Consolidated Google Groups audit logs now available in G Suite and GCP
Combined Google Groups audit logs are currently accessible in the G Suite AdminSDK Reports API and GCP Cloud Audit Logs.
We're presenting another combined log named groups_enterprise, which incorporates changes to groups and group memberships over all products and APIs. These were recently split over the gatherings and administrator audit logs.Changes to groups have truly been signed in either the groups or administrator audit logs. Changes made in the Google Groups item are signed in the group log while changes made through administrator tools like the Admin console, AdminSDK, and GCDS are signed in the administrator log. As a feature of our endeavors to streamline organization and increase transparency, we're presenting another combined log named groups_enterprise, which incorporates changes to groups and group membership over all products and APIs. This new log is presently accessible through the AdminSDK Reports API and will be accessible in the Admin reassure later on.
Changes in GCP Cloud Audit Logging
We're adding Google Groups data to Cloud Audit Logs (CAL) in Stackdriver. See our Cloud Blog post for more details on how this could help GCP clients. Note that this won't change the visibility of these logs in the G Suite Admin panel - it just adds them to Cloud Audit Logs (CAL) in Stackdriver also.
Google Groups are the known method to concede access to GCP resources when utilizing IAM policies. GCP clients have revealed to us that having group audit logs accessible in Google Cloud Audit Logs would help streamline security and access observing. WIth that in mind, we're adding Google Groups data to Cloud Audit Logs (CAL) in Stackdriver.
These changes will help improve the security and usability of Groups as an IAM tool by streamlining administration, transparency, and access monitoring.
How to get started
- Changes in the G Suite AdminSDK Reports API: Get started with the AdminSDK Reports API.
- Changes in GCP Cloud Audit Logging: This is an opt-in feature that can be enabled at G Suite Admin console > Company profile > Legal & Compliance > Sharing options.
Post a Comment