Aller au contenu principal

Référence du connecteur Google Workspace

info

Bêta

Cette fonctionnalité est en version bêta. Pour l'utiliser, un administrateur du workspace doit activer Lakeflow Connect pour Google Workspace depuis la page Previews . Consultez Gérer les aperçus Databricks.

Cette page contient des informations de référence pour le connecteur Google Workspace géré, notamment les tables sources et les schémas de table de destination pris en charge.

Tables sources prises en charge​

The Google Workspace connector supports the following source tables, all under the default source schema. Each table uses lw_id as its primary key, syncs incrementally, and uses time as the cursor field.

remarque

Les tables gmail et drive contiennent l’activité d’audit Admin SDK Reports pour ces applications, et non leur contenu. Pour ingérer le contenu d’une boîte aux lettres Gmail ou des fichiers Google Drive, utilisez le connecteur Gmail ou le connecteur Google Drive dédié.

Source table

Description

gmail

Activité d’audit de Gmail.

saml

SAML audit activity.

token

Activité d'audit des jetons OAuth.

calendar

Activité d’audit de Google Calendar.

chat

Activité d'audit Google Chat.

rules

Les règles auditent l’activité.

meet

Activité d'audit Google Meet.

chrome

Activité d’audit de Chrome.

context_aware_access

Activité d’audit d’accès sensible au contexte.

access_transparency

Activité d’audit Access Transparency.

mobile

Activité d'audit des appareils mobiles.

user_accounts

Activité d'audit du compte utilisateur.

gcp

Activité d’audit de Google Cloud Platform.

data_studio

Activité d'audit de Looker Studio.

classroom

Activité d’audit Google Classroom.

keep

Activité d’audit Google Keep.

meet_hardware

Activité d’audit du matériel Google Meet.

admin

Activité d’audit de l’administrateur.

ldap

Sécurisez l’activité d’audit LDAP.

profile

Activité d’audit de profil.

access_evaluation

Activité d'audit d'Access Evaluation.

assignments

Activité d'audit des attributions.

contacts

Activité d’audit des contacts.

cloud_search

Activité d’audit Google Cloud Search.

data_migration

Activité d’audit de migration des données.

directory_sync

Activité d'audit de la synchronisation des répertoires.

graduation

Activité d’audit de titularisation.

vault

Activité d'audit Google Vault.

gemini_in_workspace_apps

Activité d'audit des applications Gemini dans Google Workspace.

tasks

Google Tasks audit activity.

takeout

Activité d'audit de Google Takeout.

drive

Activité d'audit de Google Drive.

login

Activité d'audit de connexion.

groups

Activité d’audit de Google Groups.

groups_enterprise

Activité d'audit Google Groups Enterprise.

Source table

Description

gmail

Activité d’audit de Gmail.

saml

SAML audit activity.

token

Activité d'audit des jetons OAuth.

calendar

Activité d’audit de Google Calendar.

chat

Activité d'audit Google Chat.

rules

Les règles auditent l’activité.

meet

Activité d'audit Google Meet.

chrome

Activité d’audit de Chrome.

context_aware_access

Activité d’audit d’accès sensible au contexte.

access_transparency

Activité d’audit Access Transparency.

mobile

Activité d'audit des appareils mobiles.

user_accounts

Activité d'audit du compte utilisateur.

gcp

Activité d’audit de Google Cloud Platform.

data_studio

Activité d'audit de Looker Studio.

classroom

Activité d’audit Google Classroom.

keep

Activité d’audit Google Keep.

meet_hardware

Activité d’audit du matériel Google Meet.

admin

Activité d’audit de l’administrateur.

ldap

Sécurisez l’activité d’audit LDAP.

profile

Activité d’audit de profil.

access_evaluation

Activité d'audit d'Access Evaluation.

assignments

Activité d'audit des attributions.

contacts

Activité d’audit des contacts.

cloud_search

Activité d’audit Google Cloud Search.

data_migration

Activité d’audit de migration des données.

directory_sync

Activité d'audit de la synchronisation des répertoires.

graduation

Activité d’audit de titularisation.

vault

Activité d'audit Google Vault.

gemini_in_workspace_apps

Activité d'audit des applications Gemini dans Google Workspace.

tasks

Google Tasks audit activity.

takeout

Activité d'audit de Google Takeout.

drive

Activité d'audit de Google Drive.

login

Activité d'audit de connexion.

groups

Activité d’audit de Google Groups.

groups_enterprise

Activité d'audit Google Groups Enterprise.

All destination tables are liquid clustered on the time column.

Schémas de tables de destination​

Les sections suivantes décrivent le schéma de chaque table de destination vers laquelle le connecteur Google Workspace écrit.

Chaque ligne correspond à un enregistrement d'activité de l'API Reports. Une activité peut contenir plusieurs événements que le connecteur stocke dans le tableau events au lieu de les diviser en lignes distinctes. Pour obtenir une ligne par événement, utilisez explode(events).

gmail​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

saml​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

token​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

calendar​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

chat​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

rules​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

meet​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

chrome​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

context_aware_access​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

access_transparency​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

mobile​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

user_accounts​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

gcp​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

data_studio​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

classroom​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

keep​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

meet_hardware​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

admin​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

ldap​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

profile​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

access_evaluation​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

assignments​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

contacts​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

data_migration​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

directory_sync​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

graduation​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

vault​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

gemini_in_workspace_apps​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

tasks​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

takeout​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

drive​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

login​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

groups​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

groups_enterprise​

  • Clé principale : lw_id
  • Champ de curseur : time

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

Champ

Type de données

lw_id

STRING

time

TIMESTAMP

kind

STRING

etag

STRING

id

STRUCT<time: STRING, uniqueQualifier: STRING, applicationName: STRING, customerId: STRING>

actor

STRUCT<profileId: STRING, email: STRING, callerType: STRING, key: STRING, applicationInfo: STRUCT<oauthClientId: STRING, applicationName: STRING, impersonation: BOOLEAN>>

ownerDomain

STRING

ipAddress

STRING

isAgenticAction

BOOLEAN

networkInfo

STRUCT<ipAsn: ARRAY<INT>, regionCode: STRING, subdivisionCode: STRING>

events

ARRAY<STRUCT<type: STRING, name: STRING, status: STRING, resourceIds: ARRAY<STRING>, parameters: ARRAY<STRUCT<name: STRING, value: STRING, intValue: STRING, boolValue: BOOLEAN, multiValue: ARRAY<STRING>, multiIntValue: ARRAY<STRING>, multiBoolValue: ARRAY<BOOLEAN>, messageValue: VARIANT, multiMessageValue: VARIANT>>>>

userDeviceInfo

VARIANT

resourceDetails

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2, car elle contient des colonnes VARIANT.

Permissions OAuth requises​

Le client OAuth doit accorder le champ d’application suivant. Consultez la référence de l'API Admin SDK Reports.

Autorisation

Obligatoire pour

https://www.googleapis.com/auth/admin.reports.audit.readonly

Toutes les tables

Autorisation

Obligatoire pour

https://www.googleapis.com/auth/admin.reports.audit.readonly

Toutes les tables

Autorisations de compte Google Workspace requises​

Le compte Google Workspace utilisé pour l'ingestion doit disposer des autorisations suivantes.

Autorisation

Obligatoire pour

Privilège de rapports

Toutes les tables

Privilège Google Vault Access All Logs

vault Table

Autorisation

Obligatoire pour

Privilège de rapports

Toutes les tables

Privilège Google Vault Access All Logs

vault Table