Admin Audit Activity Events - Organization Settings

This document lists the events and parameters for Organization Settings Admin Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=admin.

Events of this type are returned with type=ORG_SETTINGS.

App License Policy Changed

Licenses enabled or not at an org unit event name.

Event details
Event name CHROME_LICENSES_ENABLED
Parameters
APPLICATION_NAME

string

The application's name.

CHROME_LICENSES_ENABLED

string

Licenses enabled. Possible values:

  • DISABLED
    Not allowed to perform action.
  • ENABLED
    Allowed to perform action.
  • INHERITED
    Value is inherited.
ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHROME_LICENSES_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

App license policy for {APPLICATION_NAME} at org unit {ORG_UNIT_NAME} is now {CHROME_LICENSES_ENABLED}

App License Reservation Created

License reservation at an org unit is created.

Event details
Event name CHROME_APPLICATION_LICENSE_RESERVATION_CREATED
Parameters
APPLICATION_NAME

string

The application's name.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SKU_NAME

string

The SKU name.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHROME_APPLICATION_LICENSE_RESERVATION_CREATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{NEW_VALUE} app licenses reserved to {ORG_UNIT_NAME} for {APPLICATION_NAME} {SKU_NAME}

App License Reservation Deleted

License reservation at an org unit is deleted.

Event details
Event name CHROME_APPLICATION_LICENSE_RESERVATION_DELETED
Parameters
APPLICATION_NAME

string

The application's name.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SKU_NAME

string

The SKU name.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHROME_APPLICATION_LICENSE_RESERVATION_DELETED&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

App license reservation at {ORG_UNIT_NAME} for {APPLICATION_NAME} {SKU_NAME} deleted

App License Reservation Updated

License reservation at an org unit is updated.

Event details
Event name CHROME_APPLICATION_LICENSE_RESERVATION_UPDATED
Parameters
APPLICATION_NAME

string

The application's name.

NEW_VALUE

string

The new SETTING_NAME value that was set during this event.

OLD_VALUE

string

The previous SETTING_NAME value that was replaced during this event.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SKU_NAME

string

The SKU name.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHROME_APPLICATION_LICENSE_RESERVATION_UPDATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

App license reservation at {ORG_UNIT_NAME} for {APPLICATION_NAME} {SKU_NAME} updated from {OLD_VALUE} to {NEW_VALUE} licenses

Create enrollment token

Event for 'Create enrollment token'.

Event details
Event name CREATE_DEVICE_ENROLLMENT_TOKEN
Parameters
FULL_ORG_UNIT_PATH

string

The org unit path including the root org unit name.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_DEVICE_ENROLLMENT_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Generated a new enrollment token for {FULL_ORG_UNIT_PATH}

Event details
Event name ASSIGN_CUSTOM_LOGO
Parameters
ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=ASSIGN_CUSTOM_LOGO&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

New custom logo assigned for org unit {ORG_UNIT_NAME}

Event details
Event name UNASSIGN_CUSTOM_LOGO
Parameters
ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=UNASSIGN_CUSTOM_LOGO&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Custom logo unassigned for org unit {ORG_UNIT_NAME}

Enrollment Token Creation

Event details
Event name CREATE_ENROLLMENT_TOKEN
Parameters
ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_ENROLLMENT_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

A new enrollment token is generated for {ORG_UNIT_NAME}

Enrollment Token Revocation

Event details
Event name REVOKE_ENROLLMENT_TOKEN
Parameters
ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REVOKE_ENROLLMENT_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

The enrollment token of {ORG_UNIT_NAME} has been revoked

Licenses allowed or not at an org unit

Licenses allowed or not at an org unit event name.

Event details
Event name CHROME_LICENSES_ALLOWED
Parameters
APPLICATION_NAME

string

The application's name.

CHROME_LICENSES_ALLOWED

string

Licenses allowed. Possible values:

  • ALLOWED
    Allowed to perform action.
  • EMPTY
    No value specified.
  • UNALLOWED
    Not allowed to perform action.
ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CHROME_LICENSES_ALLOWED&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Licenses allowed policy is {CHROME_LICENSES_ALLOWED} for app {APPLICATION_NAME} at org unit {ORG_UNIT_NAME}

OrgUnit Creation

Event details
Event name CREATE_ORG_UNIT
Parameters
ORG_UNIT_NAME

string

The new org unit's name. For more information about creating an organizational unit and an organization hierarchy, see the administration help center.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=CREATE_ORG_UNIT&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Org Unit {ORG_UNIT_NAME} created

OrgUnit Deletion

Event details
Event name REMOVE_ORG_UNIT
Parameters
ORG_UNIT_NAME

string

The name of the org unit that was removed.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REMOVE_ORG_UNIT&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Org Unit {ORG_UNIT_NAME} deleted

OrgUnit Description Change

Event details
Event name EDIT_ORG_UNIT_DESCRIPTION
Parameters
ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=EDIT_ORG_UNIT_DESCRIPTION&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Description of {ORG_UNIT_NAME} changed

OrgUnit Move

Event details
Event name MOVE_ORG_UNIT
Parameters
NEW_VALUE

string

The new parent org unit name.

ORG_UNIT_NAME

string

The name of the org unit that moved.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=MOVE_ORG_UNIT&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{ORG_UNIT_NAME} moved to parent {NEW_VALUE}

OrgUnit Name Change

Event details
Event name EDIT_ORG_UNIT_NAME
Parameters
NEW_VALUE

string

The new org unit name.

ORG_UNIT_NAME

string

The org unit whose name changed.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=EDIT_ORG_UNIT_NAME&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Name of {ORG_UNIT_NAME} changed to {NEW_VALUE}

Revoke enrollment token

Event for 'Revoke enrollment token'.

Event details
Event name REVOKE_DEVICE_ENROLLMENT_TOKEN
Parameters
FULL_ORG_UNIT_PATH

string

The org unit path including the root org unit name.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=REVOKE_DEVICE_ENROLLMENT_TOKEN&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Revoked the enrollment token of {FULL_ORG_UNIT_PATH}

Service Change

Event details
Event name TOGGLE_SERVICE_ENABLED
Parameters
DOMAIN_NAME

string

The primary domain name.

GROUP_EMAIL

string

The group's primary email address.

NEW_VALUE

string

The new value, which can be true or false.

ORG_UNIT_NAME

string

The organizational unit (OU) name (path).

SERVICE_NAME

string

The enabled or disabled service name.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/admin?eventName=TOGGLE_SERVICE_ENABLED&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

Service {SERVICE_NAME} changed to {NEW_VALUE} for {ORG_UNIT_NAME} organizational unit in your organization

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-11 UTC.