↳ GitHub sourceConnector

Google Workspace Activities (via Codeless Connector Framework)

Description

The [Google Workspace](https://workspace.google.com/) Activities data connector provides the capability to ingest Activity Events, including Gmail audit events, from the [Google Workspace API](https://developers.google.com/admin-sdk/reports/reference/rest/v1/activities/list) into Microsoft Sentinel.

Declared author / publisher: Microsoft

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

Declared permissions

Read and Write permissions are required.

Workspace

Workspace

Google Workspace API access

Access to the Google Workspace activities API through Oauth are required.

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Configure steps for the Google Reports API oauth access. Then, provide the required information below and click on Connect. >

Connect to Google Workspace to start collecting user activity logs into Microsoft Sentinel

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/GoogleWorkspaceReports/Data Connectors/GoogleWorkspaceTemplate_ccp/GoogleWorkspaceReports_DataConnectorDefinition.json ↗
Commit: 9800e51 ↗
Source identifier: GoogleWorkspaceCCPDefinition

Additional source files 2

Solutions/GoogleWorkspaceReports/Data Connectors/GoogleWorkspaceTemplate_ccp/GoogleWorkspaceReports_DataConnectorDefinition.jsonsource ↗Solutions/GoogleWorkspaceReports/Data/Solution_GoogleWorkspaceReports.jsonsolution-membership ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.