OAuth Token Audit Activity Events

    This document lists the events and parameters for various types of OAuth Token Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=token .

    Auth

    Events of this type are returned with type=auth .

    Activity

    Access activity for an application.

    Event details
    Event name
    activity
    Parameters
    api_ name

    string

    The API name which was used in the OAuth Activity.

    app_ name

    string

    The application for which access was granted or revoked.

    client_ id

    string

    Client ID to which access has been granted / revoked.

    client_ type

    string

    The client type. Possible values:

    • CONNECTED_DEVICE
      A connected device client.
    • NATIVE_ANDROID
      An Android application.
    • NATIVE_APPLICATION
      A native application.
    • NATIVE_CHROME_EXTENSION
      A Chrome application.
    • NATIVE_DESKTOP
      A native Desktop application.
    • NATIVE_DEVICE
      A native device application.
    • NATIVE_IOS
      An iOS application.
    • NATIVE_SONY
      A native Sony application.
    • NATIVE_UNIVERSAL_WINDOWS_PLATFORM
      A native Universal Windows Platform application.
    • TYPE_UNSPECIFIED
      An unspecified client type.
    • WEB
      A web application.
    method_ name

    string

    The method name which was used in the OAuth Activity.

    num_ response_ bytes

    integer

    The number of response bytes in the OAuth Activity.

    product_ bucket

    string

    The product bucket of the application associated with this OAuth Activity. Possible values:

    • APPS_SCRIPT_API
      The Apps Script API product bucket.
    • APPS_SCRIPT_RUNTIME
      The Apps Script runtime product bucket.
    • CALENDAR
      The Calendar product bucket.
    • CLASSROOM
      The Classroom product bucket.
    • CLOUD_SEARCH
      The Cloud Search product bucket.
    • COMMUNICATIONS
      The Communications product bucket.
    • CONTACTS
      The Contacts product bucket.
    • DRIVE
      The Drive product bucket.
    • GMAIL
      The Gmail product bucket.
    • GPLUS
      The G+ product bucket.
    • GROUPS
      The Groups product bucket.
    • GSUITE_ADMIN
      The Google Workspace Admin product bucket.
    • IDENTITY
      The Identity product bucket.
    • OTHER
      A product bucket for applications that don't fall into the other buckets.
    • TASKS
      The Tasks product bucket.
    • VAULT
      The Vault product bucket.
    Sample request
    GET https://admin.googleapis.com /admin /reports /v1 /activity /users /all /applications / token ?eventName= activity &maxResults=10 &access_token= YOUR_ACCESS_TOKEN
    Admin Console message format
    {app_name} called {method_name} on behalf of {actor}

    Authorize

    A user authorized access to an application for their data.

    Event details
    Event name
    authorize
    Parameters
    app_ name

    string

    The application for which access was granted or revoked.

    client_ id

    string

    Client ID to which access has been granted / revoked.

    client_ type

    string

    The client type. Possible values:

    • CONNECTED_DEVICE
      A connected device client.
    • NATIVE_ANDROID
      An Android application.
    • NATIVE_APPLICATION
      A native application.
    • NATIVE_CHROME_EXTENSION
      A Chrome application.
    • NATIVE_DESKTOP
      A native Desktop application.
    • NATIVE_DEVICE
      A native device application.
    • NATIVE_IOS
      An iOS application.
    • NATIVE_SONY
      A native Sony application.
    • NATIVE_UNIVERSAL_WINDOWS_PLATFORM
      A native Universal Windows Platform application.
    • TYPE_UNSPECIFIED
      An unspecified client type.
    • WEB
      A web application.
    scope

    string

    Scopes under which access was granted / revoked.

    scope_ data

    message

    Scope Data.

    Sample request
    GET https://admin.googleapis.com /admin /reports /v1 /activity /users /all /applications / token ?eventName= authorize &maxResults=10 &access_token= YOUR_ACCESS_TOKEN
    Admin Console message format
    {actor} authorized access to {app_name} for {scope} scopes

    Request

    Access requested for an application.

    Event details
    Event name
    request
    Parameters
    app_ name

    string

    The application for which access was granted or revoked.

    client_ id

    string

    Client ID to which access has been granted / revoked.

    client_ type

    string

    The client type. Possible values:

    • CONNECTED_DEVICE
      A connected device client.
    • NATIVE_ANDROID
      An Android application.
    • NATIVE_APPLICATION
      A native application.
    • NATIVE_CHROME_EXTENSION
      A Chrome application.
    • NATIVE_DESKTOP
      A native Desktop application.
    • NATIVE_DEVICE
      A native device application.
    • NATIVE_IOS
      An iOS application.
    • NATIVE_SONY
      A native Sony application.
    • NATIVE_UNIVERSAL_WINDOWS_PLATFORM
      A native Universal Windows Platform application.
    • TYPE_UNSPECIFIED
      An unspecified client type.
    • WEB
      A web application.
    scope

    string

    Scopes under which access was granted / revoked.

    scope_ data

    message

    Scope Data.

    Sample request
    GET https://admin.googleapis.com /admin /reports /v1 /activity /users /all /applications / token ?eventName= request &maxResults=10 &access_token= YOUR_ACCESS_TOKEN
    Admin Console message format
    {actor} requested access to {app_name} for {scope} scopes

    Revoke

    Access revoked for an application to a users data.

    Event details
    Event name
    revoke
    Parameters
    app_ name

    string

    The application for which access was granted or revoked.

    client_ id

    string

    Client ID to which access has been granted / revoked.

    client_ type

    string

    The client type. Possible values:

    • CONNECTED_DEVICE
      A connected device client.
    • NATIVE_ANDROID
      An Android application.
    • NATIVE_APPLICATION
      A native application.
    • NATIVE_CHROME_EXTENSION
      A Chrome application.
    • NATIVE_DESKTOP
      A native Desktop application.
    • NATIVE_DEVICE
      A native device application.
    • NATIVE_IOS
      An iOS application.
    • NATIVE_SONY
      A native Sony application.
    • NATIVE_UNIVERSAL_WINDOWS_PLATFORM
      A native Universal Windows Platform application.
    • TYPE_UNSPECIFIED
      An unspecified client type.
    • WEB
      A web application.
    scope

    string

    Scopes under which access was granted / revoked.

    scope_ data

    message

    Scope Data.

    Sample request
    GET https://admin.googleapis.com /admin /reports /v1 /activity /users /all /applications / token ?eventName= revoke &maxResults=10 &access_token= YOUR_ACCESS_TOKEN
    Admin Console message format
    {actor} revoked access to {app_name} for {scope} scopes
    Design a Mobile Site
    View Site in Mobile | Classic
    Share by: