Blog

Admin Audit Log in G Suite

From your Google Admin console, you can review user and administrator activity for your organization. You can use the information for security purposes as well as to track users and admins.

Admin Audit Log in G Suite

Here are a few tasks that become easy for you through the Admin audit log:

View administrator activity 

Use the Admin audit log to see the actions performed in your Google Admin console. Also, you can see when an administrator added a user or turned on a G Suite service.

Open the Admin audit log

1. Go to the Admin console Home page, click Reports.

2. On the left, under Audit, click Admin.

3. Customize what you review, like on the right, click Manage columns, select the columns that you simply want to ascertain, and click on Save.

4. You can create filters and export log data, create alerts as well.

Data you can view

Data type Description
Event name Actions, such as revoking a security key or deleting a user.
Date Date and time of the event.
Event description Details about the action, such as the name of the deleted user or alias created.
Admin Name of the admin who acted. If an admin action makes a change to a user’s license, you’ll see the License Manager instead.
IP address The IP address of the admin reflects the admin's physical location.

 

Details on event names and descriptions

From Add a filter, select an Event name to filter data for that event. The audit report shows log entries for every time that event occurred during the period of time that you simply set. 

Most event names are self-explanatory like, Add application shows when an application was added to your organization or a domain. You would possibly see detailed log data, such as:

Admin role assignment—When you assign a Super Admin role to a user,  the log shows the Event Description as Role_SEED_ADMIN_ROLE.

Groups—Logs actions performed within the Admin console, in Google Groups, and to track changes by users in Groups, see the Groups audit log.

Alias Creation—States the domain which is created as an alias of the parent domain. Also, the date on which this event is created and the related IP address.

Access groups—Logs when a service is turned on or off for an access group.




Need Help ?

Click here and start chatting with us !

Chat Now
Start chatting with us !