Google Cloud Platform Tables and Scopes
The Google Cloud Platform integration uses the following tables and scopes
Tables
GCPAssets
| Name | Type | Description |
|---|---|---|
| AssetType | string | The type of the asset. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| Name | string | The full name of the asset. |
GCPAuditLogConfigs
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| ETag | string | The HTTP ETag (entity tag) response header identifier. |
| ExemptedMembers | string | List of exempted members. |
| ID | integer | An identifier for the audit log configuration. |
| LogType | string | The type of log. |
| Service | string | The service associated with the log. |
GCPChromeOSDevices
| Name | Type | Description |
|---|---|---|
| ActiveDates | string | The dates the device was active in the system. |
| ActiveTimes | string | The times during which the device was active. |
| AnnotatedAssetID | string | An asset identifier assigned to the device for inventory or tracking purposes. |
| AnnotatedLocation | string | The physical location associated with the device. |
| AnnotatedUser | string | The user or entity associated with the device, typically the owner or the primary user. |
| AutoUpdateThrough | string | The date through which the device will automatically receive ChromeOS updates. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| BootMode | string | The boot mode (e.g. NORMAL, DEV_MODE) of the device. |
| ChromeOSType | string | The type or version of ChromeOS the device is running (e.g. CHROME_OS). |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| DeprovisionReason | string | The reason for deprovisioning the device. |
| DeviceID | string | A unique identifier for the Chrome device. |
| DeviceLicenseType | string | The license type for the device (e.g. STANDARD, ENTERPRISE). |
| DockMacAddress | string | The MAC address of any docking station or connected accessory for the device. |
| ETag | string | An identifier used for managing concurrency or caching in API requests. |
| EthernetMacAddress | string | The MAC address for the device’s Ethernet interface. |
| FirmwareVersion | string | The version of the firmware running on the device. |
| FirstEnrollmentTime | string | The timestamp when the device was first enrolled in the management system. |
| LastDeprovisionTime | string | The timestamp when the device was last deprovisioned. |
| LastEnrollmentTime | datetimeoffset | The timestamp when the device was last enrolled in the management system. |
| LastOSRebootTime | string | The timestamp when the device was last rebooted for an OS update. |
| LastOSUpdateCheckTime | string | The timestamp when the last OS update check was performed. |
| LastOSUpdateTime | string | The timestamp of the most recent OS update installed on the device. |
| LastSyncTime | datetimeoffset | The timestamp of the last synchronization with Google Admin. |
| MacAddress | string | The device's wireless MAC address. |
| ManufactureDate | string | The date the device was manufactured. |
| MEID | string | The Mobile Equipment Identifier (MEID) associated with the device. |
| Model | string | The model name or identifier for the device. |
| Notes | string | Additional notes or remarks associated with the device. |
| OrderNumber | string | The order number linked to the purchase or provisioning of the device. Only devices directly purchased from Google have an order number. |
| OrgUnitID | string | The unique identifier for the organizational unit. |
| OrgUnitPath | string | The organizational unit path where the device is assigned within the Google Admin console. |
| OSUpdateState | string | The current state of ChromeOS updates for the device (e.g. UP_TO_DATE, UPDATE_REQUIRED). |
| OSVersion | string | The version of ChromeOS installed on the device. |
| PlatformVersion | string | The version of the underlying platform (e.g. the kernel) of the device. |
| RecentUserEmails | string | The email addresses of users who recently used the device. |
| RecentUserTypes | string | The types of users that recently used the device (e.g. STAFF, STUDENT). |
| SerialNumber | string | The serial number of the Chrome device. |
| Status | string | The current status of the device (e.g. ACTIVE, DEPROVISIONED). |
| SupportEndDate | datetimeoffset | The final date the device will be supported. This is applicable only for those devices purchased directly from Google. |
| TargetKioskAppVersion | string | The version of a kiosk app the device is set to use (if applicable). |
| TargetOSVersion | string | The target version of ChromeOS the device is set to update to. |
| TPMFamily | string | The family of the Trusted Platform Module (TPM) used by the device. |
| TPMFirmwareVersion | string | The version of the firmware running on the TPM. |
| TPMManufacturer | string | The manufacturer of the TPM used in the device. |
| TPMModel | string | The model number of the TPM used in the device. |
| TPMSpecLevel | string | The TPM specification level the device complies with. |
| TPMVendorInfo | string | Vendor-specific information related to the TPM. |
| WillAutoRenew | boolean | Indicates if the device’s auto-renewal for support or management will occur. |
GCPEssentialContacts
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| ContactID | integer | An identifier for the contact. |
| ContactName | string | The name for the contact. Format: {resourceType}/{resource_id}/contacts/{contact_id} |
| string | The email address to send notifications to. | |
| LanguageTag | string | The preferred language for notifications, as a ISO 639-1 language code. |
| ValidationState | string | The validity of the contact. A contact is considered valid if it is the correct recipient for notifications for a particular resource. |
| ValidationTime | datetimeoffset | The last time the validationState was updated, either manually or automatically. A contact is considered stale if its validation state was updated more than 1 year ago. |
GCPLogs
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| CacheFillBytes | bigint | The number of bytes served from the cache. |
| CacheHit | boolean | Indicates whether the requested resource was found in the cache. |
| CacheLookup | boolean | Indicates whether the cache was checked for the requested resource. |
| CacheValidatedWithOriginServer | boolean | Indicates whether the cache was validated with the origin server. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| ID | integer | Unique identifier for the log entry. |
| InsertID | string | A unique identifier for the log entry. |
| JsonPayload | string | The JSON-formatted log message payload. |
| Latency | string | The time it took to process the request in milliseconds. |
| LogName | string | Name of the log that this entry belongs to. |
| OperationFirst | boolean | Indicates if this is the first log entry in a series of logs for the same operation. |
| OperationID | string | An identifier for the operation being logged. |
| OperationLast | boolean | Indicates if this is the last log entry in a series of logs for the same operation. |
| OperationProducer | string | The entity that produced the operation (e.g. service name). |
| Protocol | string | The protocol used in the request (e.g. HTTP, HTTPS). |
| ProtoPayload | string | The Protocol Buffers-based log message payload. |
| ReceiveTimestamp | datetime | The timestamp when the log entry was received by Google Cloud Logging. |
| Referer | string | The URL of the web page that referred the client to the requested resource. |
| RemoteIP | string | The IP address of the client making the request. |
| RequestMethod | string | Information about the HTTP request associated with this log entry, if applicable. |
| RequestSize | bigint | The size of the request in bytes. |
| RequestURL | string | The URL that was requested in the log entry. |
| ResourceLabels | string | Metadata labels associated with the resource generating the log. |
| ResourceType | string | The type of resource that generated the log. |
| ServerIP | string | The IP address of the server receiving the request. |
| Severity | string | The severity level of the log entry. |
| SourceFile | string | The name of the source file from which the log entry was generated. |
| SourceFunction | string | SourceFunction: The name of the function or method in the code where the log entry was generated. |
| SourceLine | bigint | The line number in the source file where the log entry was created. |
| SpanID | string | A unique identifier for a single span of work in distributed tracing. |
| SplitIndex | integer | The index of this LogEntry in the sequence of split log entries. Log entries are given index values 0, 1, ... n-1 for a sequence of n log entries. |
| SplitUID | string | A globally unique identifier for all log entries in a sequence of split log entries. All log entries with the same LogSplit.uid are assumed to be part of the same sequence of split log entries. |
| Status | integer | The HTTP status code associated with the request (e.g. 200, 404). |
| TextPayload | string | The text-based log message payload. |
| Timestamp | datetime | The timestamp of when the log entry was created. |
| TotalSplits | integer | The total number of log entries that the original LogEntry was split into. |
| Trace | string | The trace ID associated with the request for distributed tracing. |
| TraceSampled | boolean | Whether the trace was sampled for collection in distributed tracing. |
| UserAgent | string | The user agent string that identifies the client making the request (e.g. browser type, version). |
GCPMobileDeviceApplications
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| DeviceID | string | The application's package name. |
| DisplayName | string | The application's display name. |
| ID | integer | An identifier for the application. |
| PackageName | string | The application's package name. |
| Permissions | string | The list of permissions of this application. These can be either a standard Android permission or one defined by the application, and are found in an application's Android manifest. Examples of a Calendar application's permissions are READ_CALENDAR, or MANAGE_ACCOUNTS. |
| VersionCode | integer | The application's version code. |
| VersionName | string | The application's version code. |
GCPMobileDeviceseName
| Name | Type | Description |
|---|---|---|
| ADBStatus | boolean | Adb (USB debugging) enabled or disabled on device. |
| BasebandVersion | string | The device's baseband version. |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| BootloaderVersion | string | Mobile Device Bootloader version. |
| Brand | string | Mobile Device Brand. |
| BuildNumber | string | The device's operating system build number. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| DefaultLanguage | string | The default locale used on the device. |
| DeveloperOptionsStatus | boolean | Developer options enabled or disabled on device. |
| DeviceCompromisedStatus | string | The compromised device status. |
| DeviceID | string | The serial number for a Google Sync mobile device. For Android and iOS devices, this is a software generated unique identifier. |
| DevicePasswordStatus | string | Device Password Status. |
| Emails | string | The list of the owner's email addresses. |
| EncryptionStatus | string | Mobile Device Encryption Status. |
| ETag | string | ETag of the resource. |
| FirstSync | datetimeoffset | The date and time the device was initially synchronized with the policy settings in the Admin console. The value is in ISO 8601 date and time format. |
| Hardware | string | Mobile Device Hardware. |
| HardwareID | string | The IMEI/MEID unique identifier for Android hardware. It is not applicable to Google Sync devices. |
| IMEI | string | The device's IMEI number. |
| KernelVersion | string | The device's kernel version. |
| LastSync | datetimeoffset | The date and time the device was last synchronized with the policy settings in the Admin console. The value is in ISO 8601 date and time format. |
| ManagedAccountIsOnOwnerProfile | boolean | Boolean indicating if this account is on owner/primary profile or not. |
| Manufacturer | string | Mobile Device manufacturer. |
| MEID | string | The device's MEID number. |
| Model | string | The mobile device's model name, for example Nexus S. |
| Names | string | The list of the owner's user names. |
| NetworkOperator | string | Mobile Device mobile or network operator if available. |
| OS | string | The mobile device's operating system, for example IOS 4.3 or Android 2.3.5. |
| OtherAccounts | string | The list of accounts added on device. |
| Privilege | string | DMAgentPermission. |
| ReleaseVersion | string | Mobile Device release version version. |
| ResourceID | string | The unique ID the API service uses to identify the mobile device. |
| SecurityPatchLevel | bigint | Mobile Device Security patch level. |
| SerialNumber | string | The device's serial number. |
| Status | string | The device's status. |
| SupportsWorkProfile | boolean | Work profile supported on device. |
| Type | string | The type of mobile device. |
| UnknownSourcesStatus | boolean | Unknown sources enabled or disabled on device. |
| UserAgent | string | Gives information about the device such as os version. |
| WiFiMacAddress | string | The device's MAC address on Wi-Fi networks. |
GCPNotificationCategorySubscriptionsableName
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | A unique identifier for the configuration associated with the activity log entry |
| CategoryID | integer | An identifier for the notification category. |
| CategoryName | string | A notification category that an essential contact can be subscribed to. |
| ConfigID | integer | The date and time when the activity logs were batch-processed or recorded |
GCPPermissions
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| Permission | string | The name of the permission a specific role grants when bound in an IAM policy. |
GCPRoleMemberships
| Name | Type | Description |
|---|---|---|
| Role | string | The name of the role. |
| string | The user email. | |
| ID | integer | An identifier for the role membership. |
| ServiceAccountID | string | The identifer for a service account. |
| Type | string | Describes whether the role is assigned to a user or service account. |
| UserID | string | The identifer for a user. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
GCPRoles
| Name | Type | Description |
|---|---|---|
| Name | string | The name of the role. |
| Title | string | A human-readable title for the role. |
| IsCustom | boolean | Boolean corresponding to whether the role is pre-defined in Google Cloud Platform or created by a user within Google Cloud Platform. |
| Description | string | A human-readable description for the role. |
| Stage | string | The current launch stage of the role. If the ALPHA launch stage has been selected for a role, the stage field will not be included in the returned definition for the role. |
| Deleted | boolean | The current deleted state of the role. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
GCPServiceAccountKeys
| Name | Type | Description |
|---|---|---|
| KeyName | string | The resource name of the service account key in the following format projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}. |
| KeyOrigin | string | The key origin. |
| KeyType | string | The key type. |
| KeyAlgorithm | string | Specifies the algorithm (and possibly key size) for the key. |
| ValidAfterTime | datetimeoffset | The key can be used after this timestamp. |
| ValidBeforeTime | datetimeoffset | The key can be used before this timestamp. For system-managed key pairs, this timestamp is the end time for the private key signing operation. The public key could still be used for verification for a few hours after this time. |
| ServiceAccountID | string | The identifier for the associated service account. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
GCPServiceAccounts
| Name | Type | Description |
|---|---|---|
| Name | string | The resource name of the service account. |
| Description | string | A user-specified, human-readable description of the service account. |
| DisplayName | string | A user-specified, human-readable name for the service account. |
| string | The email address of the service account. | |
| OAuth2ClientID | string | The OAuth 2.0 client ID for the service account. |
| UniqueID | string | The unique, stable numeric ID for the service account. |
| Disabled | boolean | Whether the service account is disabled. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
GCPUsers
| Name | Type | Description |
|---|---|---|
| ID | string | The unique ID for the user. |
| PrimaryEmail | string | The user's primary email address. |
| FullName | string | Holds the given and family names of the user, and the read-only fullName value. |
| DisplayName | string | The user's display name. |
| IsAdmin | boolean | Indicates a user with super admininistrator privileges. |
| IsDelegatedAdmin | boolean | Indicates if the user is a delegated administrator. |
| IsSuspended | boolean | Indicates if user is suspended. |
| ChangePasswordAtNextLogin | boolean | Indicates if the user is forced to change their password at next login. This setting doesn't apply when the user signs in via a third-party identity provider. |
| Emails | string | The list of the user's email addresses. |
| LastLoginTime | datetimeoffset | The last time the user logged into the user's account. The value is in ISO 8601 date and time format. |
| CreationTime | datetimeoffset | The time the user's account was created. The value is in ISO 8601 date and time format. |
| DeletionTime | datetimeoffset | The time the user's account was deleted. The value is in ISO 8601 date and time format. |
| IsEnrolledIn2Sv | boolean | Is enrolled in 2-step verification. |
| IsEnforcedIn2Sv | boolean | Is enrolled in 2-step verification. |
| IsArchived | boolean | Indicates if user is archived. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
| BatchDate | datetime | The date and time when the activity logs were batch-processed or recorded |
Bridge Tables
GCPPermissions_GCPRoles
| Name | Type | Description |
|---|---|---|
| RoleName | string | The name of the role. |
| PermissionName | string | The name of the permission this role grants when bound in an IAM policy. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
GCPEssentialContacts_GCPNotificationCategorySubscriptions
| Name | Type | Description |
|---|---|---|
| CategoryID | integer | An identifier that corresponds to the notification category that an essential contact is subscribed to. |
| ContactID | integer | An identifier for the contact. |
| ConfigID | integer | A unique identifier for the configuration associated with the activity log entry |
Permission scopes
NoteAll Scopes need to be added in the Admin Console via Domain-wide Delegation. For more information or assistance, consult their documentation here .
Updated 6 months ago
Learn more...
Did this page help you?