An unexpected Google user account is shown as the author of changes in the Google Workspace Admin Audit log
Published Date : 30 Mar 2021
Last Updated : 22 Nov 2023
Content Ref: TEC7813862
Operating System
(none)
Part No
(none)
Summary
Explains why an unexpected admin account is listed as the author of changes in the Google Workspace Admin Audit log.
Symptoms
Your RM Unify establishment is federated to Google Workspace. In the Google Admin Audit log, an unexpected Google user account is listed as the instigator of changes received from RM Unify. These changes might be user changes, password updates, or Google Class/Classroom changes.
Cause
In the Google Admin Audit log, the Admin account listed as the instigator of changes received from RM Unify is the most recent Google user account to grant Google API rights access to RM Unify. This needs to be a Google Workspace super admin account. However, if an RM Unify super admin grants Google API rights while signed into a non-super admin Google account, only partial rights are granted, provisioning and password sync will be affected and the non-super admin Google account will be displayed in the Google Admin Audit log.
Additionally, it may be that API consent has been given correctly by a Google super admin, but just not the 'desired' Google super admin. We recommend using a non-RM Unify provisioned Google super admin account, which must remain active and licensed at all times, i.e. one which is not at risk of suspension or unlicensing.
Google API rights are granted to RM Unify when setting up group sync to Google Classroom, or when re-granting consent via one of the 'Google Workspace for Education' tiles in the RM Unify App Library.
Requirements
A Google Workspace super admin account is required to authorise Google API rights successfully.
Procedure
Re-grant authorised access for the RM Unify service
Sign out of any existing Google Workspace browser sessions.
Log on to RM Unify as an RM Unify super admin user.
Select App Library.
Select a Google Workspace tile that has been set up for your establishment, e.g. Google Drive.
Within the Support Info section 'You have given permission to RM Unify to manage your user and group data in Google Workspace. Need to do this again?', click the 'Enable Google APIs' button.
A new tab will open with a prompt to sign in to Google Workspace Important: You must sign in as a Google super admin user.
Once signed in to Google, tick all the boxes on the Google consent page and click Continue. Note: If you are re-authorising consent after already having done so recently, you will see a different Google window (please see the image below), where you should click Continue.
You will be returned to the Google Workspace app in the RM Unify App Library.
Close the app window.
Checks
When completed successfully, the 'API consent last given:' date/time will be updated.
If this article has not helped provide a solution then it is also possible to
log a call...
Document Keywords: gsuite, google, app, gapps, rmunify, Google Apps, GAfE, 403, authorization, api, 400, Not Authorized to access this resource 403, Google Workspace threw an unexpected error, The new password has been successfully applied to the user's RM Unify account, but couldn't be applied to his or her G Suite account, passwords, TEC7813862, google workspace, audit report, report, admin log, admin report
Symptoms
