Dataform audit logging

This document lists the audited methods for Dataform. Google Cloud services generate audit logs that record administrative and access activities within your Google Cloud resources. For more information about Cloud Audit Logs, see the following:

Service name

To view the Dataform audit logs, do the following:

  1. In the Google Cloud console, go to the Logs Explorer page:

    Go to Logs Explorer

  2. Copy and paste the following query into the Query field of the Logs Explorer, and then click Run query.

        protoPayload.serviceName="dataform.googleapis.com"

Methods by permission type

Each IAM permission has a type property, whose value is an enum that can be one of four values: ADMIN_READ, ADMIN_WRITE, DATA_READ, or DATA_WRITE. When you call a method, Dataform generates an audit log whose category is dependent on the type property of the permission required to perform the method. Methods that require an IAM permission with the type property value of DATA_READ, DATA_WRITE, or ADMIN_READ generate Data Access audit logs. Methods that require an IAM permission with the type property value of ADMIN_WRITE generate Admin Activity audit logs.

API methods in the following list that are marked with (LRO) are long-running operations (LROs). These methods usually generate two audit log entries: one when the operation starts and another when it ends. For more information see Audit logs for long-running operations.
Permission type Methods
ADMIN_READ google.cloud.dataform.v1.Dataform.ComputeRepositoryAccessTokenStatus
google.cloud.dataform.v1.Dataform.FetchRemoteBranches
google.cloud.dataform.v1.Dataform.GetFolder
google.cloud.dataform.v1.Dataform.GetIamPolicy
google.cloud.dataform.v1.Dataform.GetReleaseConfig
google.cloud.dataform.v1.Dataform.GetRepository
google.cloud.dataform.v1.Dataform.GetTeamFolder
google.cloud.dataform.v1.Dataform.GetWorkflowConfig
google.cloud.dataform.v1.Dataform.GetWorkspace
google.cloud.dataform.v1.Dataform.ListReleaseConfigs
google.cloud.dataform.v1.Dataform.ListRepositories
google.cloud.dataform.v1.Dataform.ListWorkflowConfigs
google.cloud.dataform.v1.Dataform.ListWorkspaces
google.cloud.dataform.v1.Dataform.QueryFolderContents
google.cloud.dataform.v1.Dataform.QueryTeamFolderContents
google.cloud.dataform.v1beta1.Dataform.ComputeRepositoryAccessTokenStatus
google.cloud.dataform.v1beta1.Dataform.FetchRemoteBranches
google.cloud.dataform.v1beta1.Dataform.GetFolder
google.cloud.dataform.v1beta1.Dataform.GetIamPolicy
google.cloud.dataform.v1beta1.Dataform.GetReleaseConfig
google.cloud.dataform.v1beta1.Dataform.GetRepository
google.cloud.dataform.v1beta1.Dataform.GetTeamFolder
google.cloud.dataform.v1beta1.Dataform.GetWorkflowConfig
google.cloud.dataform.v1beta1.Dataform.GetWorkspace
google.cloud.dataform.v1beta1.Dataform.ListReleaseConfigs
google.cloud.dataform.v1beta1.Dataform.ListRepositories
google.cloud.dataform.v1beta1.Dataform.ListWorkflowConfigs
google.cloud.dataform.v1beta1.Dataform.ListWorkspaces
google.cloud.dataform.v1beta1.Dataform.QueryFolderContents
google.cloud.dataform.v1beta1.Dataform.QueryTeamFolderContents
google.iam.v1.IAMPolicy.GetIamPolicy
google.longrunning.Operations.GetOperation
google.longrunning.Operations.ListOperations
ADMIN_WRITE google.cloud.dataform.v1.Dataform.CreateFolder
google.cloud.dataform.v1.Dataform.CreateReleaseConfig
google.cloud.dataform.v1.Dataform.CreateRepository
google.cloud.dataform.v1.Dataform.CreateTeamFolder
google.cloud.dataform.v1.Dataform.CreateWorkflowConfig
google.cloud.dataform.v1.Dataform.CreateWorkspace
google.cloud.dataform.v1.Dataform.DeleteFolder
google.cloud.dataform.v1.Dataform.DeleteFolderTree (LRO)
google.cloud.dataform.v1.Dataform.DeleteReleaseConfig
google.cloud.dataform.v1.Dataform.DeleteRepository
google.cloud.dataform.v1.Dataform.DeleteTeamFolder
google.cloud.dataform.v1.Dataform.DeleteTeamFolderTree (LRO)
google.cloud.dataform.v1.Dataform.DeleteWorkflowConfig
google.cloud.dataform.v1.Dataform.DeleteWorkspace
google.cloud.dataform.v1.Dataform.MoveFolder (LRO)
google.cloud.dataform.v1.Dataform.MoveRepository (LRO)
google.cloud.dataform.v1.Dataform.SetIamPolicy
google.cloud.dataform.v1.Dataform.UpdateFolder
google.cloud.dataform.v1.Dataform.UpdateReleaseConfig
google.cloud.dataform.v1.Dataform.UpdateRepository
google.cloud.dataform.v1.Dataform.UpdateTeamFolder
google.cloud.dataform.v1.Dataform.UpdateWorkflowConfig
google.cloud.dataform.v1beta1.Dataform.CreateFolder
google.cloud.dataform.v1beta1.Dataform.CreateReleaseConfig
google.cloud.dataform.v1beta1.Dataform.CreateRepository
google.cloud.dataform.v1beta1.Dataform.CreateTeamFolder
google.cloud.dataform.v1beta1.Dataform.CreateWorkflowConfig
google.cloud.dataform.v1beta1.Dataform.CreateWorkspace
google.cloud.dataform.v1beta1.Dataform.DeleteFolder
google.cloud.dataform.v1beta1.Dataform.DeleteFolderTree (LRO)
google.cloud.dataform.v1beta1.Dataform.DeleteReleaseConfig
google.cloud.dataform.v1beta1.Dataform.DeleteRepository
google.cloud.dataform.v1beta1.Dataform.DeleteRepositoryLongRunning (LRO)
google.cloud.dataform.v1beta1.Dataform.DeleteTeamFolder
google.cloud.dataform.v1beta1.Dataform.DeleteTeamFolderTree (LRO)
google.cloud.dataform.v1beta1.Dataform.DeleteWorkflowConfig
google.cloud.dataform.v1beta1.Dataform.DeleteWorkspace
google.cloud.dataform.v1beta1.Dataform.MoveFolder (LRO)
google.cloud.dataform.v1beta1.Dataform.MoveRepository (LRO)
google.cloud.dataform.v1beta1.Dataform.SetIamPolicy
google.cloud.dataform.v1beta1.Dataform.UpdateFolder
google.cloud.dataform.v1beta1.Dataform.UpdateReleaseConfig
google.cloud.dataform.v1beta1.Dataform.UpdateRepository
google.cloud.dataform.v1beta1.Dataform.UpdateTeamFolder
google.cloud.dataform.v1beta1.Dataform.UpdateWorkflowConfig
google.longrunning.Operations.CancelOperation
google.longrunning.Operations.DeleteOperation
DATA_READ google.cloud.dataform.v1.Dataform.FetchFileDiff
google.cloud.dataform.v1.Dataform.FetchFileGitStatuses
google.cloud.dataform.v1.Dataform.FetchGitAheadBehind
google.cloud.dataform.v1.Dataform.FetchRepositoryHistory
google.cloud.dataform.v1.Dataform.GetCompilationResult
google.cloud.dataform.v1.Dataform.GetConfig
google.cloud.dataform.v1.Dataform.GetWorkflowInvocation
google.cloud.dataform.v1.Dataform.ListCompilationResults
google.cloud.dataform.v1.Dataform.ListWorkflowInvocations
google.cloud.dataform.v1.Dataform.PushGitCommits
google.cloud.dataform.v1.Dataform.QueryCompilationResultActions
google.cloud.dataform.v1.Dataform.QueryDirectoryContents
google.cloud.dataform.v1.Dataform.QueryRepositoryDirectoryContents
google.cloud.dataform.v1.Dataform.QueryWorkflowInvocationActions
google.cloud.dataform.v1.Dataform.ReadFile
google.cloud.dataform.v1.Dataform.ReadRepositoryFile
google.cloud.dataform.v1.Dataform.SearchFiles
google.cloud.dataform.v1beta1.Dataform.FetchFileDiff
google.cloud.dataform.v1beta1.Dataform.FetchFileGitStatuses
google.cloud.dataform.v1beta1.Dataform.FetchGitAheadBehind
google.cloud.dataform.v1beta1.Dataform.FetchRepositoryHistory
google.cloud.dataform.v1beta1.Dataform.GetCompilationResult
google.cloud.dataform.v1beta1.Dataform.GetConfig
google.cloud.dataform.v1beta1.Dataform.GetWorkflowInvocation