Skip to main content
Question

Why do we need WORKSPACE_PRIVILEGES if we already have WORKSPACE_ACTIVITY, WORKSPACE_USERS, WORKSPACE_GROUPS, and WORKSPACE_ALERTS?

  • June 9, 2026
  • 0 replies
  • 10 views

havox
Forum|alt.badge.img+5

Hi Google Community,

We have already enabled these Google Workspace logs:

  • WORKSPACE_ACTIVITY
  • WORKSPACE_USERS
  • WORKSPACE_GROUPS
  • WORKSPACE_ALERTS

We want to understand clearly what WORKSPACE_PRIVILEGES will do differently compared to the above log sources.

Main Questions:

  1. What extra things does WORKSPACE_PRIVILEGES handle that the other parsers (especially WORKSPACE_ACTIVITY) do not cover well?
  2. Can you explain the benefits of enabling WORKSPACE_PRIVILEGES?
  3. Please give some examples of logs/events:
    • How they look in WORKSPACE_ACTIVITY (or others)
    • How they look better / different in WORKSPACE_PRIVILEGES

We want to confirm the real value before enabling it for the client.