See Google Drive events involving external users in your audit logs

Quick summary 

Admins will now be able to see events that include both their organization and another external organization or user (Copy, Move, ACL Change, etc.) in their Drive audit logs. 

For example, if you have an external guest user on some of your organization’s documents and the guest makes a copy of the document in their organization, that Copy event will now show in your audit logs. This can help you see new audit log events related to potential exfiltration that you could not see before.

Getting started 

  • Admins: This feature will be ON by default. No action is required, relevant events will appear in the logs automatically. Use our Help Center to learn more about Drive audit logs. 
  • End users: No end user impact. 

Rollout pace