Google Workspace Changes

Introduction of the OwnerDetails field in AdminSDK and BigQuery audit events.

A new OwnerDetails field has been added to Resource Details in events published to the AdminSDK and BigQuery. This field identifies the owner of a resource through 'Owner Type' (USER, CUSTOMER, GROUP, or SHARED_DRIVE) and 'Owner Identity' (IDs or email addresses).

Expanded filtering capabilities in the AdminSDK Activities.List method.

The Activities.List method of the AdminSDK now supports filtering for RegionCode (via the networkInfoFilter field) and OAuthClientId (via the applicationInfoFilter field), allowing administrators to filter logs by specific regions or applications.

Google Workspace enhances the audit log API with additional datasets and granular filtering.

Google is expanding the Workspace audit logging datasets available on the Admin SDK (Reports API) to include several new logs, including Admin data action, Contacts, Assignments, Directory Sync, Profile, Graduation, LDAP, Meet hardware, Takeout, Tasks, Cloud search, Access evaluation, and Data migration logs. Additionally, the Reports API now supports in-depth filtering on resource details, allowing administrators to filter by labels and resources for more granular log fetching to aid in cybersecurity investigations.

Google introduces the Roles API for programmatic admin role management.

Google has launched the Roles API as part of the Admin SDK Directory APIs, enabling developers and admins to programmatically create, assign, and update admin roles. Previously, these management functions were only available through the Admin console UI. This API allows for the development of internal and third-party tools that can provide selective access to Delegated Admins for specific administrative capabilities, such as user management or mobile device management, and allows for the programmatic creation of role assignment reports.

New domain management features added to the Admin SDK

The Google Apps Admin SDK now includes new domain management features via the Customers API and Domains API. These updates allow administrators and developers to programmatically swap the primary domain with a secondary domain and add or remove domains and aliases, providing a superset of the capabilities available in the Admin console's Domains page.