Continuous Compliance Documentation

OAuth Audit and Usage Reporting Permissions

Audit Log Access

OAuth Scope:
https://www.googleapis.com/auth/admin.reports.audit.readonly

This allows us to read Google Workspace audit logs.

We use it to review important events such as:

  • Logins

  • Administrative actions

  • File-sharing activity

  • Changes to settings

  • Other security-relevant activity

This is important because audit logs help detect suspicious behavior, investigate incidents, and prove that controls are working.

Usage Reporting Access

OAuth Scope:
https://www.googleapis.com/auth/admin.reports.usage.readonly

This allows us to read Google Workspace usage reports.

We use it to understand:

  • How services are being used across the organization

  • User activity trends

  • Product usage patterns

This is important because usage reporting helps identify inactive accounts, adoption gaps, unusual behavior, and areas where licensing or security controls may need review.