workspace add-ons.\n\n`google.cloud.gsuiteaddons.v1.GSuiteAddOns`\n\nThe following audit logs are associated with methods belonging to\n`google.cloud.gsuiteaddons.v1.GSuiteAddOns`.\n\n`CreateDeployment`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.CreateDeployment` \n- **Audit log type** : [Admin activity](https://cloud.google.com/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `gsuiteaddons.deployments.create - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.CreateDeployment\"\n ` \n\n`DeleteDeployment`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.DeleteDeployment` \n- **Audit log type** : [Admin activity](https://cloud.google.com/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `gsuiteaddons.deployments.delete - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.DeleteDeployment\"\n ` \n\n`GetAuthorization`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetAuthorization` \n- **Audit log type** : [Data access](https://cloud.google.com/logging/docs/audit#data-access) \n- **Permissions** :\n - `gsuiteaddons.authorizations.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetAuthorization\"\n ` \n\n`GetDeployment`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetDeployment` \n- **Audit log type** : [Data access](https://cloud.google.com/logging/docs/audit#data-access) \n- **Permissions** :\n - `gsuiteaddons.deployments.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.GetDeployment\"\n ` \n\n`InstallDeployment`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.InstallDeployment` \n- **Audit log type** : [Admin activity](https://cloud.google.com/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `gsuiteaddons.deployments.install - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.InstallDeployment\"\n ` \n\n`ListDeployments`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.ListDeployments` \n- **Audit log type** : [Data access](https://cloud.google.com/logging/docs/audit#data-access) \n- **Permissions** :\n - `gsuiteaddons.deployments.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.ListDeployments\"\n ` \n\n`ReplaceDeployment`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.ReplaceDeployment` \n- **Audit log type** : [Admin activity](https://cloud.google.com/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `gsuiteaddons.deployments.update - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.ReplaceDeployment\"\n ` \n\n`UninstallDeployment`\n\n- **Method** : `google.cloud.gsuiteaddons.v1.GSuiteAddOns.UninstallDeployment` \n- **Audit log type** : [Data access](https://cloud.google.com/logging/docs/audit#data-access) \n- **Permissions** :\n - `gsuiteaddons.deployments.execute - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.gsuiteaddons.v1.GSuiteAddOns.UninstallDeployment\"\n `"]]
