Namespace Google.Apis.AlertCenter.v1beta1.Data

Classes

AbuseDetected

A generic alert for abusive user activity occurring with a customer.

AccessApproval

Alert that is triggered when Google support requests to access customer data.

AccountSuspensionDetails

Details about why an account is receiving an account suspension warning.

AccountSuspensionWarning

A warning that the customer's account is about to be suspended.

ActivityRule

Alerts from Google Workspace Security Center rules service configured by an admin.

ApnsCertificateExpirationInfo

The explanation message associated with "APNS certificate is expiring soon" and "APNS certificate has expired" alerts.

AppMakerSqlSetupNotification

Alerts from App Maker to notify admins to set up default SQL instance.

AppSettingsChanged

Alerts from AppSettingsChanged bucket Rules configured by Admin which contain the below rules. Calendar settings changed Drive settings changed Email settings changed Mobile settings changed

AppsOutage

An outage incident reported for a Google Workspace service.

Attachment

Attachment with application-specific information about an alert.

BadWhitelist

Alert for setting the domain or IP that malicious email comes from as whitelisted domain or IP in Gmail advanced settings.

BatchDeleteAlertsRequest

A request to perform batch delete on alerts.

BatchDeleteAlertsResponse

Response to batch delete operation on alerts.

BatchUndeleteAlertsRequest

A request to perform batch undelete on alerts.

BatchUndeleteAlertsResponse

Response to batch undelete operation on alerts.

A reference to a Cloud Pubsub topic. To register for notifications, the owner of the topic must grant alerts-api-push-notifications@system.gserviceaccount.com the projects.topics.publish permission.

Csv

A representation of a CSV file attachment, as a list of column headers and a list of data rows.

CsvRow

A representation of a single data row in a CSV file.

DeviceCompromised

A mobile device compromised alert. Derived from audit logs.

DeviceCompromisedSecurityDetail

Detailed information of a single MDM device compromised event.

DeviceManagementRule

Alerts from Device Management Rules configured by Admin.

DlpRuleViolation

Alerts that get triggered on violations of Data Loss Prevention (DLP) rules.

DomainId

Domain ID of Gmail phishing alerts.

DomainWideTakeoutInitiated

A takeout operation for the entire domain was initiated by an admin. Derived from audit logs.

Empty

A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }

Entity

Individual entity affected by, or related to, an alert.

EntityList

EntityList stores entities in a format that can be translated to a table in the Alert Center UI.

GmailMessageInfo

Details of a message in phishing spike alert.

GoogleOperations

An incident reported by Google Operations for a Google Workspace application.

ListAlertFeedbackResponse

Response message for an alert feedback listing request.

ListAlertsResponse

Response message for an alert listing request.

LoginDetails

The details of the login action.

MailPhishing

Proto for all phishing alerts with common payload. Supported types are any of the following: * User reported phishing * User reported spam spike * Suspicious message reported * Phishing reclassification * Malware reclassification * Gmail potential employee spoofing

MaliciousEntity

Entity whose actions triggered a Gmail phishing alert.

MandatoryServiceAnnouncement

Alert Created by the MSA team for communications necessary for continued use of Google Workspace Products.

MatchInfo

Proto that contains match information from the condition part of the rule.

MergeInfo

New alert tracking numbers.

Notification

Settings for callback notifications. For more details see Google Workspace Alert Notification.

PhishingSpike

Alert for a spike in user reported phishing. Warning: This type has been deprecated. Use MailPhishing instead.

PredefinedDetectorInfo

Detector provided by Google.

PrimaryAdminChangedEvent

Event occurred when primary admin changed in customer's account. The event are being received from insight forwarder

ReportingRule

Alerts from Reporting Rules configured by Admin.

RequestInfo

Requests for one application that needs default SQL setup.

ResourceInfo

Proto that contains resource information.

RuleInfo

Proto that contains rule information.

RuleViolationInfo

Common alert information about violated rules that are configured by Google Workspace administrators.

SSOProfileCreatedEvent

Event occurred when SSO Profile created in customer's account. The event are being received from insight forwarder

SSOProfileDeletedEvent

Event occurred when SSO Profile deleted in customer's account. The event are being received from insight forwarder

SSOProfileUpdatedEvent

Event occurred when SSO Profile updated in customer's account. The event are being received from insight forwarder

SensitiveAdminAction

Alert that is triggered when Sensitive Admin Action occur in customer account.

Settings

Customer-level settings.

StateSponsoredAttack

A state-sponsored attack alert. Derived from audit logs.

Status

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

SuperAdminPasswordResetEvent

Event occurred when password was reset for super admin in customer's account. The event are being received from insight forwarder

Alerts from UserChanges bucket Rules for predefined rules which contain the below rules. Suspended user made active New user Added User suspended (by admin) User granted admin privileges User admin privileges revoked User deleted Users password changed