Google Workspace Changes

Expanded Workspace audit logging datasets and in-depth filtering are now available via Admin SDK (Reports API).

To support more granular incident investigations, Google is expanding the Workspace audit logging datasets available on the Admin SDK (Reports API) to include additional datasets such as Admin data action logs, Contacts logs, Assignments logs, Directory Sync logs, Profile logs, Graduation logs, LDAP logs, Meet hardware logs, Takeout logs, Tasks logs, Cloud search logs, Access evaluation logs, and Data migration logs. Additionally, the Reports API now supports in-depth filtering on resource details, allowing users to filter by labels and resources from their audit logs for fetching more granular information. These granular audit logs are crucial for organizations to investigate cybersecurity incidents and understand their data usage, with these changes significantly expanding the depth of analysis possible.