In an effort to make the reports for Admin log events more understandable, detailed, and precise, there are updates to some event names and types as well as reporting frequency and event conditions. Between now and August 2026, legacy and updated event names and types will be available. After August 2026, only the new event names and types will be available.
Saved investigations will continue to work, but they will be based on legacy events and will stop working after August 2026. After August 2026, custom charts in the security investigation tool will be based on old data.
আপনার যা করা দরকার
- Review the changes listed on this page. If you're using or relying on any of the events listed on this page, you might need to make changes to your existing queries, alerts, reports, and rules.
- Between now and August 2026, rules that are affected will be automatically migrated and you might need to make changes to your rules. For details on updating any migrated rules, go to View and edit your activity rules .
Important : If you don't update rules that have changes to more than one event condition, you'll get increased alerts. Rules that have 2 conditions that are true will trigger an alert even if only one condition is true. For example, if a rule triggers an alert for a change to a specific Gmail setting, you will get an alert for all Gmail setting changes.
অ্যাডমিন লগ ইভেন্টগুলিতে পরিবর্তন
অ্যাকাউন্ট ও নিরাপত্তা
| অ্যাডমিন কনসোল সেটিং | Security & Audit and investigation tool | Reports API & Google SecOps | BigQuery Export |
|---|---|---|---|
| অ্যাকাউন্ট সেটিংস > পছন্দসমূহ > নতুন বৈশিষ্ট্য | Toggle New App Features event name is renamed to Toggle New App Features Preference . Value for New Value changes from True or False to Rapid release or Scheduled release . Description value changes from New app features for your organization changed to value to The account setting of "New Features" was changed from value1 to value2 . The Old Value attribute is introduced. Its values are Rapid release and Scheduled release . The New Features value is added to the Setting Category attribute. | | |
| Security > Access and data control > Google Cloud session control > Reauthentication policy | New Value and Old Value attributes for Session Control Settings Change records values for reauthentication frequency, idle session timeout, and reauthentication method in separate log events. Previously, all 3 settings were recorded in one log event. If any of the settings are unchanged, no log event is recorded for that setting. | If any of the settings are unchanged, no log event is recorded for that setting. | If any of the settings are unchanged, no log event is recorded for that setting. |
App access control
Reports API & SecOps events[].name& BigQuery Export event_name | নিরাপত্তা ও নিরীক্ষা এবং তদন্ত সরঞ্জাম ইভেন্টের নাম | নতুন events[].name এবং event_name | New Security & Audit and investigation tool event name |
|---|---|---|---|
| DISALLOW_SERVICE_FOR_ OAUTH2_ACCESS | এপিআই অ্যাক্সেস ব্লক করা হয়েছে | এপিআই অ্যাক্সেস পরিবর্তন করুন | এপিআই অ্যাক্সেস পরিবর্তিত হয়েছে |
| ALLOW_SERVICE_FOR_ OAUTH2_ACCESS | এপিআই অ্যাক্সেস অনুমোদিত | এপিআই অ্যাক্সেস পরিবর্তন করুন | API Access Changed |
| ADD_TO_BLOCKED_OAUTH2 অ্যাপস | অ্যাপটি ব্লক তালিকায় যুক্ত করা হয়েছে | CHANGE_APP_ACCESS | App Configuration Changed |
| ADD_TO_LIMITED_OAUTH2 _APPS | অ্যাপটি সীমিত তালিকায় যুক্ত করা হয়েছে | CHANGE_APP_ACCESS | App Configuration Changed |
| ADD_TO_TRUSTED_OAUTH2 _APPS | অ্যাপটি বিশ্বস্ত অনুমোদিত তালিকায় যুক্ত করা হয়েছে | CHANGE_APP_ACCESS | App Configuration Changed |
| ADD_TO_TRUSTED_BY_ OAUTH_SCOPE_OAUTH2_ অ্যাপস | App added to Trusted by OAuth Scope list | CHANGE_APP_ACCESS | App Configuration Changed |
| ADD_TO_CAA_EXEMPT _OAUTH2_APPS | App allowlisted for exemption from API access blocks | CHANGE_APP_ACCESS | App Configuration Changed |
| REMOVE_FROM_TRUSTED _OAUTH2_APPS | অ্যাপটি বিশ্বস্ত অনুমতি তালিকা থেকে সরানো হয়েছে | CHANGE_APP_ACCESS | App Configuration Changed |
| REMOVE_FROM_CAA_ EXEMPT_OAUTH2_APPS | App no longer allowlisted for exemption from API access blocks | CHANGE_APP_ACCESS | App Configuration Changed |
| REMOVE_FROM_BLOCKED _OAUTH2_APPS | অ্যাপটি ব্লক তালিকা থেকে সরানো হয়েছে | CHANGE_APP_ACCESS | App Configuration Changed |
| REMOVE_FROM_LIMITED _OAUTH2_APPS | App removed from Limited list | CHANGE_APP_ACCESS | App Configuration Changed |
| REMOVE_FROM_TRUSTED _BY_OAUTH_SCOPE_ OAUTH2_APPS | App removed from Trusted by OAuth Scope list | CHANGE_APP_ACCESS | অ্যাপ কনফিগারেশন পরিবর্তন করা হয়েছে |
| BLOCK_ALL_THIRD_PARTY এপিআই অ্যাক্সেস | সমস্ত তৃতীয় পক্ষের এপিআই অ্যাক্সেস ব্লক করা হয়েছে | CHANGE_ UNCONFIGURED_APPS প্রবেশ | Unconfigured Apps Access Changed |
| UNBLOCK_ALL_THIRD_ PART_API_ACCESS | সমস্ত তৃতীয় পক্ষের এপিআই অ্যাক্সেস আনব্লক করা হয়েছে | পরিবর্তন_ অকনফিগার করা অ্যাপস _ACCESS | অকনফিগার করা অ্যাপের অ্যাক্সেস পরিবর্তন করা হয়েছে |
| শুধুমাত্র তৃতীয় সাইন-ইন PART_API_ACCESS | শুধুমাত্র গুগল সাইন-ইন-এর তৃতীয় পক্ষের এপিআই অ্যাক্সেসের অনুমতি দিন | পরিবর্তন_ অকনফিগার করা অ্যাপস _ACCESS | অকনফিগার করা অ্যাপের অ্যাক্সেস পরিবর্তন করা হয়েছে |
| UNDERAGE_BLOCK_ALL _তৃতীয়_পক্ষের_এপিআই_ প্রবেশাধিকার | All third party API access blocked | অপ্রাপ্তবয়স্ক পরিবর্তন _UNCONFIGURED_APPS প্রবেশ | ১৮ বছরের কম বয়সীদের জন্য কনফিগার না করা অ্যাপের অ্যাক্সেস পরিবর্তন করা হয়েছে |
| অপ্রাপ্তবয়স্কদের সাইন ইন একমাত্র তৃতীয় পক্ষ API_ACCESS | Allow Google Sign-in only third party API access | অপ্রাপ্তবয়স্ক পরিবর্তন _আনকনফিগারড_অ্যাপস প্রবেশ | Under 18 Unconfigured Apps Access Changed |
Google Drive settings with inherited values
Previously, Google Drive settings that were overridden from an inherited value or reverted to an inherited value used the same log event identifiers, with INHERIT_FROM_PARENT in the old value and new value attributes:
- Security & Audit and investigation tool: The Change Drive Setting event name showed INHERIT_FROM_PARENT in Old value and New value
- Reports API & SecOps:
events[].type=DOCS_SETTINGS,events[].name=CHANGE_DOCS_SETTINGshowed INHERIT_FROM_PARENT inadmin.old_valueandadmin.new_value - BigQuery Export:
events_type=DOCS_SETTINGS,event_name=CHANGE_DOCS_SETTINGshowed INHERIT_FROM_PARENT inadmin.old_valueandadmin.new_value
| সরঞ্জাম | উত্তরাধিকারসূত্রে প্রাপ্ত মানকে অগ্রাহ্য করুন | বিদ্যমান মান পরিবর্তন করুন | উত্তরাধিকারসূত্রে প্রাপ্ত মানে ফিরে যান |
| নিরাপত্তা ও নিরীক্ষা এবং তদন্ত সরঞ্জাম | Event name: Create অ্যাপ্লিকেশন সেটিং | ইভেন্টের নাম: পরিবর্তন Application Setting | ইভেন্টের নাম: মুছে ফেলা Application Setting |
| রিপোর্ট এপিআই এবং সেকঅপ্স | ইভেন্টের ধরণ: অ্যাপ্লিকেশন সেটিংস ইভেন্টের নাম: অ্যাপ্লিকেশন সেটিং তৈরি করুন | Event type: APPLICATION_SETTINGS Event name: CHANGE_APPLICATION_ SETTING | ইভেন্টের ধরণ: অ্যাপ্লিকেশন সেটিংস Event name: DELETE_APPLICATION_ SETTING |
| বিগকোয়েরি এক্সপোর্ট | ইভেন্টের ধরণ: অ্যাপ্লিকেশন সেটিংস ইভেন্টের নাম: অ্যাপ্লিকেশন সেটিং তৈরি করুন | ইভেন্টের ধরণ: অ্যাপ্লিকেশন সেটিংস Event name: CHANGE_APPLICATION_ SETTING | ইভেন্টের ধরণ: অ্যাপ্লিকেশন সেটিংস ইভেন্টের নাম: অ্যাপ্লিকেশন সেটিং মুছে ফেলা |
ড্রাইভ সেটিংস
The following table lists updated log event information for the following Admin log event attributes and values:
- Security & Audit and investigation tool : Setting name, Old value, New value
- BigQuery Export :
admin.setting_name,admin.old_value,admin.new_value - Reports API & SecOps :
events[].parameters[].name=setting_name,events[].parameters[].name=OLD_VALUEorNEW_VALUE
পুরানো ঘটনা | আপডেট করা ইভেন্ট | ||
সেটিং নাম | পুরানো বা নতুন মূল্য | সেটিং নাম | পুরানো বা নতুন মূল্য |
ডোমেইনের বাইরে শেয়ার করা | শেয়ার করার অনুমতি নেই কিন্তু ফাইল গ্রহণ করা যাবে | এক্সটার্নালশেয়ারিং এক্সটার্নাল_শেয়ারিং_মোড | অনুমোদন করা হয়নি |
ExternalSharing allow_receiving_external _files | সত্য | ||
SHARING_NOT_ ALLOWED | ExternalSharing external_sharing_mode | অনুমোদন করা হয়নি | |
ExternalSharing allow_receiving_external _files | মিথ্যা | ||
TRUSTED_DOMAINS_ ALLOWED_WITH_ WARNING_MAY_ RECEIVE _FILES_ FROM_ ANYONE | এক্সটার্নালশেয়ারিং এক্সটার্নাল_শেয়ারিং_মোড | অনুমোদিত তালিকাভুক্ত ডোমেইন | |
ExternalSharing warn_for_sharing_ outside_allowlisted_ domains | সত্য | ||
ExternalSharing allow_receiving_files_ outside_allowlisted_ domains changed | সত্য | ||
বিশ্বস্ত ডোমেইনগুলো সতর্কীকরণ সহ অনুমোদিত | এক্সটার্নালশেয়ারিং এক্সটার্নাল_শেয়ারিং_মোড | অনুমোদিত তালিকাভুক্ত ডোমেইন | |
ExternalSharing warn_for _sharing_outside_ allowlisted_domains | সত্য | ||
ExternalSharing allow_ receiving_files_outside_ allowlisted_domains changed | মিথ্যা | ||
TRUSTED_DOMAINS_ ALLOWED_AND_MAY_ RECEIVE_FILES_FROM _ANYONE | এক্সটার্নালশেয়ারিং এক্সটার্নাল_শেয়ারিং_মোড | ALLOWLISTED_ DOMAINS | |
ExternalSharing warn_ for_sharing_outside_ allowlisted_domains | মিথ্যা | ||
ExternalSharing allow_ receiving_files_outside_ allowlisted_domains changed | সত্য | ||
TRUSTED_DOMAINS_ ALLOWED | ExternalSharing external_sharing_mode | অনুমোদিত তালিকাভুক্ত ডোমেইন | |
ExternalSharing warn_for_sharing _outside_allowlisted_ domains | মিথ্যা | ||
ExternalSharing allow_receiving_files _outside_allowlisted_ domains changed | মিথ্যা | ||
SHARING_ALLOWED_ WITH_WARNING | ExternalSharing external_sharing_mode | অনুমোদিত | |
ExternalSharing warn_for_external_ sharing | সত্য | ||
SHARING_ALLOWED | এক্সটার্নালশেয়ারিং এক্সটার্নাল_শেয়ারিং_মোড | অনুমোদিত | |
ExternalSharing warn_for_external_ sharing | মিথ্যা | ||
SHARING_INVITES_TO_ NON_GOOGLE_ ACCOUNTS | NOT_ALLOWED | ExternalSharing allow_non_google_ invites | মিথ্যা |
ANONYMOUS_ PREVIEW | ExternalSharing allow_non_google_ invites | সত্য | |
PUBLISHING_TO_WEB | NOT_ALLOWED | ExternalSharing allow_publishing_files | মিথ্যা |
অনুমোদিত | সত্য | ||
SHARING_ACCESS_ CHECKER_OPTIONS | NAMED_PARTIES_ ONLY | ExternalSharing access_checker_ suggestions | RECIPIENTS_ONLY |
DOMAIN_OR_NAMED _PARTIES | RECIPIENTS_OR_ AUDIENCE | ||
সকল | RECIPIENTS_OR_ AUDIENCE_OR_ PUBLIC | ||
SHARING_TEAM_DRIVE _CROSS_DOMAIN_ OPTIONS | CROSS_DOMAIN_ FROM_INTERNAL_OR _EXTERNAL | ExternalSharing allowed_parties _for_distributing_ content | ALL_ELIGIBLE_ USERS |
CROSS_DOMAIN_ FROM_INTERNAL_ ONLY | ELIGIBLE_INTERNAL _USERS | ||
CROSS_DOMAIN_ MOVES_BLOCKED | কেউ না | ||
DEFAULT_LINK_ SHARING_FOR_NEW _DOCS | ব্যক্তিগত | GeneralAccessDefault default_file_access | PRIVATE_TO_OWNER |
PEOPLE_WITH_LINK | PRIMARY_ AUDIENCE_WITH_ LINK | ||
জনসাধারণের | PRIMARY_ AUDIENCE_WITH_ LINK_OR _SEARCH | ||
DOCS_OFFLINE_ ENABLED | মিথ্যা | DocsOffline enable_docs_offline | মিথ্যা |
সত্য | সত্য | ||
ENABLE_DRIVE_APPS | মিথ্যা | DriveSdk enable_drive_sdk_api _access | মিথ্যা |
সত্য | সত্য | ||
Gmail settings
For all affected settings in Reports API & SecOps:
-
events[].typeEMAIL_SETTINGS is renamed to APPLICATION_SETTINGS -
events[].parameters[].name=USER_DEFINED_SETTING_NAME is moved toevents[].parameters[].name=SETTING_METADATA.USER_DEFINED_NAME
For all affected settings in BigQuery Export:
-
event_typeEMAIL_SETTINGS is renamed to APPLICATION_SETTINGS - admin.user_defined_setting_name is moved to admin.setting_metadata.user_defined_name
Gmail setting | Security & Audit and investigation tool | Reports API & SecOps | BigQuery Export |
|---|---|---|---|
Mail delegation | Change Email Setting is renamed to Change Application Setting ENABLE_SENDER_ ATTRIBUTION is renamed to MailDelegation sender_attribution_ desired | | |
Image URL proxy allowlist | Change Email Setting is renamed to Change Application Setting NUMBER_OF_EMAIL _IMAGE_URL_ WHITELIST _PATTERNS is renamed to MailImage Proxy external _image_bypass_ pattern | | |
Compliance > Restrict delivery | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting RESTRICT_DELIVERY is renamed to RestrictDelivery rules walled_garden_info or RuleState rule_state enabled | | |
Compliance > Comprehensive mail storage | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting COMPREHENSIVE_ MAIL _STORAGE is renamed to RuleState rule_state enabled | | |
Spam, phishing, and malware > Inbound gateway | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting INBOUND_GATEWAY is renamed to RuleState rule_state enabled or InboundGateway {field} | | |
Routing > Email forwarding using recipient address map | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting ALIAS_TABLE is renamed to AliasTable rules alias_table_info or RuleState rule_state enabled | | |
Compliance > Content compliance | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting CONTENT_ COMPLIANCE is renamed to ContentCompliance rules content _compliance _info or RuleState rule_state enabled | | admin.setting_nameCONTENT_ COMPLIANCE is renamed to ContentCompliance rules content_compliance _info or RuleState rule_state enabled |
Default Routing > Default Routing | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting DOMAIN_DEFAULT is renamed to DomainDefault rules domain_default_info or RuleState rule_state enabled | | |
Routing > Routing | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting UNIFIED_MAIL_ ROUTING is renamed to Routing rules routing_info or RuleState rule_state enabled | | |
Routing > Inbound email journal acceptance in Vault | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting INBOUND_EMAIL_ JOURNAL_ ACCEPTANCE is renamed to RuleState rule_state enabled or ExchangeJournal Ingestion {field} | | |
ব্লক করা প্রেরকদের | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting BLOCKED_SENDERS is renamed to BlockedSenders rules blocked_senders_info or RuleState rule_state enabled | | |
Routing > Third-party email archiving | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting OUTBOUND_EMAIL_ JOURNAL_ GENERATION is renamed to ExchangeJournal Generation rules exchange_journal_ generation _info or RuleState rule_state enabled | | |
Routing > Non-Gmail mailbox | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting QUARANTINE_ SUMMARY is renamed to NonGmail Mailbox rules quarantine _summary _info or RuleState rule_state enabled | | |
Routing > SMTP relay service | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting OUTBOUND_RELAY is renamed to RuleState rule_state enabled | | |
Spam, phishing, and malware > Security sandbox rules | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting SECURITY_SANDBOX_ RULE is renamed to DeepScanning rules deep_scanning_info or RuleState rule_state enabled | | |
Compliance > Secure transport (TLS) compliance | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting TLS_COMPLIANCE is renamed to TlsCompliance rules tls_compliance_info or RuleState rule_state enabled | | |
Spam, phishing, and malware > Spam | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting SPAM_CONTROL is renamed to SpamOverride rules spam_override_info or RuleState rule_state enabled | | |
Compliance > Objectable content | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting OBJECTIONABLE_ CONTENT is renamed to Objectionable Content rules objectionable_content _info or RuleState rule_state enabled | | |
Routing > Alternate secure route | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting ALTERNATE_SECURE _ROUTE is renamed to AlternateSecureRoute alternate_route_id or RuleState rule_state enabled | | |
Compliance > Attachment compliance | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting ATTACHMENT_ COMPLIANCE is renamed to Attachment Compliance rules attachment_ compliance_ info or RuleState rule_state enabled | | |
Compliance > Restrict delivery for S/MIME | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting SMIME_RESTRICT_ DELIVERY is renamed to SmimeRestrict Delivery rules smime_restrict_ delivery_ info or RuleState rule_state enabled | | |
Hosts > Hosts | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting EMAIL_ROUTE is renamed to Mail DeliveryRoutes available_route receiving_route_info | | |
Compliance > Append footer | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting COMPLIANCE_FOOTER is renamed to AppendFooter rules append_footer_info or RuleState rule_state enabled | | |
Routing > Outbound Gateway | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting EMAIL_ROUTE is renamed to MailDeliveryRoutes available_route receiving_route_info | | |
User Settings > Email read receipts | Change Email Setting is renamed to Change Application Setting EMAIL_READ_ RECEIPTS_ALLOWED_ DESTINATIONS is renamed to ReadReceipts {field name} | | |
User Settings > Name Format | Change Email Setting is renamed to Change Application Setting DEFAULT_NAME_ FORMAT is renamed to NameFormat default_display_name _format | | |
End User Access > Allow per user outbound gateways | Change Email Setting is renamed to Change Application Setting ALLOW_NAME_ FORMAT_ CUSTOMIZATION is renamed to PerUserOutbound Gateway enable_smtp_relay | | |
End User Access > Pop and Imap access | Change Email Setting is renamed to Change Application Setting IMAP_ACCESS is renamed to ImapSettings {field name} ENABLE_POP_ACCESS is renamed to PopSettings pop_disabled | | |
End User Access > Automatic Forwarding | Change Email Setting is renamed to Change Application Setting ENABLE_EMAIL_ AUTOFORWARDING is renamed to AutoForwarding auto_forwarding_ disabled | | |
End User Access > Google Workspace Sync | Change Email Setting is renamed to Change Application Setting ENABLE_OUTLOOK_ SYNC is renamed to MailSyncSettings enable_outlook_sync | | |
Setup > User email uploads | Change Email Setting is renamed to Change Application Setting ENABLE_EMAIL_USER _IMPORT is renamed to MailAndContacts Import Settingscan _import_ mail_and_contacts | | |
User settings > Themes | Change Email Setting is renamed to Change Application Setting ENABLE_GMAIL_ SKINS is renamed to MailFrontendSettings skin_desired | | |
Compliance > Optical Character Recognition (OCR) | Change Email Setting is renamed to Change Application Setting ENABLE_OPTICAL_ CHARACTER_ RECOGNITION is renamed to OcrSettings ocr_enabled | | |
Manage Quarantines | Change Email Setting is renamed to Change Application Setting EMAIL_QUARANTINE is renamed to AdminQuarantine admin_quarantine_ info {field} | | |
Manage Google Workspace Marketplace allowlist access | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting ENABLE_G_SUITE_ MARKETPLACE is renamed to Apps Access Setting web_display_option | | |
Google Workspace Marketplace Apps | Change/Delete/Create Gmail Setting is renamed to Change/Delete/Create Application Setting The ENABLE_G_SUITE_ MARKETPLACE setting name is renamed to Allowlist app_access | | |
User Settings > S/MIME | Change Email Setting is renamed to Change Application Setting EMAIL_SMIME is renamed to SMime status | | |
New Gmail parameters
প্যারামিটার নাম | Nested parameter | Reports API & SecOps | BigQuery Export |
|---|---|---|---|
| SETTING_METADATA | USER_DEFINED_NAME | | admin.setting_metadata .user_defined_name |
বর্ণনা | | admin.setting_metadata .description | |
rule_key | | admin.setting_metadata .rule_key | |
rule_type | | admin.setting_metadata .rule_type |
New Gmail events
Changes to the following Gmail settings ( Apps > Google Workspace > Settings for Gmail ) in the Admin console will log an event in Admin log events:
- User Settings > S/MIME > Allow SHA-1 globally (not recommended)
- Spam, phishing, and malware > Inbound gateway > Gateway IPs > Add/Delete IP addresses / ranges
- Authenticate email > DKIM authentication > Start/Stop Authentication
- Compliance > Email and chat auto-deletion > Automatically delete email and chat messages older than the specified number of days > Modify the labels to exclude
Changes to the settings will be logged as follows:
- Security & Audit and investigation tool event: Change Application Setting
- Reports API & SecOps:
events[].name=CHANGE_APPLICATION_SETTING,events[].type=APPLICATION_SETTINGS - BigQuery Export:
event_name=CHANGE_APPLICATION_SETTING,event_type=APPLICATION_SETTINGS
Updating automatically migrated rules
Instructions will be added here soon describing how you can find your rules that have been automatically migrated. For details on managing automatically migrated rules, go to Create and manage activity rules .
Changes to event names in the security investigation tool
For the affected event names in the following table:
- Breaking columns are being removed from rule conditions. (A breaking column is a security investigation tool column that has a changed value.)
- Rule creation for these events is being restricted.
- Certain event names will have new conditions, as shown in Updates to event names later on this page.
| Security investigation tool event name | Breaking column name |
|---|---|
| Change email setting | সেটিং নাম |
| সম্পদের নাম | |
| Change Gmail setting | সেটিং নাম |
| সম্পদের নাম | |
| Create Gmail setting | সেটিং নাম |
| সম্পদের নাম | |
| Delete Gmail setting | সেটিং নাম |
| সম্পদের নাম | |
| Change Drive setting | সেটিং নাম |
| নতুন মূল্য | |
| পুরানো মূল্য | |
| Session control settings change | নতুন মূল্য |
| পুরানো মূল্য | |
| No breaking columns |
| Toggle new app features | নতুন মূল্য |
Event name change example in the security investigation tool
For all rule conditions joined by AND, we're removing the part of the condition that contains the changing event. The final condition will be a single condition.
If Event name IS Change email setting AND Setting name IS abc , the automatically migrated rule will become Event name IS Change email setting .
Updates to event conditions
We are also updating the following event conditions.
| Event display name | Current condition | New condition |
|---|---|---|
| Create email setting | Event IS Change email setting | Event IS Change application setting AND Setting Application IS Gmail |
| Create Gmail setting | Event IS Change Gmail setting | Event IS Change application setting AND Setting Application IS Gmail |
| Create Gmail setting | Event IS Create Gmail setting | Event IS Create application setting AND Setting Application IS Gmail |
| Create Gmail setting | Event IS Delete Gmail setting | Event IS Delete application setting AND Setting Application IS Gmail |
| Create Drive setting | Event IS Change Drive setting | ( Event IS Change application setting OR Event IS Create application setting OR Event IS Delete application setting) AND Setting Application IS Drive and Docs. |
| Toggle New App Features | Event IS Toggle New App Features | Event IS Toggle New App Features Preference |
| API Access Blocked | Event IS API Access Blocked | Event IS API Access Changed AND Old Value IS Unrestricted |
| API Access Allowed | Event IS API Access Allowed | Event IS API Access Changed AND New Value IS Unrestricted |
| App Added to Blocked List | Event IS App Added to Blocked List | Event IS App Configuration Changed AND New Value IS Blocked |
| App Added to Limited List | Event IS App Added to Limited List | Event IS App Configuration Changed AND New Value IS Limited |
| App Added to Trusted Allowlist | Event IS App Added to Trusted Allowlist | Event IS App Configuration Changed AND New Value IS Trusted |
| App added to Trusted by OAuth Scope list | Event IS App added to Trusted by OAuth Scope list | Event IS App Configuration Changed AND New Value IS Specific Google data |
| App Removed from Blocked List | Event IS App Removed from Blocked List | Event IS App Configuration Changed AND Old Value IS Blocked AND New Value IS Unconfigured |
| App removed from Limited list | Event IS App removed from Limited list | Event IS App Configuration Changed AND Old Value IS Limited AND New Value IS Unconfigured |
| App Removed from Trusted Allowlist | Event IS App Removed from Trusted Allowlist | Event IS App Configuration Changed AND Old Value IS Trusted AND New Value IS Unconfigured |
| App removed from Trusted by OAuth Scope list | Event IS App removed from Trusted by OAuth Scope list | Event IS App Configuration Changed AND Old Value IS Specific Google data AND New Value IS Unconfigured |
| App allowlisted for exemption from API access blocks | Event IS App allowlisted for exemption from API access blocks | Event IS App Configuration Changed AND New Value IS Trusted and Allowlisted for Context-Aware Access Exemption |
| App no longer allowlisted for exemption from API access blocks | Event IS App no longer allowlisted for exemption from API access blocks | Event IS App Configuration Changed AND Old Value IS Trusted and Allowlisted for Context-Aware Access Exemption AND New Value IS Unconfigured |
| All third party API access blocked | Event IS All third party API access blocked | Event IS Unconfigured Apps Access Changed AND New Value IS Don't Allow |
| All third party API access unblocked | Event IS All third party API access unblocked | Event IS Unconfigured Apps Access Changed AND New Value IS Allow |
| Allow Google Sign-in only third party API access | Event IS Allow Google Sign-in only third party API access | Event IS Unconfigured Apps Access Changed AND New Value IS Allow Google sign-in only |
| All third party API access blocked | Event IS All third party API access blocked | Event IS Under 18 Unconfigured Apps Access Changed AND New Value IS Don't Allow |
| Allow Google Sign-in only third party API access | Event IS Allow Google Sign-in only third party API access | Event IS Under 18 Unconfigured Apps Access Changed AND New Value IS Allow Google sign-in only |