Drive Audit Activity Events

This document lists the events and parameters for various types of Drive Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=drive.

Access

Events of this type are returned with type=access.

Access request denied

An access request was denied.

Event details

Event name deny_access_request

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_user`	`string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=deny_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} denied an access request for {target_user}

Access request expired

An access request expired.

Event details

Event name expire_access_request

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_user`	`string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=expire_access_request&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

An access request for {target_user} expired

Access requested

Access requested to an item.

Event details

Event name request_access

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`requested_role`	`string` Requested access role. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`target_user`	`string` The email address of the user or group that the actor is requesting access for.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} requested access to an item for {target_user}

Add to folder

Document add to folder.

Event details

Event name add_to_folder

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`destination_folder_id`	`string` Destination folder Id.
`destination_folder_title`	`string` Destination folder title.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_to_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} added an item to {destination_folder_title}

Appeal abuse violation

Event details

Event name appeal_abuse_violation

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=appeal_abuse_violation&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} appealed an abuse violation

Approval canceled

Drive approval canceled.

Event details

Event name approval_canceled

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_canceled&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} canceled an approval on an item

Approval comment added

Drive approval comment added.

Event details

Event name approval_comment_added

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_comment_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} added a comment on an approval on an item

Approval completed

Drive approval completed.

Event details

Event name approval_completed

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_completed&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

An approval was completed

Approval decisions reset

Drive approval decisions reset.

Event details

Event name approval_decisions_reset

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_decisions_reset&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Approval decisions were reset

Approval due time change

Drive approval due time change.

Event details

Event name approval_due_time_change

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_due_time_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} requested a due time change on an approval

Approval requested

Drive approval requested.

Event details

Event name approval_requested

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_requested&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} requested approval on an item

Approval reviewer change

Drive approval reviewer change.

Event details

Event name approval_reviewer_change

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} requested a reviewer change on an approval

Approval reviewer responded

Drive approval reviewer responded.

Event details

Event name approval_reviewer_responded

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=approval_reviewer_responded&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} reviewed an approval on an item

Comment created

A comment was created.

Event details

Event name create_comment

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} created a comment

Comment deleted

A comment was deleted.

Event details

Event name delete_comment

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} deleted a comment

Comment edited

A comment was edited.

Event details

Event name edit_comment

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} edited a comment

Comment reassigned

A comment was reassigned.

Event details

Event name reassign_comment

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reassign_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} reassigned a comment

Comment reopened

A comment was reopened.

Event details

Event name reopen_comment

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reopen_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} reopened a comment

Comment resolved

A comment was resolved.

Event details

Event name resolve_comment

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=resolve_comment&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} resolved a comment

Connected Sheets Query

Event details

Event name connected_sheets_query

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`data_connection_id`	`string` Data connection ID.
`delegating_principal`	`string` Delegating user whose credentials are used.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`execution_id`	`string` Query execution ID.
`execution_trigger`	`string` The trigger for the query execution. Possible values: `api` One Platform API execution trigger. `apps_script` Apps Script execution trigger. `scheduled` Scheduled execution trigger. `sheets_ui` Sheets UI execution trigger.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`query_type`	`string` Type of query. Possible values: `big_query` BigQuery. `looker` Looker.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=connected_sheets_query&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{execution_trigger} {query_type} query executed

Copy

Document copy. This event is present for the new item that was created during the copy. The source_copy event is present for the original item.

Event details

Event name copy

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`copy_type`	`string` Indicates whether the original item and new item are owned by the same organization. Possible values: `external` The original item and new item are not owned by the same organization. `internal` The original item and new item are owned by the same organization.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`encryption_change`	`string` The encryption change that happened as part of this copy. An unset value indicates that no encryption change happened. Possible values: `decrypted_copy` An unencrypted item was created from an encrypted item. `encrypted_copy` An encrypted item was created from an unencrypted item.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` The title of the newly created document.
`old_value`	`string` The title of the original document.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} created a copy of original document {old_value}

Create

Document create.

Event details

Event name create

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`encryption_enforcement_option`	`string` The client-side encryption policy being applied to the user at time of the item's creation. Possible values: `default` The created item was required to be client-side encrypted by default. `disabled` The created item was not required to be client-side encrypted.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} created an item

Delete

Document delete.

Event details

Event name delete

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} deleted an item

Download

Document download.

Event details

Event name download

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} downloaded an item

Drive Email as Attachment

Event details

Event name email_as_attachment

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target`	`string` Target User or Group.
`target_user`	`string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_as_attachment&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} shared this document as an email attachment to {target}

Edit

Document edit.

Event details

Event name edit

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=edit&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} edited an item

Email collaborators

A user emailed this item's collaborators.

Event details

Event name email_collaborators

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`recipients`	`string` Email addresses of the recipients.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=email_collaborators&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} emailed collaborators of an item

eSignature canceled

Event details

Event name cancel_esignature

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=cancel_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} canceled an eSignature on an item

eSignature completed

An eSignature request was completed. This indicates that some reviewers declined to eSign, or the item was eSigned by required reviewers and signed copies were generated successfully.

Event details

Event name complete_esignature

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`esignature_status`	`string` The title of a field that describes the final state of an eSignature on a document. Possible values: `declined` The eSignature on the document was declined. `signed` The eSignature on the document was signed.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=complete_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

An eSignature was completed

eSignature requested

Event details

Event name request_esignature

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=request_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} requested an eSignature on an item

eSignature reviewer responded

An eSignature reviewer responded with a decision, such as eSigning the document or declining the request.

Event details

Event name review_esignature

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`esignature_decision`	`string` The title of a field describing a signer's decision to sign or decline a document's eSignature. Possible values: `declined` The reviewer declined to eSign the document. `signed` The reviewer eSigned the document.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=review_esignature&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} reviewed an eSignature on an item

Forms Responses Downloaded

Download Forms Response.

Event details

Event name download_forms_response

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_forms_response&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} downloaded forms responses

Item content accessed

An application accessed an item's content on behalf of a user.

Event details

Event name access_item_content

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`api_method`	`string` The API method used to generate the event.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_item_content&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

An application accessed an item's content on behalf of {actor}

Label applied

Label was applied.

Event details

Event name label_added

Parameters

`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`label`	`string` The unique Identifier of a Label.
`label_title`	`string` Label title.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`reason`	`string` Reason for label addition, removal, or value change event. Possible values: `copy` Reason for change Drive item copy. `default_label` Reason for change default label behavior. `dlp_action` Reason for change DLP. `reason_unspecified` Reason for change unspecified. `user_action` Reason for change is a user action.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} applied Label {label_title}.

Label applied on creation

Label was applied automatically when the Drive item was created.

Event details

Event name label_added_by_item_create

Parameters

`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`label`	`string` The unique Identifier of a Label.
`label_title`	`string` Label title.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`reason`	`string` Reason for label addition, removal, or value change event. Possible values: `copy` Reason for change Drive item copy. `default_label` Reason for change default label behavior. `dlp_action` Reason for change DLP. `reason_unspecified` Reason for change unspecified. `user_action` Reason for change is a user action.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_added_by_item_create&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Label {label_title} was automatically applied on creation.

Label field value changed

Label Field value was changed.

Event details

Event name label_field_changed

Parameters

`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`field`	`string` Label Field display name.
`field_id`	`string` Label Field ID.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`label`	`string` The unique Identifier of a Label.
`label_title`	`string` Label title.
`new_value`	`string` New Value.
`new_value_id`	`string` New Value IDs.
`old_value`	`string` Old Value.
`old_value_id`	`string` Old Value IDs.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`reason`	`string` Reason for label addition, removal, or value change event. Possible values: `copy` Reason for change Drive item copy. `default_label` Reason for change default label behavior. `dlp_action` Reason for change DLP. `reason_unspecified` Reason for change unspecified. `user_action` Reason for change is a user action.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_field_changed&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed the value of field {field} (Label: {label_title}) from '{old_value}' to '{new_value}'.

Label removed

Label was removed.

Event details

Event name label_removed

Parameters

`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`label`	`string` The unique Identifier of a Label.
`label_title`	`string` Label title.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`reason`	`string` Reason for label addition, removal, or value change event. Possible values: `copy` Reason for change Drive item copy. `default_label` Reason for change default label behavior. `dlp_action` Reason for change DLP. `reason_unspecified` Reason for change unspecified. `user_action` Reason for change is a user action.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=label_removed&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} removed Label {label_title}.

Lock

Document lock.

Event details

Event name add_lock

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`lock_type`	`string` The lock type on an item. Possible values: `domain_admin` Domain Admin lock type. `editor` Editor lock type. `owner` Owner lock type. `unknown_lock_type` Unknown lock type.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=add_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} locked an item

Move

Document move.

Event details

Event name move

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`destination_folder_id`	`string` Destination folder Id.
`destination_folder_title`	`string` Destination folder title.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`source_folder_id`	`string` Source folder Id.
`source_folder_title`	`string` Source folder title.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=move&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} moved an item from {source_folder_title} to {destination_folder_title}

Preview

Document preview.

Event details

Event name preview

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=preview&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} previewed an item

Print

Document print.

Event details

Event name print

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=print&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} printed an item

Remove from folder

Document remove from folder.

Event details

Event name remove_from_folder

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`source_folder_id`	`string` Source folder Id.
`source_folder_title`	`string` Source folder title.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_from_folder&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} removed an item from {source_folder_title}

Rename

Document rename.

Event details

Event name rename

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value.
`old_value`	`string` Old Value.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=rename&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} renamed {old_value} to {new_value}

Report abuse

Event details

Event name report_abuse

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=report_abuse&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

An abuse report was submitted for an item

Restore

Document restore.

Event details

Event name untrash

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=untrash&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} restored an item

Revision deleted

A revision of an item was deleted.

Event details

Event name delete_revision

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`revision_create_timestamp`	`integer` The timestamp when the revision was originally created (in epoch microseconds).
`revision_id`	`string` The ID of the revision.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} deleted a revision of this item

Revision pinned

A revision of an item was pinned, indicating that the revision should be kept forever.

Event details

Event name pin_revision

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`revision_create_timestamp`	`integer` The timestamp when the revision was originally created (in epoch microseconds).
`revision_id`	`string` The ID of the revision.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=pin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} pinned a revision of this item

Revision unpinned

A revision of an item was unpinned, indicating that the revision should not be kept forever.

Event details

Event name unpin_revision

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`revision_create_timestamp`	`integer` The timestamp when the revision was originally created (in epoch microseconds).
`revision_id`	`string` The ID of the revision.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unpin_revision&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} unpinned a revision of this item

Script trigger created

Creation of an Apps Script trigger.

Event details

Event name create_script_trigger

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`script_container_app`	`string` The container application of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications. Possible values: `document` Google Docs application. `form` Google Forms application. `sites` Google Sites application. `slides` Google Slides application. `spreadsheet` Google Sheets application. `unknown` Unknown application.
`script_container_id`	`string` The container ID of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.
`script_trigger_id`	`string` The ID of an Apps Script trigger.
`script_trigger_source_app`	`string` The source providing a trigger. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values: `calendar` Google Calendar application. `clock` System time. `document` Google Docs application. `form` Google Forms application. `slides` Google Slides application. `spreadsheet` Google Sheets application. `unknown` Unknown application.
`script_trigger_type`	`string` Script trigger type. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values: `event_any` On any event. `event_on_change` On change. `event_on_edit` On edit. `event_on_event_created` On calendar event created. `event_on_event_deleted` On calendar event deleted. `event_on_event_updated` On calendar event updated. `event_on_form_submit` On form submit. `event_on_open` On open. `timed_oneshot` Oneshot. `timed_recurring` Recurring. `trigger_type_unspecified` Trigger type unspecified.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} created a script trigger

Script trigger deleted

Deletion of an Apps Script trigger.

Event details

Event name delete_script_trigger

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`script_container_app`	`string` The container application of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications. Possible values: `document` Google Docs application. `form` Google Forms application. `sites` Google Sites application. `slides` Google Slides application. `spreadsheet` Google Sheets application. `unknown` Unknown application.
`script_container_id`	`string` The container ID of a container-bound Apps Script file. See the Container-bound Scripts documentation for more information about container applications.
`script_trigger_id`	`string` The ID of an Apps Script trigger.
`script_trigger_source_app`	`string` The source providing a trigger. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values: `calendar` Google Calendar application. `clock` System time. `document` Google Docs application. `form` Google Forms application. `slides` Google Slides application. `spreadsheet` Google Sheets application. `unknown` Unknown application.
`script_trigger_type`	`string` Script trigger type. See the Apps Script Installable Triggers documentation for more information about script triggers. Possible values: `event_any` On any event. `event_on_change` On change. `event_on_edit` On edit. `event_on_event_created` On calendar event created. `event_on_event_deleted` On calendar event deleted. `event_on_event_updated` On calendar event updated. `event_on_form_submit` On form submit. `event_on_open` On open. `timed_oneshot` Oneshot. `timed_recurring` Recurring. `trigger_type_unspecified` Trigger type unspecified.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_script_trigger&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} deleted a script trigger

Sheets Import Url

A Google Sheet fetched one or more urls via an Import function.

Event details

Event name sheets_import_url

Parameters

`accessed_url`	`string` The URLs that were accessed.
`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

A url was imported from this item

Sheets ImportRange

Event details

Event name sheets_import_range

Parameters

`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee.
`sheets_import_range_recipient_doc`	`string` Sheets ImportRange recipient doc.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{sheets_import_range_recipient_doc} imported range from an item

Source Copy

Source document copy. This event is present for the original item that was copied. The copy event is present for the newly created item.

Event details

Event name source_copy

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`copy_type`	`string` Indicates whether the original item and new item are owned by the same organization. Possible values: `external` The original item and new item are not owned by the same organization. `internal` The original item and new item are owned by the same organization.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`encryption_change`	`string` The encryption change that happened as part of this copy. An unset value indicates that no encryption change happened. Possible values: `decrypted_copy` An unencrypted item was created from an encrypted item. `encrypted_copy` An encrypted item was created from an unencrypted item.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` The title of the newly created document.
`old_value`	`string` The title of the original document.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=source_copy&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} copied this item, creating a new item {copy_type} your organization {new_value}

Suggestion accepted

A suggestion was accepted.

Event details

Event name accept_suggestion

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=accept_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} accepted a suggestion

Suggestion created

A suggestion was created.

Event details

Event name create_suggestion

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=create_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} created a suggestion

Suggestion deleted

A suggestion was deleted.

Event details

Event name delete_suggestion

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} deleted a suggestion

Suggestion rejected

A suggestion was rejected.

Event details

Event name reject_suggestion

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=reject_suggestion&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} rejected a suggestion

Trash

Document trash.

Event details

Event name trash

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=trash&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} trashed an item

Unlock

Document unlock.

Event details

Event name remove_lock

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`lock_type`	`string` The lock type on an item. Possible values: `domain_admin` Domain Admin lock type. `editor` Editor lock type. `owner` Owner lock type. `unknown_lock_type` Unknown lock type.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_lock&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} unlocked an item

Unmovable item relocated

Unmovable document reparented.

Event details

Event name unmovable_item_reparented

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`destination_folder_id`	`string` Destination folder Id.
`destination_folder_title`	`string` Destination folder title.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`source_folder_id`	`string` Source folder Id.
`source_folder_title`	`string` Source folder title.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=unmovable_item_reparented&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

When a parent folder was moved, an item that couldn't be moved was relocated from {source_folder_title} to {destination_folder_title}

Upload

Document upload.

Event details

Event name upload

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`encryption_enforcement_option`	`string` The client-side encryption policy being applied to the user at time of the item's creation. Possible values: `default` The created item was required to be client-side encrypted by default. `disabled` The created item was not required to be client-side encrypted.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} uploaded an item

URL accessed

A URL was accessed from an AppsScript, see URL Fetch Service for details.
Note: doc_id and other file-related fields, such as doc_type and owner, may not be reported.

Event details

Event name access_url

Parameters

`accessed_url`	`string` The URLs that were accessed.
`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`script_id`	`string` The document ID of the executing script.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=access_url&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

A script accessed a url during execution

Video caption deleted

Delete video caption.

Event details

Event name delete_video_caption

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`track_name`	`string` Video caption track name.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=delete_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} deleted a video caption

Video caption downloaded

Download video caption.

Event details

Event name download_video_caption

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`track_name`	`string` Video caption track name.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=download_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} downloaded a video caption

Video caption uploaded

Upload video caption.

Event details

Event name upload_video_caption

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`track_name`	`string` Video caption track name.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=upload_video_caption&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} uploaded a video caption

View

Document view.

Event details

Event name view

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=view&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} viewed an item

ACL changed

ACL Changed. Events of this type are returned with type=acl_change.

Apply Security Update

Document apply security update.

Event details

Event name apply_security_update

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} applied the security update to a file

Bulk Apply Security Update

Bulk apply security update.

Event details

Event name shared_drive_apply_security_update

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_apply_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} applied the security update to all files in a shared drive

Bulk Remove Security Update

Bulk remove security update.

Event details

Event name shared_drive_remove_security_update

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} removed the security update from all files in a shared drive

Changed owners from parent folder

Change in owner of document due to hierarchy reconciliation.

Event details

Event name change_owner_hierarchy_reconciled

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_owner`	`string` The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name.
`new_owner_is_shared_drive`	`boolean` Boolean flag denoting whether new owner is a shared drive.
`new_owner_shared_drive_id`	`string` The shared drive root id if the new document owner is a shared drive.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Due to a change in a parent folder, the owner of an item was changed

Document changed owners

Event details

Event name change_owner

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_owner`	`string` The email address of the user who owns the item as a result of this event. For items moved to a shared drive, this is the shared drive name.
`new_owner_is_shared_drive`	`boolean` Boolean flag denoting whether new owner is a shared drive.
`new_owner_shared_drive_id`	`string` The shared drive root id if the new document owner is a shared drive.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the user who previously owned the item as a result of this event. For items moved to a shared drive, this is the shared drive's name.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_owner&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed owner of an item

Drive Publish Status Change

Event details

Event name publish_change

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_publish_visibility`	`string` New Publish Visibility Value. Possible values: `nobody` Nobody. `public_in_the_domain` Anyone within the audience can view published document. `public_on_the_web` Anyone on the web can view published document. `unchanged` Unchanged.
`new_value`	`string` New Value. Possible values: `auto` Publish Live File. `fixed` Publish a Version. `none` Unpublished. `unchanged` Unchanged.
`old_publish_visibility`	`string` Old Publish Visibility Value. Possible values: `nobody` Nobody. `public_in_the_domain` Anyone within the audience can view published document. `public_on_the_web` Anyone on the web can view published document. `unchanged` Unchanged.
`old_value`	`string` Old Value. Possible values: `auto` Publish Live File. `fixed` Publish a Version. `none` Unpublished. `unchanged` Unchanged.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed publish status from {old_value} to {new_value} and changed visibility from {old_publish_visibility} to {new_publish_visibility}

Editor Settings Change

Editor Settings Changed.

Event details

Event name change_acl_editors

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value. Possible values: `owner` The person modifying the access on the file is the Owner of the file. `writers` The person modifying the access on the file is a Writer (Editor) of the file.
`old_value`	`string` Old Value. Possible values: `owner` The person modifying the access on the file is the Owner of the file. `writers` The person modifying the access on the file is a Writer (Editor) of the file.
`old_visibility`	`string` Old Visibility of Target File. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`visibility_change`	`string` Change in overall visibility of the file. Possible values: `external` Overall visibility changed from internal to external. `internal` Overall visibility changed from external to internal. `none` No change in overall visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_acl_editors&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed editor settings from {old_value} to {new_value}

Link Sharing Access Type Change

Change in link sharing access type of document.

Event details

Event name change_document_access_scope

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_value`	`string` Old Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_visibility`	`string` Old Visibility of Target File. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_domain`	`string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`visibility_change`	`string` Change in overall visibility of the file. Possible values: `external` Overall visibility changed from internal to external. `internal` Overall visibility changed from external to internal. `none` No change in overall visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}

Link Sharing Access Type Change from Parent Folder

Change in link sharing access type of document due to hierarchy reconciliation.

Event details

Event name change_document_access_scope_hierarchy_reconciled

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_value`	`string` Old Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_visibility`	`string` Old Visibility of Target File. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_domain`	`string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`visibility_change`	`string` Change in overall visibility of the file. Possible values: `external` Overall visibility changed from internal to external. `internal` Overall visibility changed from external to internal. `none` No change in overall visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_access_scope_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed link sharing access type from {old_value} to {new_value} for {target_domain}

Link Sharing visibility change

Change in link sharing visibility of document.

Event details

Event name change_document_visibility

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value. Possible values: `people_with_link` Anyone with the link on the web can access. `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. `public_on_the_web` Public on the web.
`old_value`	`string` Old Value. Possible values: `people_with_link` Anyone with the link on the web can access. `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. `public_on_the_web` Public on the web.
`old_visibility`	`string` Old Visibility of Target File. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_domain`	`string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`visibility_change`	`string` Change in overall visibility of the file. Possible values: `external` Overall visibility changed from internal to external. `internal` Overall visibility changed from external to internal. `none` No change in overall visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed link sharing visibility from {old_value} to {new_value} for {target_domain}

Link Sharing visibility change from Parent Folder

Change in link sharing visibility of document due to hierarchy reconciliation.

Event details

Event name change_document_visibility_hierarchy_reconciled

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value. Possible values: `people_with_link` Anyone with the link on the web can access. `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. `public_on_the_web` Public on the web.
`old_value`	`string` Old Value. Possible values: `people_with_link` Anyone with the link on the web can access. `people_within_domain_with_link` Anyone with the link within the audience can access, apart from possible sharing with individual users/groups outside the audience. `private` Document link not exposed, apart from possible sharing with individual users/groups (even outside the domain). `public_in_the_domain` Anyone within the audience can access, apart from possible sharing with individual users/groups outside the audience. `public_on_the_web` Public on the web.
`old_visibility`	`string` Old Visibility of Target File. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_domain`	`string` Optional. The domain for which the access scope was changed. This can also be the alias `all` to indicate the access scope was changed for all domains that have visibility for this document.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`visibility_change`	`string` Change in overall visibility of the file. Possible values: `external` Overall visibility changed from internal to external. `internal` Overall visibility changed from external to internal. `none` No change in overall visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_document_visibility_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Due to a change in a parent folder, the link sharing visibility for {target_domain} changed from {old_value} to {new_value}

Publish new version

A new version of this item was published.

Event details

Event name publish_new_version

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=publish_new_version&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} published a new version

Remove security update

Document remove security update.

Event details

Event name remove_security_update

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=remove_security_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} removed the security update from a file

Shared Drive Membership Change

Shared drive Membership Change.

Event details

Event name shared_drive_membership_change

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`added_role`	`string` Added membership role to a user or group in a shared drive. See Shared drives access for more information about roles. Possible values: `commenter` Shared drive role Commenter. `content_manager` Shared drive role Content manager. `editor` Shared drive role Contributor. `none` No role in shared drive. `organizer` Shared drive role Manager. `viewer` Shared drive role Viewer.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`membership_change_type`	`string` Type of change in shared drive membership of a user/group. Possible values: `add_to_shared_drive` Addition to a shared drive. `change_roles` Change of a member's role in a shared drive. `re_share` Re-share of a member's role in a shared drive. `remove_from_shared_drive` Removal from a shared drive.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`removed_role`	`string` Removed membership role of a user/group in a shared drive. Possible values: `commenter` Shared drive role Commenter. `content_manager` Shared drive role Content manager. `editor` Shared drive role Contributor. `none` No role in shared drive. `organizer` Shared drive role Manager. `viewer` Shared drive role Viewer.
`target`	`string` Target User or Group.
`target_user`	`string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_membership_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} made a membership change of type {membership_change_type} for {target} by removing role(s) {removed_role} and adding role(s) {added_role}

Shared Drive Settings Change

Event details

Event name shared_drive_settings_change

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_settings_state`	`string` New state of shared drive settings. Possible values: `none` Shared drive settings change value None. `restricted` Shared drive settings change value Restricted. `unrestricted` Shared drive settings change value Unrestricted.
`old_settings_state`	`string` Old state of shared drive settings. Possible values: `none` Shared drive settings change value None. `restricted` Shared drive settings change value Restricted. `unrestricted` Shared drive settings change value Unrestricted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target`	`string` Target User or Group.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`shared_drive_settings_change_type`	`string` Type of change in shared drive settings. Possible values: `cross_domain_sharing` A shared drive settings change that restricts or unrestricts the ability for the contents within the shared drive to be shared outside the domain. `direct_acl` A shared drive settings change that restricts or unrestricts the ability to add users directly onto a file when they're not a member. `download` A shared drive settings change that restricts or unrestricts a user's ability to download files from the shared drive. `drive_fs` A shared drive settings change that restricts or unrestricts access to Google Drive for desktop. `file_organizer_can_share_folders` A shared drive settings change that restricts or unrestricts a file organizer's ability to share folders.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=shared_drive_settings_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed {team_drive_settings_change_type} setting from {old_settings_state} to {new_settings_state}

Sheets ImportRange access change

Event details

Event name sheets_import_range_access_change

Parameters

`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee.
`sheets_import_range_recipient_doc`	`string` Sheets ImportRange recipient doc.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=sheets_import_range_access_change&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} enabled Sheets range import to {sheets_import_range_recipient_doc}

User Sharing Permissions Change

User Sharing Permissions Changed.

Event details

Event name change_user_access

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_value`	`string` Old Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_visibility`	`string` Old Visibility of Target File. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_user`	`string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`visibility_change`	`string` Change in overall visibility of the file. Possible values: `external` Overall visibility changed from internal to external. `internal` Overall visibility changed from external to internal. `none` No change in overall visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} changed sharing permissions for {target_user} from {old_value} to {new_value}

User Sharing Permissions Change from Parent Folder

User Sharing Permissions Changed due to hierarchy reconciliation.

Event details

Event name change_user_access_hierarchy_reconciled

Parameters

`actor_is_collaborator_account`	`boolean` Whether the actor is a collaborator account.
`billable`	`boolean` Whether this activity is billable.
`doc_id`	`string` Document ID.
`doc_title`	`string` Document title.
`doc_type`	`string` Document type. Possible values: `document` Doc type document. `drawing` Doc type drawing. `folder` Doc type folder. `form` Doc type form. `html` Doc type HTML. `jam` Doc type Jam. `jpeg` Doc type JPEG. `mp4` Doc type MP4. `mpeg` Doc type MPEG. `msexcel` Doc type MS Excel. `mspowerpoint` Doc type MS Powerpoint. `msword` Doc type MS Word. `pdf` Doc type PDF. `png` Doc type PNG. `presentation` Doc type presentation. `quicktime` Doc type Quicktime. `script` Google Apps Script. `shortcut` Doc type is Google Shortcut. `sites` Doc type is Google Sites. `spreadsheet` Doc type spreadsheet. `shared_drive` Doc type is a shared drive. `txt` Doc type txt. `unknown` Doc type unknown.
`is_encrypted`	`boolean` Whether the file is client-side encrypted.
`new_value`	`string` New Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_value`	`string` Old Value. Possible values: `can_comment` Can comment. `can_edit` Can edit. `can_respond` Can respond. `can_view` Can view. `can_view_published` Can view published. `none` Scope none. `organizer` Manager. `owner` Is a owner.
`old_visibility`	`string` Old Visibility of Target File. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`originating_app_id`	`string` The Google Cloud Project ID of the application that performed the action. Use the Drive REST API to retrieve the app title.
`owner`	`string` The email address of the document's owner. For items contained in a shared drive, the owner is the name of the shared drive.
`owner_is_shared_drive`	`boolean` Boolean flag denoting whether the owner is a shared drive.
`owner_shared_drive_id`	`string` The shared drive root ID if the document owner is a shared drive.
`primary_event`	`boolean` Whether this event is a primary event. A single user action in Drive can generate several events, multiple of which can be primary (`primary_event=true`). The remaining events are deemed to be side effects of the primary event(s) (`primary_event=false`). For example, when a user creates a document, several events are generated, with only the create event having `primary_event=true`. But when a user shares a document with multiple other users in one action, an access change event having `primary_event=true` is created for each sharee. Possible values: `false` Boolean value false. `true` Boolean value true.
`target_user`	`string` The email address of the user or group whose access permissions were changed, or the name of the domain for which access permissions were changed. If the user has multiple email addresses on their Google account, their display email is used instead of the specific email that the item was shared with.
`shared_drive_id`	`string` The unique identifier of the shared drive. Only populated for events or items from a shared drive.
`visibility`	`string` Visibility of target file. Possible values: `people_with_link` Anyone with the link can access. `people_within_domain_with_link` Anyone with the link within the audience can access. `private` Private. `public_in_the_domain` Anyone within the audience can access. `public_on_the_web` Public on the web. `shared_externally` Shared with explicit users/groups external to the domain. `shared_internally` Shared with explicit users/groups internal to the domain. `unknown` Unknown visibility.
`visibility_change`	`string` Change in overall visibility of the file. Possible values: `external` Overall visibility changed from internal to external. `internal` Overall visibility changed from external to internal. `none` No change in overall visibility.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=change_user_access_hierarchy_reconciled&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Due to a change in a parent folder, the sharing permissions for {target_user} changed from {old_value} to {new_value}

Pooled quota metadata

Events of this type are returned with type=pooled_quota_metadata.

Storage Usage Update

Drive storage usage update.

Event details

Event name storage_usage_update

Parameters

storage_usage_in_bytes

integer

Storage usage (in bytes).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/drive?eventName=storage_usage_update&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Storage usage update for {actor}