Directory Sync Audit Activity Events

This document lists the events and parameters for various types of Directory Sync Audit activity events. You can retrieve these events by callingActivities.list() withapplicationName=directory_sync.

Sync entity events

The processing of user and group entities. Events of this type are returned withtype=DIRECTORY_SYNC_ENTITY.

Group Membership Added

This event occurs when an entity is added to a group.

Event details
Event nameADDED_GROUP_MEMBERSHIP
Parameters
DRY_RUN

boolean

True if this event is for a dry run.

ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
GROUP_ID

string

The email id of the group.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
NEW_MEMBERSHIP_ROLE

string

The new role for the membership.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ADDED_GROUP_MEMBERSHIP&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Added{TARGET_OBJECT_ID} in group{GROUP_ID} as{NEW_MEMBERSHIP_ROLE}

Group Membership Removed

This event occurs when an entity is removed from a group.

Event details
Event nameREMOVED_GROUP_MEMBERSHIP
Parameters
DRY_RUN

boolean

True if this event is for a dry run.

ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
GROUP_ID

string

The email id of the group.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
OLD_MEMBERSHIP_ROLE

string

The previous role for the membership.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOVED_GROUP_MEMBERSHIP&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Removed{TARGET_OBJECT_ID} from group{GROUP_ID} as{OLD_MEMBERSHIP_ROLE}

Group Membership Updated

This event occurs when an entity's membership in a group is updated.

Event details
Event nameUPDATED_GROUP_MEMBERSHIP
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
GROUP_ID

string

The email id of the group.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
NEW_MEMBERSHIP_ROLE

string

The new role for the membership.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=UPDATED_GROUP_MEMBERSHIP&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Updated{ENTITY_TYPE}{TARGET_OBJECT_ID}'s role in group{GROUP_ID} to{NEW_MEMBERSHIP_ROLE}

Object Created

Occurs when a new entity is created.

Event details
Event nameENTITY_CREATED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_CREATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Created{ENTITY_TYPE}{TARGET_OBJECT_ID}

Object Deprovisioned

Occurs when an object is deprovisioned.

Event details
Event nameOBJECT_DEPROVISIONED
Parameters
DEPROVISION_ACTION

string

The action of deprovisioning an object.

DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=OBJECT_DEPROVISIONED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{ENTITY_TYPE}{TARGET_OBJECT_ID}{DEPROVISION_ACTION} because{MESSAGE}

Object Excluded

Occurs when an entity is excluded from a sync.

Event details
Event nameENTITY_EXCLUDED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
EXCLUSION_RULE

string

The exclusion rule.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_EXCLUDED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Excluded{ENTITY_TYPE}{SOURCE_OBJECT_ID} due to the exclusion rule{EXCLUSION_RULE}

Object Excluded Summary

Provides a summary of entities excluded from a sync.

Event details
Event nameENTITY_EXCLUSIONS_SUMMARY
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
EXCLUDED_COUNT

integer

The count of items excluded.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_EXCLUSIONS_SUMMARY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Excluded{EXCLUDED_COUNT}{ENTITY_TYPE} entities from directory{SOURCE_DIRECTORY_DISPLAY_NAME}

Object Skipped - Source object

Occurs when an entity is skipped during a sync.

Event details
Event nameENTITY_SKIPPED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_SKIPPED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Skipped syncing{ENTITY_TYPE}{SOURCE_OBJECT_ID}.{MESSAGE}

Object Skipped - Target object

Occurs when a target entity is skipped during a sync.

Event details
Event nameTARGET_ENTITY_SKIPPED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=TARGET_ENTITY_SKIPPED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Skipped syncing{ENTITY_TYPE}{TARGET_OBJECT_ID}.{MESSAGE}

Object Skipped - Unexpected error

Occurs when an entity could not be processed.

Event details
Event nameENTITY_SYNC_FAILED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
GROUP_ID

string

The email id of the group.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_SYNC_FAILED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Skipped syncing{ENTITY_TYPE}.{MESSAGE}

Object Updated

Occurs when an entity's attributes are updated.

Event details
Event nameENTITY_UPDATED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
NEW_ATTRIBUTES

string

The new attributes for the entity.

OLD_ATTRIBUTES

string

The previous attributes for the entity.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_UPDATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Updated{ENTITY_TYPE}{TARGET_OBJECT_ID}. Old attributes{OLD_ATTRIBUTES}, new attributes{NEW_ATTRIBUTES}

Read Objects

Occurs when an entity is read from the remote directory.

Event details
Event nameREMOTE_DIRECTORY_ENTITY_READ
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
OLD_ATTRIBUTES

string

The previous attributes for the entity.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOTE_DIRECTORY_ENTITY_READ&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Read{SOURCE_OBJECT_ID} with attributes{OLD_ATTRIBUTES}

Read Objects - Initiating read from source directory

Occurs when the sync process starts reading entities from the remote directory.

Event details
Event nameREMOTE_DIRECTORY_READ
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
FILTER

string

The remote directory filter.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOTE_DIRECTORY_READ&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Reading{ENTITY_TYPE}s from source directory{SOURCE_DIRECTORY_DISPLAY_NAME} with filter{FILTER}

Read Objects - Initiating read from target directory

Occurs when the sync process starts reading entities from the Google directory.

Event details
Event nameCLOUD_DIRECTORY_READ
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=CLOUD_DIRECTORY_READ&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Reading{ENTITY_TYPE}s from your Google directory

Read Objects - Source directory read summary

Provides a summary of entities read from the remote directory.

Event details
Event nameREMOTE_DIRECTORY_READ_FINISHED
Parameters
COUNT

integer

The count of items affected.

DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=REMOTE_DIRECTORY_READ_FINISHED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Retrieved{COUNT}{ENTITY_TYPE}s from source directory{SOURCE_DIRECTORY_DISPLAY_NAME}

Read Objects - Target directory read summary

Provides a summary of entities read from the Google directory.

Event details
Event nameCLOUD_DIRECTORY_READ_FINISHED
Parameters
COUNT

integer

The count of items affected.

DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=CLOUD_DIRECTORY_READ_FINISHED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Retrieved{COUNT}{ENTITY_TYPE}s from your Google directory

Sync Error

Indicates an error occurred during the sync process.

Event details
Event nameERROR
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ERROR&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{MESSAGE}

Sync Error - Individual object

Occurs when an entity could not be created in the target directory.

Event details
Event nameENTITY_NOT_CREATED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SOURCE_IMMUTABLE_ID

string

The immutable id of source object.

SOURCE_OBJECT_ID

string

The id of the source object.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

TARGET_OBJECT_ID

string

The id of the target object.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_NOT_CREATED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{ENTITY_TYPE}{TARGET_OBJECT_ID} could not be created. Message:{MESSAGE}

Sync Summary

Provides a summary of entity changes.

Event details
Event nameENTITY_CHANGES
Parameters
CREATED_COUNT

integer

The count of items created.

DELETED_COUNT

integer

The count of items deleted.

DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
FAILED_COUNT

integer

The count of entities that failed to sync.

LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SKIPPED_COUNT

integer

The count of entities that are skipped in sync due to other non error flows.

SKIPPED_ERROR_COUNT

integer

The count of entities that are skipped in sync because of errors.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

UPDATED_COUNT

integer

The count of items updated.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=ENTITY_CHANGES&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{ENTITY_TYPE} changes:{CREATED_COUNT} created,{UPDATED_COUNT} updated,{DELETED_COUNT} suspended,{FAILED_COUNT} failed,{SKIPPED_ERROR_COUNT} skipped (errors),{SKIPPED_COUNT} skipped (other)

Sync Job execution

A Sync Job executed. Events of this type are returned withtype=DIRECTORY_SYNC_EXECUTION.

Sync Completed

Indicates that the sync run has completed.

Event details
Event nameSYNC_RUN_END
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_END&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Completed syncing{ENTITY_TYPE}s from{SOURCE_DIRECTORY_DISPLAY_NAME}

Sync Failed

Indicates that the sync run has failed.

Event details
Event nameSYNC_RUN_FAILED
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_FAILED&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{ENTITY_TYPE} sync from{SOURCE_DIRECTORY_DISPLAY_NAME} failed. Error:{MESSAGE}

Sync Failed - Retry scheduled

Indicates that a failed sync run is scheduled for retry.

Event details
Event nameSYNC_RUN_FAILED_RETRY
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
MESSAGE

string

The reason for the event.

REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_FAILED_RETRY&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
{ENTITY_TYPE} sync from{SOURCE_DIRECTORY_DISPLAY_NAME} failed. Sync will be retried soon. Error:{MESSAGE}

Sync Started

Indicates that a sync run has started.

Event details
Event nameSYNC_RUN_START
Parameters
DRY_RUN

boolean

True if this event is for a dry run. Possible values:

  • false
    Enum value of dry run disabled.
  • true
    Enum value of dry run enabled.
ENTITY_TYPE

string

The type of the entity. Possible values:

  • GROUP
    Represents a group entity.
  • GROUP_MEMBERSHIP
    Represents a group membership entity.
  • USER
    Represents a user entity.
LOG_LEVEL

string

The severity level of audit event. Possible values:

  • DEBUG
    Debug log.
  • ERROR
    Error log.
  • FATAL
    Fatal log.
  • INFORMATION
    Information log.
  • WARNING
    Warning log.
REMOTE_DIRECTORY

string

The name of the Sync remote directory.

SOURCE_DIRECTORY_DISPLAY_NAME

string

The display name of the source directory.

SYNC_JOB

string

The name of the Sync Job.

SYNC_JOB_CONFIG

string

The config of the sync job.

SYNC_RUN

string

The name of the Sync Run.

VERBOSE

boolean

True if this is a verbose log event. Possible values:

  • false
    Enum value for non verbose event.
  • true
    Enum value for verbose event.
Sample request
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/directory_sync?eventName=SYNC_RUN_START&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Started syncing{ENTITY_TYPE}s from{SOURCE_DIRECTORY_DISPLAY_NAME} using{SYNC_JOB_CONFIG}

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-11 UTC.