This article lists the messages that appear in the domain audit log and the library audit log.

Notes:
– You may find deprecated messages in old audit logs, which aren't included in this list.
– A given action usually generates several messages. For example, creating a library generates LIBRARY_CREATED, but also <>CLASS_CREATED, VIEW_CREATED, LIBRARY_UPDATED, and so on.</>

Audit log messages are organized in the following scopes:

Automatically generated table of contents

Administration scope

All messages with administration scope appear in the domain audit log.

Some messages in the table below also appear in the library audit log of the library in which the action that generated the message was performed.

Message ("Type" column)	Explanation	Domain audit log	Library audit log
`ADD_SECURITYCODE`	A new security code was generated and added.
`AUTODELETE_SECURITYCODE`	A security code was automatically revoked after reaching its expiration date.
`MODIFY_SECURITYCODE`	An existing security code was modified. For example, it was changed from "temporary" to "permanent" or it was deleted.
`CATEGORY_DEFINITION_CREATED`	A new category was created.
`CATEGORY_DEFINITION_DELETED`	A category was deleted.
`CATEGORY_DEFINITION_UPDATED`	A category was updated. For example, it was set to dynamic or its name was changed. Note: This doesn't include updating category values. See CATEGORY_VALUES_UPDATED.
`CATEGORY_VALUES_CREATED`	A new category value was created.
`CATEGORY_VALUES_DELETED`	A category value was deleted.
`CATEGORY_VALUES_UPDATED`	A category value was modified.
`CLASS_CREATED`	A new document class was created.
`CLASS_DELETED`	A document class was deleted.
`CLASS_UPDATED`	A document class was modified.
`CUSTOM_CONFIGURATION_CHANGED`	One or more custom configuration flags were added, removed or modified.
`CUSTOM_SCRIPT_CREATED`	A new custom script was created.
`CUSTOM_SCRIPT_DELETED`	A custom script was deleted.
`CUSTOM_SCRIPT_UPDATED`	A custom script was modified. This includes changes to the Java code.
`CUSTOM_UI_ACTION_CREATED`	A new custom button was created in a view.
`CUSTOM_UI_ACTION_DELETED`	A custom button in a view was deleted.
`CUSTOM_UI_ACTION_UPDATED`	A custom button in a view was was modified.
`DIRECTORY_TENANT_ID_ADDED`	A new connection between AODocs and a Microsoft tenant was registered. For example, for the synchronization of Azure groups.
`DIRECTORY_TENANT_ID_REMOVED`	A connection between AODocs and a Microsoft tenant was removed. For example, it was previously used for the synchronization of Azure groups.
`DIRECTORY_TENANT_ID_UPDATED`	A connection between AODocs and a Microsoft tenant was modified. For example, it was enabled or disabled for the synchronization of Azure groups.
`DOCUMENT_TEMPLATE_CREATED`	A new document template was created.
`DOCUMENT_TEMPLATE_DELETED`	A document template was deleted.
`DOCUMENT_TEMPLATE_UPDATED`	A document template was modified.
`DOMAIN_UPDATED`	The configuration of the AODocs domain was updated. For example, notifications on licenses were enabled.
`DOMAIN_USERS_REFRESHED`	Automatic daily refresh of the users in the Google directory.
`EXTERNAL_DOMAIN_ADDED`	A new domain was added to the allowlist.
`EXTERNAL_DOMAIN_REMOVED`	A domain was removed from the allowlist.
`EXTERNAL_USER_ADDED`	A new user or group was added to the allowlist.
`EXTERNAL_USER_REMOVED`	An user or group was removed from the allowlist.
`FOLDER_VISIBILITY_CHANGED`	The visibility of folders was updated from the library administration: under Categories, select Properties next to Folder.
`LIBRARY_COPIED`	A library was copied. This includes creating a library from a template.
`LIBRARY_CREATED`	A new library was created from scratch
`LIBRARY_DELETED`	A library was deleted.
`LIBRARY_LOCKED`	A library was locked. For example, before a switch operation.
`LIBRARY_UNLOCKED`	A library was unlocked. For example, after a switch operation.
`LIBRARY_PERMISSIONS_UPDATED`	When certain library permissions are updated. For example, add or remove library administrator.
`LIBRARY_ROLE_CREATED`	A new custom role was created in a library.
`LIBRARY_ROLE_UPDATED`	A pre-defined library role (for example, Contributors) or a custom role was updated. For example, the description was changed, members were added or removed, or the name of a custom role was changed.
`LIBRARY_ROLE_DELETED`	A custom role was deleted.
`LIBRARY_UPDATED`	A modification was performed in the configuration of a library. For example, the library title was changed.
`LICENSED_USER_ADDED`	A new license was allocated to a user. For example, a license is automatically allocated when a user with no prior license logs into AODocs and accesses a document.
`LICENSED_USER_PRIMARY_EMAIL_CHANGED`	The primary email address of a licensed user was modified. Learn more from the Google Help Center.
`LICENSED_USER_REMOVAL_RESTORED`	AODocs support removed the cooldown period for an incorrectly revoked user.
`LICENSED_USER_REMOVED`	An allocated user license was revoked. This can be a manual action by a an AODocs super administrator or when an internal user is deleted from the Workspace directory.
`LICENSES_UPDATED`	The number of licenses (regardless of whether they are allocated or not) was changed.
`RELATION_CREATED`	A new relation was created in the library administration.
`RELATION_UPDATED`	A relation was updated in the library administration.
`RELATION_DELETED`	A relation was deleted in the library administration.
`SHARE_NOT_PERMITTED`	AODocs can't share a Drive file or folder with a user or group. For example, with a non-Google user when visitor sharing is not enabled, when an internal Workspace user was deleted, when Workspace sharing rules were violated due to your organization's Data Loss Prevention (DLP) policies, and so on.
`STATE_DELETED`	A workflow state was deleted. Notes: – This doesn't mean the whole workflow. See WORKFLOW_DELETED. – For creation of workflow states, see WORKFLOW_CHANGED.
`STATE_UPDATED`	A workflow state was updated. This includes modifying permissions, transitions, notifications or custom actions; also changing the initial state of the workflow and hiding or showing workflow states. Learn more: Configure workflow states.
`STORAGE_ACCOUNT_ADDED`	A new AODocs storage account was added.
`STORAGE_ACCOUNT_REMOVED`	A AODocs storage account was removed.
`SUPER_ADMIN_ADDED`	A new AODocs super administrator was added.
`SUPER_ADMIN_DELETED`	An AODocs super administrator was removed.
`USER_LICENSE_NOT_ALLOCATED`	AODocs can't allocate a license to a user trying to access AODocs. For example, there are no more licenses available on your domain so the user gets an error or a user's license was revoked and they tried to access AODocs during the cooldown period.
`VIEWCONFIG_CREATED`	The default document class display was modified. This creates a new document class display.
`VIEWCONFIG_UPDATED`	The document class display (that was created when the default display was modified) was updated.
`VIEW_CREATED`	A new view was created.
`VIEW_DELETED`	A view was deleted.
`VIEW_UPDATED`	A view was modified.
`WORKFLOW_CREATED`	An new workflow was created.
`WORKFLOW_CHANGED`	A workflow was updated. For example, a new state was created. Note: This doesn't cover the update of a workflow state. See STATE_UPDATED.
`WORKFLOW_DELETED`	A workflow was deleted.
`WORKFLOW_EMAIL_CREATED`	A new workflow email template was created.
`WORKFLOW_EMAIL_DELETED`	A workflow email template was deleted.
`WORKFLOW_EMAIL_UPDATED`	A workflow email template was updated. For example, the email body content was modified.
`WORKFLOW_STATE_CUSTOM_ACTION_ADDED`	A workflow transition action was added to a workflow.
`WORKFLOW_STATE_CUSTOM_ACTION_REMOVED`	A workflow transition was removed from a workflow.
`WORKFLOW_STATE_CUSTOM_ACTION_UPDATED`	A workflow transition action was modified.

Document scope

All messages with document scope appear in the library audit log of the library in which the action that generated the message was performed.

Message ("Type" column)	Explanation
`DOCUMENT_CREATED`	An AODocs document was created.
`DOCUMENT_UPDATED`	An AODocs document was updated.
`DOCUMENT_ACCESSED`	An AODocs document was opened in the AODocs user interface.
`DOCUMENT_MOVED`	An AODocs document was moved to a different folder.
`DOCUMENT_MOVED_TO_TRASH`	An AODocs document was moved to the library trash. Learn more: Delete documents in AODocs.
`DOCUMENT_RESTORED`	An AODocs document was restored from the library trash. Learn more: Manage deleted documents and folders.
`DOCUMENT_DELETED`	An AODocs document was permanently deleted. Learn more: Manage deleted documents and folders.
`DOCUMENT_LOCK_DELETED`	The lock was removed from an AODocs document, for example, when a user quits edit mode.
`DOCUMENT_STATE_CHANGED`	An AODocs document was transitioned to a new workflow state. Learn more: Types of workflow transition.
`DOCUMENT_STATE_NOT_CHANGED`	An automatic workflow transition failed. The automatic transition wasn't possible because a mandatory property wasn't filled in, for example.
`DOCUMENT_COMMENT_ADDED`	A comment was added to the AODocs document.
`DOCUMENT_COMMENT_DELETED`	A comment was removed from the AODocs document.
`DOCUMENT_EXPORTED_TO_LIBRARY`	An AODocs document was changed to a different document class in a Document Management library. Note: Two messages appear for this action. See DOCUMENT_EXPORTED_FROM_LIBRARY. A new document is created in the new document class and the document in the original document class is deleted. This message indicates the new document ID.
`DOCUMENT_EXPORTED_FROM_LIBRARY`	An AODocs document was changed to a different document class in a Document Management library. Note: Two messages appear for this action. See DOCUMENT_EXPORTED_TO_LIBRARY. A new document is created in the new document class and the document in the original document class is deleted. This message indicates the deleted document ID.
`ATTACHMENT_RENAMED`	An attached file in an AODocs document was renamed. Note: This audit log message applies only to attachments stored in Google Drive.
`ATTACHMENT_EDITED`	The content of an attached file was edited.
`ATTACHMENT_EXPORTED`	An attached file was exported to a user's My Drive. Learn more: Export or copy documents or folders to a user's My Drive
`ATTACHMENT_EXPORTED_TO_LIBRARY`	An AODocs document was changed to a different document class in a Team Folder or Secured Folder. Note: Two messages appear for this action. See ATTACHMENT_EXPORTED_FROM_LIBRARY. A new document is created in the new document class and the document in the original document class is deleted. This message indicates the deleted document ID.
`ATTACHMENT_EXPORTED_FROM_LIBRARY`	An AODocs document was changed to a different document class in a Team Folder or Secured Folder. Note: Two messages appear for this action. See ATTACHMENT_EXPORTED_TO_LIBRARY. A new document is created in the new document class and the document in the original document class is deleted. This message indicates the deleted document ID.
`ATTACHMENT_SHARED_WITH_NOTIFICATION`	An attached Google file in an AODocs document was shared with a non-Google user.
`ATTACHMENT_DRIVE_LABEL_UPDATED`	The Drive labels were updated on the attached file.
`ATTACHMENT_DRIVE_LABEL_FAILED`	Updating the Drive labels on the attached file failed. The reason for the error is in the Message column.
`DRIVE_PERMISSION_UPDATED`	The permissions on the AODocs document were updated. Note: This message applies to all storage platforms, not just Google Drive.
`PARALLEL_VALIDATION_ACTION`	A user performed a parallel workflow action in an AODocs document. Learn more: View the status of parallel workflow actions.
`CHECK_OUT_DOCUMENT`	An AODocs document was checked out.
`CHECK_IN_DOCUMENT`	An AODocs document was checked in.
`DISCARD_DOCUMENT_CHECK_OUT`	The draft version of an AODocs document was discarded.
`RELATION_LINK_ADDED`	An AODocs related item was created. This includes creating a new related item and creating a link to an existing related item. This action creates two audit log messages, one for each document (item).
`RELATION_LINK_REMOVED`	A relation between two related items (documents) was removed.

Folder scope

All messages with document scope appear in the library audit log of the library in which the action that generated the message was performed.

Message ("Type" column)	Explanation
`FOLDER_CREATED`	A new folder was created.
`FOLDER_DELETED`	A folder was moved to the library trash.
`FOLDER_RESTORED`	A folder was restored from the library trash. Learn more: Manage deleted documents and folders.
`FOLDER_RENAMED`	A folder was renamed.
`FOLDER_PERMISSIONS_CHANGED`	Permissions on a folder were updated.
`FOLDER_PERMISSION_PUSHED_TO_CHILDREN`	The permissions of the root folder were propagated to its children items.
`FOLDER_PREVENT_DOWNLOADING_CHANGED`	The feature to prevent viewers from downloading, copying and printing was activated.
`FOLDER_MOVED`	The folder was moved into a different folder.
`FOLDER_EXPORTED`	A folder was exported to a user's My Drive. Learn more: Export or copy documents or folders to a user's My Drive
`MISSING_FOLDER_DETECTED`	An AODocs folder is no longer visible to the storage account. This can happen if the folder is moved to a shared drive.
`MISSING_LIBRARY_SYSTEM_FOLDER_DETECTED`	One of the following system folders in a library is no longer visible to the AODocs storage account or has missing properties (used as markers of system folders) in its description: library trash folder folder for permanently deleted content template attachment folder folder to store Google Drive files that are attached only to previous document versions
`LIBRARY_SYSTEM_FOLDER_RECOVERED`	The missing library system folder was recovered. When a library system folder is missing, AODocs either tries to fix it or creates a new one.

User scope

All messages with document scope appear in the library audit log of the library in which the action that generated the message was performed.

Message ("Type" column) Explanation

USER_LOGIN

A user has signed in to AODocs.

This audit log message is generated every time a user logs into AODocs, even when sign in is performed transparently and the sign in dialog isn't displayed.

Versioning scope

All messages with document scope appear in the library audit log of the library in which the action that generated the message was performed.

Message ("Type" column)	Explanation	Domain audit log	Library audit log
`CREATE_VERSION`	A new document version was created.
`REVERT_VERSION`	A document version was restored.
`EDIT_VERSION`	The current version number or description was edited.
`VIEW_VERSION`	A user viewed a document version.
`UPDATE_PREVIOUS_VERSION`	A previous document version was changed. This can happen, for example, when using the Library Switcher to switch a library from Google Drive to either Google Cloud Storage or Azure Blob storage.

Notification scope

All messages with document scope appear in the library audit log of the library in which the action that generated the message was performed.

Message ("Type" column)	Explanation
`SHARING_NOTIFICATION`	An email notification was sent to administrators of a library when a user created a sharing request for a document in Google Drive.
`WORKFLOW_NOTIFICATION`	One of these notifications was sent: an email notification sent to the defined audience, indicating that the workflow state of document changed an action email sent to one or more users who can perform workflow actions in a document See SENT_NOTIFICATION.
`WORKFLOW_REMINDER`	An action reminder email was sent to workflow participants who have a pending workflow action to perform.
`SCRIPT_NOTIFICATION`	An email notification was sent by a custom script.
`SYSTEM_NOTIFICATION`	A system email notification was sent to an AODocs customer. For example, AODocs sent a Google Drive file sharing request or an email to indicate that the number of available licenses is running low on a domain. Note: This message is for internal use only. It doesn't appear in the audit log.
SENT_NOTIFICATION	This audit log message logs the fact that a notification is actually delivered to its recipients for the following email notification types: WORKFLOW_NOTIFICATION WORKFLOW_REMINDER
`DOCUMENT_NOTIFICATION`	A user sent a notification to a user defined in the permissions of a document.
`SKIPPED_NOTIFICATION`	An email notification wasn't delivered because the recipient's email address has been suspended or deleted.

Automatically generated table of contents

Administration scope

Document scope

Folder scope

User scope

Versioning scope

Notification scope

Comments

Articles in this section

Related articles