December 20, 2025
Google Workspace audit log API enhancements now available
To support more granular incident investigations, we’re expanding the Workspace audit logging datasets available on the Admin SDK (Reports API) to include these additional datasets:
- Admin data action logs
- Contacts logs
- Assignments logs
- Directory Sync logs
- Profile logs
- Graduation logs
- LDAP logs
- Meet hardware logs
- Takeout logs
- Tasks logs
- Cloud search logs
- Access evaluation logs
- Data migration logs
Additionally, the Reports API now supports in-depth filtering on resource details. You can now filter by labels and resources from your audit logs, allowing for fetching more granular logs. To learn more about this in detail, you can check out the activities list API documentation.
Granular audit logs are critical to helping organizations investigate cybersecurity incidents and understand their data usage. The changes announced today expand the depth of analysis that can be performed.
Rollout pace
- Rapid Release and Scheduled Release domains: Available now
Getting started
- Admins: As the changes become available, you can get started with your analysis in either the Audit and Investigation tool or the Admin SDK (Reports API).
- End users: There is no end user setting for this feature.
Availability
- Available for Google Workspace with Audit Log eligible licenses. Please visit the Help Center to learn more about the Audit Log availability for your license types.