管理員活動報告只能用於遵守《客戶協議》的合法目的。這些報告適用於 Google Workspace、Education 和 ISP 帳戶。
擷取所有管理活動
如要擷取帳戶所有管理活動的報表，請使用以下 GET HTTP 要求，並附上授權文件中所述的授權權杖。如要進一步瞭解要求的查詢字串和回應屬性，請參閱 API 參考資料。為了方便閱讀，下列範例採用換行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?endTime=a date&startTime=a date
&maxResults=number of events listed on each page of the report
以下範例會將您帳戶過去 180 天 (也就是報表時間範圍上限) 內所有管理活動的報表製作成報表。maxResults 查詢字串會決定這份報表的各個報表頁麵包含兩個事件。如需 API 回應的範例，請參閱 JSON 回應範例：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?maxResults=2
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?customerId=C03az79cb
擷取管理員的所有活動
如要擷取特定管理員執行的所有管理控制台活動報表，請使用以下 GET HTTP 要求，並附上授權說明文件中所述的授權權杖。userKey 是報表中管理員的主要電子郵件地址。如要進一步瞭解要求的查詢字串和回應屬性，請參閱 API 參考資料。為了方便閱讀，下列範例採用換行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey
/applications/admin?endTime=a date&startTime=a date
&maxResults=number of events listed on each page of the report
&filters=event name parameterrelational operatorparameter value
GET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com
/applications/admin?maxResults=2&filters=OLD_VALUE==ALLOW_CAMERA
按事件名稱擷取所有活動
如要擷取特定事件名稱所有活動的報表，請使用以下 GET HTTP 要求，並附上授權說明文件中所述的授權權杖。如需 eventName 資訊，請參閱管理員事件名稱參考資訊。如要進一步瞭解要求的查詢字串和回應屬性，請參閱 API 參考資料。為了方便閱讀，下列範例採用換行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?endTime=a date&startTime=a date
&maxResults=maximum number of events returned on a response page
&eventName=name of the administrative event
以下範例擷取的是變更使用者姓氏的所有管理控制台執行個體報告。如需 API 回應的範例，請參閱 JSON 回應範例：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME
敬上
依事件和管理員擷取所有活動
如要擷取特定管理員所執行特定事件名稱的所有管理控制台變更報表，請使用以下 GET HTTP 要求，並附上授權說明文件中所述的授權權杖。userKey 是報表中管理員的主要電子郵件地址。如需 eventName 資訊，請參閱管理員事件名稱參考資訊。如要進一步瞭解要求的查詢字串和回應屬性，請參閱 API 參考資料。為了方便閱讀，下列範例採用換行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey
/applications/admin?endTime=a date&startTime=a date
&maxResults=maximum number of events returned on a response page
&eventName=name of the administrative event
以下範例記錄了經過 john@example.com 修改的特定使用者姓氏，在管理控制台的所有變更都能擷取報告。如需 API 回應的範例，請參閱 JSON 回應範例：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com
/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME
{"kind":"reports#auditActivities","nextPageToken":"the next page's token","items":[{"kind":"audit#activity","id":{"time":"2011-06-17T15:39:18.460Z","uniqueQualifier":"report's unique ID","applicationName":"admin","customerId":"C03az79cb"},"actor":{"callerType":"USER","email":"liz@example.com","profileId":"user's unique Google Workspace profile ID","key":"consumer key of requestor in OAuth 2LO requests"},"ownerDomain":"example.com","ipAddress":"user's IP address","events":[{"type":"GROUP_SETTINGS","name":"CHANGE_GROUP_SETTING","parameters":[{"name":"SETTING_NAME","value":"WHO_CAN_JOIN","intValue":"integer value of parameter","boolValue":"boolean value of parameter"}]}]},{"kind":"audit#activity","id":{"time":"2011-06-17T15:39:18.460Z","uniqueQualifier":"reports unique ID","applicationName":"admin","customerId":"C03az79cb"},"actor":{"callerType":"USER","email":"liz@example.com","profileId":"user's unique Google Workspace profile ID","key":"consumer key of requestor in an OAuth 2LO request"},"ownerDomain":"example.com","ipAddress":"user's IP address","events":[{"type":"GROUP_SETTINGS","name":"CREATE_GROUP","parameters":[{"name":"GROUP_EMAIL","value":"helpdesk@example.com","intValue":"","boolValue":""}]}]}]}
[null,null,["上次更新時間：2025-08-29 (世界標準時間)。"],[],[],null,["# Admin Activity Report\n\nThe admin activity report returns information on the Admin console activities of all of your account's administrators. Each report uses the basic report endpoint request with report-specific parameters such as an administrator's name or a specific Admin console event. The maximum time period for each report is the last 180 days.\n\nThe admin activity report may be used only for lawful purposes in accordance with your Customer Agreement. And these reports apply to Google Workspace, Education, and ISP accounts.\n\nRetrieve all administrative activities\n--------------------------------------\n\nTo retrieve a report of all administrative activities done for an account, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=number of events listed on each page of the report\n```\n\nThe following example gets a report on all of your account's administrative activities for the past 180 days which is the maximum time period for a report. And the `maxResults` query string determines this report contains two events per report page. For an example of an API response, see the [JSON response example](#example_response): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?maxResults=2\n```\n\nThe following example gets a report on all of a customer's administrative activities for the past 180 days. The `customerId` specifies which customer the report is to be retrieved for. \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?customerId=C03az79cb\n```\n\nRetrieve all activities by administrator\n----------------------------------------\n\nTo retrieve a report of all Admin console activities done by a specific administrator, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). The `userKey` is the primary email address of the administrator in the report. For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=number of events listed on each page of the report\n&filters=event name parameter relational operator parameter value\n```\n\nThe following example gets a report on all changes to the Admin console application done by `john@example.com`, and the response is filtered to return any activities which have an `OLD_VALUE` equal to `ALLOW_CAMERA`. For an example of an API response, see the [JSON response example](#example_response). And for information about the activities, see the [administrator event names](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com\n/applications/admin?maxResults=2&filters=OLD_VALUE==ALLOW_CAMERA\n```\n\nRetrieve all activities by event name\n-------------------------------------\n\nTo retrieve a report of all activities for a specific event name, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). For the `eventName` information, see the [administrator event names reference information](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names). For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=maximum number of events returned on a response page\n&eventName=name of the administrative event\n```\n\nThe following example retrieves a report for all Admin console instances of changing a user's last name. For an example of an API response, see the [JSON response example](#example_response): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME\n```\n| **Note:** When retrieving by `eventName`, the API retrieves the activities where this event occurred. For each activity, the response includes all of the activity's events including the event specified in the API request.\n\nRetrieve all activities by event and administrator\n--------------------------------------------------\n\nTo retrieve a report of all Admin console changes for a specific event name done by a specific administrator, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). The `userKey` is the primary email address of the administrator in the report. For the `eventName` information, see the [administrator event names reference information](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names). For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=maximum number of events returned on a response page\n&eventName=name of the administrative event\n```\n\nThe following example retrieves a report for all Admin console changes to a specific user's last name that were done by `john@example.com`. For an example of an API response, see the [JSON response example](#example_response): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com\n/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME\n```\n| **Note:** When retrieving by `eventName`, the API retrieves the activities where this event occurred. For each activity, the response includes all of the activity's events including the event specified in the API request.\n\nAdmin activity report example JSON response\n-------------------------------------------\n\nA successful response returns an [HTTP 200 status code](http://wikipedia.org/wiki/List_of_HTTP_status_codes). Along with the status code, the response returns a report. For the `eventName` information, see the [administrator event names reference information](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names). For more information about the request's URL query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). \n\n```carbon\n{\n \"kind\": \"reports#auditActivities\",\n \"nextPageToken\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003ethe next page's token\u003c/var\u003e\",\n \"items\": [\n {\n \"kind\": \"audit#activity\",\n \"id\": {\n \"time\": \"2011-06-17T15:39:18.460Z\",\n \"uniqueQualifier\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003ereport's unique ID\u003c/var\u003e\",\n \"applicationName\": \"admin\",\n \"customerId\": \"C03az79cb\"\n },\n \"actor\": {\n \"callerType\": \"USER\",\n \"email\": \"liz@example.com\",\n \"profileId\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's unique Google Workspace profile ID\u003c/var\u003e\",\n \"key\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003econsumer key of requestor in OAuth 2LO requests\u003c/var\u003e\"\n },\n \"ownerDomain\": \"example.com\",\n \"ipAddress\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's IP address\u003c/var\u003e\",\n \"events\": [\n {\n \"type\": \"GROUP_SETTINGS\",\n \"name\": \"CHANGE_GROUP_SETTING\",\n \"parameters\": [\n {\n \"name\": \"SETTING_NAME\",\n \"value\": \"WHO_CAN_JOIN\",\n \"intValue\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003einteger value of parameter\u003c/var\u003e\",\n \"boolValue\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003eboolean value of parameter\u003c/var\u003e\"\n }\n ]\n }\n ]\n },\n {\n \"kind\": \"audit#activity\",\n \"id\": {\n \"time\": \"2011-06-17T15:39:18.460Z\",\n \"uniqueQualifier\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003ereports unique ID\u003c/var\u003e\",\n \"applicationName\": \"admin\",\n \"customerId\": \"C03az79cb\"\n },\n \"actor\": {\n \"callerType\": \"USER\",\n \"email\": \"liz@example.com\",\n \"profileId\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's unique Google Workspace profile ID\u003c/var\u003e\",\n \"key\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003econsumer key of requestor in an OAuth 2LO request\u003c/var\u003e\"\n },\n \"ownerDomain\": \"example.com\",\n \"ipAddress\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's IP address\u003c/var\u003e\",\n \"events\": [\n {\n \"type\": \"GROUP_SETTINGS\",\n \"name\": \"CREATE_GROUP\",\n \"parameters\": [\n {\n \"name\": \"GROUP_EMAIL\",\n \"value\": \"helpdesk@example.com\",\n \"intValue\": \"\",\n \"boolValue\": \"\"\n }\n ]\n }\n ]\n }\n ]\n }\n```"]]
