Admin Reports

Overview

This source connector fetches from the Reports API.

Data Source	Stream Name
Access Transparency Activity Events	`access_transparency`
Admin Activity Report Event Names	`admin`
Calendar Audit Activity Events	`calendar`
Chat Audit Activity Events	`chat`
Chrome Audit Activity Events	`chrome`
Context-Aware Access Audit Activity Events	`context_aware_access`
Currents Audit Activity Events	`currents`
Data Studio Audit Activity Events	`data_studio`
Device Audit Activity Events	`mobile`
Drive Audit Activity Events	`drive`
Enterprise Groups Audit Activity Events	`groups_enterprise`
Groups Audit Activity Events	`groups`
Google Cloud Platform Activity Events	`gcp`
Google Meet Audit Activity Events	`meet`
Jamboard Audit Activity Events	`jamboard`
Keep Audit Activity Events	`keep`
Login Audit Activity Events	`logins`
Rules Audit Activity Events	`rules`
SAML Audit Activity Events	`saml`
User Accounts Audit Activity Events	`user_accounts`
Vault Audit Activity Events	`vault`

Credentials to a Google Service Account with delegated Domain Wide Authority
1. The following OAuth scopes need to be granted to the service account:
  1. https://www.googleapis.com/auth/admin.reports.audit.readonly
  2. https://www.googleapis.com/auth/admin.reports.usage.readonly
Enable the vault stream
1. Ensure that the user or service account has the "Manage Audit" permissions assigned as part of their Admin role. See documentation on Vault privileges
Copy the Email address of the workspace admin which created the Service Account, it will be used to configure the connector below

Field	Required	Description	Example
JSON Credentials	yes	JSON service account private JSON key	{ "type": "service_account", "project_id": "test-id", "private_key_id": "27ed788...e52", "private_key": "-----BEGIN PRIVATE KEY---- ... ----END PRIVATE KEY-----", "client_email": "[email protected] ", "client_id": "19348374364737338", "auth_uri": "https://accounts.google.com/o/oauth2/auth", "token_uri": "https://oauth2.googleapis.com/token", "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs", "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/test%40test.iam.gserviceaccount.com" }
email	yes	Email address of the workspace admin which created the Service Account	[email protected]