Quick summary
Admins will now be able to see events that include both their organization and another external organization or user (Copy, Move, ACL Change, etc.) in their Drive audit logs.
For example, if you have an external guest user on some of your organization’s documents and the guest makes a copy of the document in their organization, that Copy event will now show in your audit logs. This can help you see new audit log events related to potential exfiltration that you could not see before.
Getting started
- Admins: This feature will be ON by default. No action is required, relevant events will appear in the logs automatically. Use our Help Center to learn more about Drive audit logs.
- End users: No end user impact.
Rollout pace
- Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on March 2, 2022
Availability
- Available to all Google Workplace customers with the Drive audit log feature.