Google Workspace

Sync data from Google Workspace (Calendar, Drive, Chat, etc.).

Overview
Setup Guide
Permissions
Troubleshooting

Connect Parable to Google Workspace for directory, Gmail, Calendar, Drive, Meet, Chat, and audit data using the Admin SDK and related APIs.

Profile photos

A member’s directory photo is their profile photo in this Workspace unless they uploaded their own. It takes the place of the photo captured at Google sign-in. Parable reads it from the Workspace’s identity data after each identity run and links to Google’s URL; it does not copy the image or look it up when a page loads. A member who leaves the directory loses the photo with the next run.

Audit & Reports

Admin audit logs, usage reports, login activity

Info: Parable reads Google Workspace data (directory, Gmail, Calendar, Drive, Meet, Chat, and related APIs). You still use Google Cloud Console to create the service account, enable APIs, and download the JSON key — that split is normal for Workspace integrations.

Data streams

This Provider Plugin defines 30 data streams.

Stream	Description	Sync
`users`	Google Workspace users	full
`threads`	Gmail threads for users	incremental
`messages_list`	Gmail message identifiers used to enumerate messages.get work	incremental
`thread_messages`	Full Gmail message details	full
`labels`	Gmail labels of each mailbox, with their names	full
`calendars`	User calendars	full
`calendar_events`	Calendar events	incremental
`workspace_drive_activity`	Per-user Drive activity via impersonated activity:query	incremental
`workspace_drive_files`	Per-user Drive file index with sharing permissions	incremental
`conference_records`	Google Meet conference records	incremental
`participants`	Conference participants	full
`participantsessions`	Participant sessions	full
`transcripts`	Conference transcripts	full
`recordings`	Conference recordings	full
`groups`	Google Workspace groups	full
`group_members`	Members of a Google Workspace group	full
`org_units`	Organizational units	full
`conference_record_detail`	Full conference record details	full
`participant_detail`	Full participant details	full
`transcript_detail`	Full transcript details	full
`recording_detail`	Full recording details	full
`spaces`	Google Meet space details fetched per unique space from conference records	full
`chrome_activity`	Chrome browser and Chrome OS audit events from Admin Reports API	incremental
`gemini_activity`	Gemini in Workspace Apps usage events from Admin Reports API	incremental
`chat_spaces`	Google Chat spaces the impersonated user is a member of (named spaces, group chats, and DMs)	full
`chat_space_messages`	Google Chat messages listed per space (`spaces.messages.list`; excludes system messages)	incremental
`shared_drives`	Google Workspace shared drives of the domain, listed with domain administrator access	full
`shared_drive_members`	Members of each Google Workspace shared drive and their roles, listed with domain administrator access	full
`shared_drive_files`	Google Docs, Sheets and folders in each shared drive, listed as one manager of the drive	full
`shared_drive_file_permissions`	Permissions of each shared drive Doc, Sheet and folder that has permissions of its own	full

users reads every user of the domain, suspended users included, and marks a user that a later read does not return as deleted. The streams that read each user’s Gmail, Calendar, Drive, Meet, and Chat data skip a suspended user.thread_messages.labelIds holds label IDs, not names. Gmail gives a user label an ID such as Label_12, and the ID is unique only inside one mailbox. The labels stream reads each mailbox’s labels with their names, with one request per mailbox on each sync. Join labelIds to labels.id on the same primaryEmail to get the names.workspace_drive_files reads the files each user owns in My Drive. The four shared drive streams read shared drives, and they are off by default:

shared_drives and shared_drive_members read every shared drive and its members as the admin email, with domain administrator access.
shared_drive_files reads the Google Docs, Sheets, and folders of each drive as one manager of that drive, because Google lists a shared drive’s items only to its members. Parable uses the first manager in the drive’s members list who is a user and whose account is not deleted.
shared_drive_file_permissions reads the permissions of each item that is shared beyond its folder or drive. Google returns no permissions with shared drive items, so this stream sends one request for each such item on every sync.

Each stream reads the whole shared drive again on every sync, and marks a drive, member, item, or permission that a later read does not return as deleted. Source permissions give each item the members of its drive, the people its folders are shared with, and the people it is shared with directly. A limited-access folder and the items in it admit only the folder’s own grantees.Source permissions give each Gmail row (messages_list, threads, thread_messages, and labels) to the owner of its mailbox only: the user whose primaryEmail Parable acts as. Message headers give no access. A person named in To or Cc reads their own copy of the message, from their own mailbox, and not the sender’s copy. Each chrome_activity and gemini_activity event admits the user in actor.email only. An event with no actor email admits nobody. A person with All data access, such as a Workspace Administrator, reads every row.Source permissions give each calendar_events row to the people on the event: its attendees, the members of a group that attends, its organizer, and the user whose calendar list it was read from. A guest at another company and a room admit nobody. Calendar sharing is not read, so a delegate or a person a calendar is shared with reads the event only when it was read from their own calendar list. An admitted person reads the whole event, the full guest list included. This applies after the rebuild of the table that the change queues is approved and complete. The Meet and Chat streams and the other Admin Reports streams have no source permissions, so they read all rows (Source permissions).

Service account

What You’ll Need

Credential	What it is
Service Account Key	JSON key file from Google Cloud — you’ll enter individual fields from this file (see below)
Admin Email	Google Workspace super admin email for impersonation
Domain	Your Google Workspace domain (e.g., `example.com`)

Info: The configuration form asks for individual fields from the service account JSON key file. Open the downloaded JSON file and copy each value into the corresponding form field: type, project_id, private_key_id, private_key, client_email, client_id, auth_uri, token_uri, auth_provider_x509_cert_url, client_x509_cert_url, and universe_domain.

Info: Setup access in Google Workspace. These steps require Google Workspace Super Admin, or a colleague with equivalent permissions who can create credentials for you. If that is not you, ask your Google Workspace administrator.

Google Cloud Console: Create or select a GCP project, enable APIs, and create a service account — typically Project Owner or Project Editor on that project.
If your company uses a Google Cloud organization with policies that block new projects or service accounts, ask your Google Cloud organization administrator to complete or approve those steps.

Step 1: Create Google Cloud Project

Go to Google Cloud Console
Click Select a project → New Project
Name it: Parable Integration
Click Create

Step 2: Enable Required APIs

Go to APIs & Services → Library
Search for and enable each:

API	Purpose
Admin SDK API	Directory, users, groups, org units
Gmail API	Email thread and message metadata
Google Calendar API	Calendar events
Google Drive API	Drive file index, Docs, Sheets content
Google Drive Activity API	Drive activity feed
Google Meet REST API	Meet conference records, participants, transcripts, recordings
Google Chat API	Chat spaces and messages
Google Docs API	Google Doc content
Google Sheets API	Google Sheet content

Step 3: Create Service Account

Go to IAM & Admin → Service Accounts
Click Create Service Account
Name: parable-workspace-<your-domain> (for example, parable-workspace-example-com)
Click Create and Continue
Skip role assignment → Done

Tip: If you connect multiple Google Workspace domains, create one service account per domain. Domain-specific names make future key rotation and audit review simpler.

Step 4: Generate Service Account Key

Click on the newly created service account
Go to Keys tab → Add Key → Create new key
Select JSON format
Click Create — key file downloads automatically

Warning: Store the JSON key file securely. It cannot be downloaded again!

Rotate this key on your normal credential rotation cadence. Most teams rotate service account keys every 90 days or whenever an administrator with access leaves the company. After rotation, update the Parable Provider with the new JSON key fields before deleting the old key in Google Cloud.

Step 5: Enable Domain-Wide Delegation and Note Client ID

On the service account details page, go to the Details tab
Expand Advanced settings
Check Enable Google Workspace Domain-wide Delegation and click Save
The Client ID (numeric, ~21 digits) will now appear in that section — copy it for the next step

Info: The Client ID is also available as the client_id field in the downloaded JSON key file.

Step 6: Configure Domain-Wide Delegation

Open Google Admin Console
Go to Security → Access and data control → API controls
Click Manage Domain Wide Delegation
Click Add new
Enter:

Field	Value
Client ID	Service account Client ID from Step 5
OAuth Scopes	See scope list below

Step 7: Add Required Scopes

Add these scopes as a comma-separated list. The exact set depends on which Google data categories you enable in Parable.Parable requests scopes for enabled data streams and any parent streams they require. Credential validation checks their combined scope set; sync requests use the scopes saved for each stream when the run is planned. For example, disabling org_units removes the need for admin.directory.orgunit.readonly when no other enabled stream requires it.Streams that read each user’s data share one token per user. That token carries the saved scopes of every such stream in the run that the Domain-Wide Delegation entry grants. A stream whose own scopes are not all granted requests only its own and fails on the missing scope.If Google rejects a combined scope request with unauthorized_client, it does not identify which individual scope is missing. Check the requested scopes and the service account’s Domain-Wide Delegation entry.

Data category	OAuth scope
Directory users	`https://www.googleapis.com/auth/admin.directory.user.readonly`
Directory groups	`https://www.googleapis.com/auth/admin.directory.group.readonly`
Organizational units	`https://www.googleapis.com/auth/admin.directory.orgunit.readonly`
Gmail metadata	`https://www.googleapis.com/auth/gmail.readonly`
Calendar events	`https://www.googleapis.com/auth/calendar.readonly`
Drive files	`https://www.googleapis.com/auth/drive.readonly`
Drive activity	`https://www.googleapis.com/auth/drive.activity.readonly`
Meet records	`https://www.googleapis.com/auth/meetings.space.readonly`
Chat spaces	`https://www.googleapis.com/auth/chat.spaces.readonly`
Chat messages	`https://www.googleapis.com/auth/chat.messages.readonly`
Chrome audit activity	`https://www.googleapis.com/auth/admin.reports.audit.readonly`

Info: The two Chat scopes are new. If you configured Domain-Wide Delegation before Chat support shipped, add https://www.googleapis.com/auth/chat.spaces.readonly and https://www.googleapis.com/auth/chat.messages.readonly to the existing Client ID entry. The chat_spaces and chat_space_messages taps are enabled by default. Disable them if you do not grant these scopes. An HTTP 403 from the Chat API after token minting is treated as an absent parent and returns no Chat records for that parent.

The optional chrome_activity tap ingests all Chrome application audit events from the Admin Reports API (login, device, DLP, Safe Browsing, content transfer, and related event types). It is not enabled by default — turn it on in your Provider configuration when you need Chrome browser or ChromeOS activity in Parable. Connection onboarding requests an explicit 90-day backfill, split into 7-day API windows for this tap. If you enable the tap later, an incremental run without a saved watermark or explicit date range starts with one day of history. Request an explicit backfill for older activity. The tap keeps one row per event: a backfill over days a daily load already read matches each event by its time, unique qualifier, application, and customer, and stores it once.The shared drive streams (shared_drives, shared_drive_members, shared_drive_files, and shared_drive_file_permissions) need only the Drive files scope above. They are not enabled by default. Before you turn them on:

Use a super admin as the Admin email. The drive and member reads use domain administrator access (useDomainAdminAccess), so they see every shared drive without being a member.
Make sure each shared drive has a manager who is a user of your domain. Parable reads a drive’s items as that manager, through Domain-Wide Delegation. A drive whose first manager is outside your domain or suspended is not read.
Count your shared drive items. Each sync sends one Drive API request for each Doc, Sheet, or folder that has permissions of its own, and the Drive API counts these requests against your Google Cloud project’s quota.

Info: Parable no longer requires deprecated per-resource Google Meet scopes. Use https://www.googleapis.com/auth/meetings.space.readonly for Meet data.

Click Authorize

Step 8: Enter values in the form

Enter the values from your service account JSON key, plus Admin email and Domain, into the Provider form, then click Save & test connection.

Calendar Events

Developer identifier: calendar_eventsCalendar Events. Calendar events.

Enables: Attribute calendar events to their calendar, organizer, attendees, time interval, recurrence, and provider event state.
Scope: Reads the records that changed since the previous sync from Google Workspace’s https://www.googleapis.com/calendar/v3/calendars/{id}/events operation, and keeps the latest version of each record. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. Event descriptions and conference or attachment metadata may be returned when visible, but attachment bytes are not fetched. This stream supplies no reliable deletion signal.

Anyone Can Add Self

Developer identifier: calendar_events.anyoneCanAddSelfAnyone Can Add Self. Whether anyone can invite themselves to the event. It distinguishes the provider-defined anyone can add self state or classification for the calendar event.

Enables: Filter Calendar Events by whether anyone can invite themselves to the event in calendar_events.anyoneCanAddSelf; count true, false, and missing results separately.
Interpretation: Google Workspace reports anyone can invite themselves to the event as a boolean on each calendar event; a missing field is unknown, not false.

Attachments

Developer identifier: calendar_events.attachmentsAttachments. File attachments for the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Associate each returned event attachment metadata entry in calendar_events.attachments with the parent calendar event; inventory the reference without assuming file, recording, or attachment bytes are present.
Interpretation: Google Workspace returns attachments as file, recording, or attachment metadata on each calendar event; the array does not imply that binary content was collected. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

File ID

Developer identifier: calendar_events.attachments.fileIdFile ID. ID of the attached file. Read-only. For Google Drive files, this is the ID of the corresponding Drive resource. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each event attachment in Calendar Events to the referenced file through calendar_events.attachments.fileId; flag file ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports file ID as an identifier in its file namespace; it is not a universal identity outside Google Workspace.

File URL

Developer identifier: calendar_events.attachments.fileUrlFile URL. URL link to the attachment. It locates the provider resource or path associated with the event attachment.

Enables: Match repeated event attachment entries on file URL in calendar_events.attachments.fileUrl. Only entries that share this key are the same record.
Interpretation: Google Workspace reports file URL as a resource locator for each event attachment; access still depends on viewer permissions and the URL may expire or change. It is the key of this nested record. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

Icon Link

Developer identifier: calendar_events.attachments.iconLinkIcon Link. URL link to the attachment’s icon. It locates the provider resource or path associated with the event attachment.

Enables: Associate each event attachment with the resource identified by icon link in calendar_events.attachments.iconLink; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports icon link as a resource locator for each event attachment; access still depends on viewer permissions and the URL may expire or change. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

MIME Type

Developer identifier: calendar_events.attachments.mimeTypeMIME Type. Internet media type (MIME type) of the attachment. It identifies the file, document, recording, or attachment metadata associated with the event attachment.

Enables: Segment event attachment entries in Calendar Events by MIME type in calendar_events.attachments.mimeType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports MIME type as a label from its own taxonomy on each event attachment; preserve unknown labels rather than mapping them by assumption. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

Title

Developer identifier: calendar_events.attachments.titleTitle. Attachment title. It identifies the file, document, recording, or attachment metadata associated with the event attachment.

Enables: Label each event attachment with title from calendar_events.attachments.title; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports title as display text for each event attachment; names are mutable and are not stable identities. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

Attendees

Developer identifier: calendar_events.attendeesAttendees. The attendees of the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute each returned event attendee in calendar_events.attendees to the parent calendar event; preserve whether the field represents an attendee, To, Cc, or Bcc relationship.
Interpretation: Google Workspace returns attendees as an array of event attendee entries on each calendar event; missing, empty, and permission-redacted arrays are not equivalent.

Additional Guests

Developer identifier: calendar_events.attendees.additionalGuestsAdditional Guests. Number of additional guests the attendee has indicated they are bringing. It supplies the additional guests measure for the event attendee at the provider’s declared unit and grain.

Enables: Measure additional guests through calendar_events.attendees.additionalGuests for each event attendee and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports additional guests as a measure on each event attendee; compare only records with the same unit and aggregation grain.

Comment

Developer identifier: calendar_events.attendees.commentComment. The attendee’s response comment. It defines the content surface available for this calendar event.

Enables: Locate event attendee records by comment in calendar_events.attendees.comment; attribute each text match to its parent calendar event and, when present, its reported author.
Interpretation: Google Workspace supplies comment as text on each event attendee; referenced files or media are not implied unless explicitly represented.

Display Name

Developer identifier: calendar_events.attendees.displayNameDisplay Name. The attendee’s name, if available. It distinguishes the provider-defined display name state or classification for the event attendee.

Enables: Label each event attendee with display name from calendar_events.attendees.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each event attendee; names are mutable and are not stable identities.

Developer identifier: calendar_events.attendees.emailEmail. The attendee’s email address. It supplies the provider-reported address or location facet for the event attendee, not a residency determination.

Enables: Attribute each event attendee to a person or account by the exact email in calendar_events.attendees.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each event attendee; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Developer identifier: calendar_events.attendees.idID. The attendee’s Google profile ID, if available. It identifies the profile behind an event attendee when Google returns one.

Enables: Connect an event attendee to its Google profile through calendar_events.attendees.id when the value is present; count attendees without an ID separately rather than treating them as unknown.
Interpretation: Google Workspace returns ID only when the attendee’s profile ID is available, and most attendees have none; a missing ID is not a missing attendee. It is a Google profile identifier, not a universal identity outside Google Workspace, and it is not a key for attendee rows.

Optional

Developer identifier: calendar_events.attendees.optionalOptional. Whether this is an optional attendee. It distinguishes the provider-defined optional state or classification for the event attendee.

Enables: Filter Calendar Events by whether this is an optional attendee in calendar_events.attendees.optional; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is an optional attendee as a boolean on each event attendee; a missing field is unknown, not false.

Organizer

Developer identifier: calendar_events.attendees.organizerOrganizer. Whether the attendee is the organizer of the event. It distinguishes the provider-defined organizer state or classification for the event attendee.

Enables: Filter Calendar Events by whether the attendee is the organizer of the event in calendar_events.attendees.organizer; count true, false, and missing results separately.
Interpretation: Google Workspace reports the attendee is the organizer of the event as a boolean on each event attendee; a missing field is unknown, not false.

Resource

Developer identifier: calendar_events.attendees.resourceResource. Whether the attendee is a resource (e.g., a room). It distinguishes the provider-defined resource state or classification for the event attendee.

Enables: Filter Calendar Events by whether the attendee is a resource (e.g., a room) in calendar_events.attendees.resource; count true, false, and missing results separately.
Interpretation: Google Workspace reports the attendee is a resource (e.g., a room) as a boolean on each event attendee; a missing field is unknown, not false.

Response Status

Developer identifier: calendar_events.attendees.responseStatusResponse Status. The attendee’s response status. It distinguishes the provider-defined response status state or classification for the event attendee.

Enables: Segment event attendee entries in Calendar Events by response status in calendar_events.attendees.responseStatus; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports response status as a label from its own taxonomy on each event attendee; preserve unknown labels rather than mapping them by assumption.

Self

Developer identifier: calendar_events.attendees.selfSelf. Whether this entry represents the calendar on which this event appears. It distinguishes the provider-defined self state or classification for the event attendee.

Enables: Filter Calendar Events by whether this entry represents the calendar on which this event appears in calendar_events.attendees.self; count true, false, and missing results separately.
Interpretation: Google Workspace reports this entry represents the calendar on which this event appears as a boolean on each event attendee; a missing field is unknown, not false.

Attendees Omitted

Developer identifier: calendar_events.attendeesOmittedAttendees Omitted. Whether attendees may have been omitted from the event’s representation. It distinguishes the provider-defined attendees omitted state or classification for the calendar event.

Enables: Filter Calendar Events by whether attendees may have been omitted from the event’s representation in calendar_events.attendeesOmitted; count true, false, and missing results separately.
Interpretation: Google Workspace reports attendees may have been omitted from the event’s representation as a boolean on each calendar event; a missing field is unknown, not false.

Calendar ID

Developer identifier: calendar_events.calendar_idCalendar ID. Parent calendar reference copied into each calendar event because the child operation does not return that relationship. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each calendar event in Calendar Events to the referenced calendar through calendar_events.calendar_id; flag calendar ID values that do not resolve in that provider namespace.
Interpretation: Parable copies calendar ID from the parent record into each calendar event; the child Google Workspace operation does not return it.

Color ID

Developer identifier: calendar_events.colorIdColor ID. The color ID of the event, referencing the event color definitions. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each calendar event in Calendar Events to the referenced color through calendar_events.colorId; flag color ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports color ID as an identifier in its color namespace; it is not a universal identity outside Google Workspace.

Conference Data

Developer identifier: calendar_events.conferenceDataConference Data. Conference-related information such as Google Meet details. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute conference data in calendar_events.conferenceData to the parent calendar event; identify parent records where that nested conference data object is absent.
Interpretation: Google Workspace reports conference data as a nested object on each calendar event; optional children may be absent from a valid response.

Conference ID

Developer identifier: calendar_events.conferenceData.conferenceIdConference ID. The ID of the conference. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each conference data in Calendar Events to the referenced conference through calendar_events.conferenceData.conferenceId; flag conference ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports conference ID as an identifier in its conference namespace; it is not a universal identity outside Google Workspace.

Conference Solution

Developer identifier: calendar_events.conferenceData.conferenceSolutionConference Solution. The conference solution, such as Google Meet. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute conference solution in calendar_events.conferenceData.conferenceSolution to the parent calendar event; identify parent records where that nested conference solution object is absent.
Interpretation: Google Workspace reports conference solution as a nested object on each conference data; optional children may be absent from a valid response.

Icon URI

Developer identifier: calendar_events.conferenceData.conferenceSolution.iconUriIcon URI. The user-visible icon for this solution. It locates the provider resource or path associated with the conference solution.

Enables: Associate each conference solution with the resource identified by icon URI in calendar_events.conferenceData.conferenceSolution.iconUri; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports icon URI as a resource locator for each conference solution; access still depends on viewer permissions and the URL may expire or change.

Key

Developer identifier: calendar_events.conferenceData.conferenceSolution.keyKey. The key which can uniquely identify the conference solution. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute key in calendar_events.conferenceData.conferenceSolution.key to the parent calendar event; identify parent records where that nested key object is absent.
Interpretation: Google Workspace reports key as a nested object on each conference solution; optional children may be absent from a valid response.

Type

Developer identifier: calendar_events.conferenceData.conferenceSolution.key.typeType. The conference solution type, e.g., ‘hangoutsMeet’. It distinguishes the provider-defined type state or classification for the conference solution key.

Enables: Segment conference solution key entries in Calendar Events by type in calendar_events.conferenceData.conferenceSolution.key.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each conference solution key; preserve unknown labels rather than mapping them by assumption.

Name

Developer identifier: calendar_events.conferenceData.conferenceSolution.nameName. The user-visible name of this solution, e.g., ‘Google Meet’. It gives the conference solution a human-readable provider label while its identifier remains the stable reference.

Enables: Label each conference solution with name from calendar_events.conferenceData.conferenceSolution.name; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports name as display text for each conference solution; names are mutable and are not stable identities.

Create Request

Developer identifier: calendar_events.conferenceData.createRequestCreate Request. A request to generate a new conference and attach it to the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute create request in calendar_events.conferenceData.createRequest to the parent calendar event; identify parent records where that nested create request object is absent.
Interpretation: Google Workspace reports create request as a nested object on each conference data; optional children may be absent from a valid response.

Conference Solution Key

Developer identifier: calendar_events.conferenceData.createRequest.conferenceSolutionKeyConference Solution Key. The conference solution key type. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute conference solution key in calendar_events.conferenceData.createRequest.conferenceSolutionKey to the parent calendar event; identify parent records where that nested conference solution key object is absent.
Interpretation: Google Workspace reports conference solution key as a nested object on each conference create request; optional children may be absent from a valid response.

Request ID

Developer identifier: calendar_events.conferenceData.createRequest.requestIdRequest ID. The client-generated unique ID for this request. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each conference create request in Calendar Events to the referenced request through calendar_events.conferenceData.createRequest.requestId; flag request ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports request ID as an identifier in its request namespace; it is not a universal identity outside Google Workspace.

Status

Developer identifier: calendar_events.conferenceData.createRequest.statusStatus. The status of the conference create request. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute status in calendar_events.conferenceData.createRequest.status to the parent calendar event; identify parent records where that nested status object is absent.
Interpretation: Google Workspace reports status as a nested object on each conference create request; optional children may be absent from a valid response.

Status Code

Developer identifier: calendar_events.conferenceData.createRequest.status.statusCodeStatus Code. The current status of the conference create request. It distinguishes the provider-defined status code state or classification for the conference request status.

Enables: Segment conference request status entries in Calendar Events by status code in calendar_events.conferenceData.createRequest.status.statusCode; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports status code as a label from its own taxonomy on each conference request status; preserve unknown labels rather than mapping them by assumption.

Entry Points

Developer identifier: calendar_events.conferenceData.entryPointsEntry Points. Information about individual conference entry points. It preserves the nested context needed to interpret the parent calendar event.

Enables: Compare the exact Google Workspace-configured entry points set in calendar_events.conferenceData.entryPoints for each conference data; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns entry points as an array of conference entry point entries on each conference data; missing, empty, and permission-redacted arrays are not equivalent.

Access Code

Developer identifier: calendar_events.conferenceData.entryPoints.accessCodeAccess Code. The access code to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

Enables: Reconcile calendar_events.conferenceData.entryPoints.accessCode with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
Interpretation: Google Workspace returns access code as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.

Entry Point Type

Developer identifier: calendar_events.conferenceData.entryPoints.entryPointTypeEntry Point Type. The type of the conference entry point. It distinguishes the provider-defined entry point type state or classification for the conference entry point.

Enables: Segment conference entry point entries in Calendar Events by entry point type in calendar_events.conferenceData.entryPoints.entryPointType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports entry point type as a label from its own taxonomy on each conference entry point; preserve unknown labels rather than mapping them by assumption.

Label

Developer identifier: calendar_events.conferenceData.entryPoints.labelLabel. The label for the URI, such as a phone number. It locates the provider resource or path associated with the conference entry point.

Enables: Label each conference entry point with label from calendar_events.conferenceData.entryPoints.label; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports label as display text for each conference entry point; names are mutable and are not stable identities.

Meeting Code

Developer identifier: calendar_events.conferenceData.entryPoints.meetingCodeMeeting Code. The meeting code to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

Enables: Reconcile calendar_events.conferenceData.entryPoints.meetingCode with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
Interpretation: Google Workspace returns meeting code as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.

Passcode

Developer identifier: calendar_events.conferenceData.entryPoints.passcodePasscode. The passcode to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

Enables: Reconcile calendar_events.conferenceData.entryPoints.passcode with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
Interpretation: Google Workspace returns passcode as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.

Password

Developer identifier: calendar_events.conferenceData.entryPoints.passwordPassword. The password to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

Enables: Reconcile calendar_events.conferenceData.entryPoints.password with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
Interpretation: Google Workspace returns password as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.

Developer identifier: calendar_events.conferenceData.entryPoints.pinPin. The PIN to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

Enables: Reconcile calendar_events.conferenceData.entryPoints.pin with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
Interpretation: Google Workspace returns pin as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.

URI

Developer identifier: calendar_events.conferenceData.entryPoints.uriURI. The URI of the entry point. It locates the provider resource or path associated with the conference entry point.

Enables: Associate each conference entry point with the resource identified by URI in calendar_events.conferenceData.entryPoints.uri; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports URI as a resource locator for each conference entry point; access still depends on viewer permissions and the URL may expire or change.

Notes

Developer identifier: calendar_events.conferenceData.notesNotes. Additional notes to display to the user about the conference. It supplies the returned notes text needed to understand the conference data in context.

Enables: Search the returned notes text in calendar_events.conferenceData.notes and attribute each match to its parent calendar event and reported author when available.
Interpretation: Google Workspace supplies notes as returned text on each conference data; truncation, formatting, and access boundaries can limit completeness.

Parameters

Developer identifier: calendar_events.conferenceData.parametersParameters. Provider add-on parameters attached to the conference data. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute parameters in calendar_events.conferenceData.parameters to the parent calendar event; identify parent records where that nested parameters object is absent.
Interpretation: Google Workspace reports parameters as a nested object on each conference data; optional children may be absent from a valid response.

Add On Parameters

Developer identifier: calendar_events.conferenceData.parameters.addOnParametersAdd On Parameters. Parameters supplied by a conference add-on. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute add on parameters in calendar_events.conferenceData.parameters.addOnParameters to the parent calendar event; identify parent records where that nested add on parameters object is absent.
Interpretation: Google Workspace reports add on parameters as a nested object on each conference parameter; optional children may be absent from a valid response.

Parameters

Developer identifier: calendar_events.conferenceData.parameters.addOnParameters.parametersParameters. Conference add-on parameter values. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute parameters in calendar_events.conferenceData.parameters.addOnParameters.parameters to the parent calendar event; identify parent records where that nested parameters object is absent.
Interpretation: Google Workspace reports parameters as a nested object on each conference add on parameter; optional children may be absent from a valid response.

Meeting UUID

Developer identifier: calendar_events.conferenceData.parameters.addOnParameters.parameters.meetingUuidMeeting UUID. Provider-specific meeting instance UUID, observed on Zoom add-on events. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each conference add on parameter value in Calendar Events to the referenced meeting through calendar_events.conferenceData.parameters.addOnParameters.parameters.meetingUuid; flag meeting UUID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports meeting UUID as an identifier in its meeting namespace; it is not a universal identity outside Google Workspace.

Real Meeting ID

Developer identifier: calendar_events.conferenceData.parameters.addOnParameters.parameters.realMeetingIdReal Meeting ID. Provider-specific meeting ID, observed on Zoom add-on events. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each conference add on parameter value in Calendar Events to the referenced real meeting through calendar_events.conferenceData.parameters.addOnParameters.parameters.realMeetingId; flag real meeting ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports real meeting ID as an identifier in its real meeting namespace; it is not a universal identity outside Google Workspace.

Signature

Developer identifier: calendar_events.conferenceData.signatureSignature. The signature of the conference data. It identifies the related provider object that gives the conference data its parent, owner, or container context.

Enables: Connect each conference data to the related signature in calendar_events.conferenceData.signature and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports signature as relationship context on each conference data; resolve it in the named provider namespace rather than by display text alone.

Created

Developer identifier: calendar_events.createdCreated. Creation time of the event (RFC3339). It anchors the calendar event on the provider’s reported timeline.

Enables: Order Calendar Events by created in calendar_events.created and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports created as a timestamp on each calendar event; timezone and precision follow this API field, and absence is not an inferred event time.

Creator

Developer identifier: calendar_events.creatorCreator. The creator of the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute creator in calendar_events.creator to the parent calendar event; identify parent records where that nested creator object is absent.
Interpretation: Google Workspace reports creator as a nested object on each calendar event; optional children may be absent from a valid response.

Display Name

Developer identifier: calendar_events.creator.displayNameDisplay Name. The creator’s name, if available. It distinguishes the provider-defined display name state or classification for the event person.

Enables: Label each event person with display name from calendar_events.creator.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each event person; names are mutable and are not stable identities.

Developer identifier: calendar_events.creator.emailEmail. The creator’s email address. It supplies the provider-reported address or location facet for the event person, not a residency determination.

Enables: Attribute each event person to a person or account by the exact email in calendar_events.creator.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each event person; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Developer identifier: calendar_events.creator.idID. The creator’s profile ID, if available. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each event person in Calendar Events to the referenced event person through calendar_events.creator.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports ID as an identifier in its event person namespace; it is not a universal identity outside Google Workspace.

Self

Developer identifier: calendar_events.creator.selfSelf. Whether the creator corresponds to the calendar on which this event appears. It distinguishes the provider-defined self state or classification for the event person.

Enables: Filter Calendar Events by whether the creator corresponds to the calendar on which this event appears in calendar_events.creator.self; count true, false, and missing results separately.
Interpretation: Google Workspace reports the creator corresponds to the calendar on which this event appears as a boolean on each event person; a missing field is unknown, not false.

Description

Developer identifier: calendar_events.descriptionDescription. Description of the event, may contain HTML. It defines the content surface available for this calendar event.

Enables: Locate calendar event records by description in calendar_events.description; attribute each text match to its parent calendar event and, when present, its reported author.
Interpretation: Google Workspace supplies description as text on each calendar event; referenced files or media are not implied unless explicitly represented.

End

Developer identifier: calendar_events.endEnd. The end time of the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute end in calendar_events.end to the parent calendar event; identify parent records where that nested end object is absent.
Interpretation: Google Workspace reports end as a nested object on each calendar event; optional children may be absent from a valid response.

Date

Developer identifier: calendar_events.end.dateDate. The date, in YYYY-MM-DD format, if this is an all-day event. It anchors the calendar event on the provider’s reported timeline.

Enables: Order Calendar Events by date in calendar_events.end.date and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports date as a calendar date on each event date time; its grain is one day and no time of day should be inferred.

Date Time

Developer identifier: calendar_events.end.dateTimeDate Time. The time, as a combined date-time value (RFC3339). A time zone offset is required unless a time zone is explicitly specified in timeZone. It anchors the calendar event on the provider’s reported timeline.

Enables: Order Calendar Events by date time in calendar_events.end.dateTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports date time as a timestamp on each event date time; timezone and precision follow this API field, and absence is not an inferred event time.

Time Zone

Developer identifier: calendar_events.end.timeZoneTime Zone. The time zone in which the time is specified (IANA Time Zone Database name). It is needed to interpret companion dates and times for the event date time in the provider’s intended zone.

Enables: Apply the zone in calendar_events.end.timeZone when converting the calendar event’s companion start, end, or scheduled timestamps; do not infer it from locale.
Interpretation: Google Workspace reports time zone as a timezone identifier for each event date time; supported IANA or provider-specific names and daylight-saving behavior must be preserved.

End Time Unspecified

Developer identifier: calendar_events.endTimeUnspecifiedEnd Time Unspecified. Whether the end time is actually unspecified. It distinguishes the provider-defined end time unspecified state or classification for the calendar event.

Enables: Filter Calendar Events by whether the end time is actually unspecified in calendar_events.endTimeUnspecified; count true, false, and missing results separately.
Interpretation: Google Workspace reports the end time is actually unspecified as a boolean on each calendar event; a missing field is unknown, not false.

ETag

Developer identifier: calendar_events.etagETag. ETag of the resource. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Use calendar_events.etag for conditional provider reads and revision checks; pair the ETag with the calendar event ID rather than joining on it.
Interpretation: Google Workspace returns this ETag as an opaque revision token for each calendar event; it can change when the resource changes and is not a universal identifier.

Event Type

Developer identifier: calendar_events.eventTypeEvent Type. Specific type of the event. It distinguishes the provider-defined event type state or classification for the calendar event.

Enables: Segment calendar event entries in Calendar Events by event type in calendar_events.eventType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports event type as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.

Extended Properties

Developer identifier: calendar_events.extendedPropertiesExtended Properties. Extended properties of the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute extended properties in calendar_events.extendedProperties to the parent calendar event; identify parent records where that nested extended properties object is absent.
Interpretation: Google Workspace reports extended properties as a nested object on each calendar event; optional children may be absent from a valid response.

Private

Developer identifier: calendar_events.extendedProperties.privatePrivate. Properties that are private to the copy of the event that appears on this calendar. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute private in calendar_events.extendedProperties.private to the parent calendar event; identify parent records where that nested private object is absent.
Interpretation: Google Workspace reports private as a nested object on each event extended property; optional children may be absent from a valid response.

Shared

Developer identifier: calendar_events.extendedProperties.sharedShared. Properties that are shared between copies of the event on other attendees’ calendars. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute shared in calendar_events.extendedProperties.shared to the parent calendar event; identify parent records where that nested shared object is absent.
Interpretation: Google Workspace reports shared as a nested object on each event extended property; optional children may be absent from a valid response.

Focus Time Properties

Developer identifier: calendar_events.focusTimePropertiesFocus Time Properties. Focus-time payload, present when eventType is focusTime. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute focus time properties in calendar_events.focusTimeProperties to the parent calendar event; identify parent records where that nested focus time properties object is absent.
Interpretation: Google Workspace reports focus time properties as a nested object on each calendar event; optional children may be absent from a valid response.

Auto Decline Mode

Developer identifier: calendar_events.focusTimeProperties.autoDeclineModeAuto Decline Mode. How meeting invitations are auto-declined during focus time. It distinguishes the provider-defined auto decline mode state or classification for the event focus time.

Enables: Segment event focus time entries in Calendar Events by auto decline mode in calendar_events.focusTimeProperties.autoDeclineMode; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports auto decline mode as a label from its own taxonomy on each event focus time; preserve unknown labels rather than mapping them by assumption.

Chat Status

Developer identifier: calendar_events.focusTimeProperties.chatStatusChat Status. Chat/presence status applied during focus time. It distinguishes the provider-defined chat status state or classification for the event focus time.

Enables: Segment event focus time entries in Calendar Events by chat status in calendar_events.focusTimeProperties.chatStatus; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports chat status as a label from its own taxonomy on each event focus time; preserve unknown labels rather than mapping them by assumption.

Decline Message

Developer identifier: calendar_events.focusTimeProperties.declineMessageDecline Message. Message sent when an invitation is auto-declined. It supplies the returned decline message text needed to understand the event focus time in context.

Enables: Search the returned decline message text in calendar_events.focusTimeProperties.declineMessage and attribute each match to its parent calendar event and reported author when available.
Interpretation: Google Workspace supplies decline message as returned text on each event focus time; truncation, formatting, and access boundaries can limit completeness.

Gadget

Developer identifier: calendar_events.gadgetGadget. A gadget that extends this event (deprecated). It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute gadget in calendar_events.gadget to the parent calendar event; identify parent records where that nested gadget object is absent.
Interpretation: Google Workspace reports gadget as a nested object on each calendar event; optional children may be absent from a valid response.

Display

Developer identifier: calendar_events.gadget.displayDisplay. The gadget’s display mode. It distinguishes the provider-defined display state or classification for the event gadget.

Enables: Filter Calendar Events by the exact Google Workspace-defined display in calendar_events.gadget.display and preserve unknown values as distinct categories.
Interpretation: Google Workspace supplies display from its own taxonomy on each event gadget; preserve unknown and newly introduced labels.

Height

Developer identifier: calendar_events.gadget.heightHeight. The gadget’s height in pixels. It supplies the height measure for the event gadget at the provider’s declared unit and grain.

Enables: Measure height through calendar_events.gadget.height for each event gadget and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports height as a measure on each event gadget; compare only records with the same unit and aggregation grain.

Icon Link

Developer identifier: calendar_events.gadget.iconLinkIcon Link. The gadget’s icon URL. It locates the provider resource or path associated with the event gadget.

Enables: Associate each event gadget with the resource identified by icon link in calendar_events.gadget.iconLink; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports icon link as a resource locator for each event gadget; access still depends on viewer permissions and the URL may expire or change.

Link

Developer identifier: calendar_events.gadget.linkLink. The gadget’s URL. It locates the provider resource or path associated with the event gadget.

Enables: Associate each event gadget with the resource identified by link in calendar_events.gadget.link; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports link as a resource locator for each event gadget; access still depends on viewer permissions and the URL may expire or change.

Preferences

Developer identifier: calendar_events.gadget.preferencesPreferences. Preferences for the gadget. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute preferences in calendar_events.gadget.preferences to the parent calendar event; identify parent records where that nested preferences object is absent.
Interpretation: Google Workspace reports preferences as a nested object on each event gadget; optional children may be absent from a valid response.

Title

Developer identifier: calendar_events.gadget.titleTitle. The gadget’s title. It gives the event gadget a human-readable provider label while its identifier remains the stable reference.

Enables: Label each event gadget with title from calendar_events.gadget.title; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports title as display text for each event gadget; names are mutable and are not stable identities.

Type

Developer identifier: calendar_events.gadget.typeType. The gadget’s type. It distinguishes the provider-defined type state or classification for the event gadget.

Enables: Segment event gadget entries in Calendar Events by type in calendar_events.gadget.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each event gadget; preserve unknown labels rather than mapping them by assumption.

Width

Developer identifier: calendar_events.gadget.widthWidth. The gadget’s width in pixels. It supplies the width measure for the event gadget at the provider’s declared unit and grain.

Enables: Measure width through calendar_events.gadget.width for each event gadget and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports width as a measure on each event gadget; compare only records with the same unit and aggregation grain.

Guests Can Invite Others

Developer identifier: calendar_events.guestsCanInviteOthersGuests Can Invite Others. Whether attendees other than the organizer can invite others. It distinguishes the provider-defined guests can invite others state or classification for the calendar event.

Enables: Filter Calendar Events by whether attendees other than the organizer can invite others in calendar_events.guestsCanInviteOthers; count true, false, and missing results separately.
Interpretation: Google Workspace reports attendees other than the organizer can invite others as a boolean on each calendar event; a missing field is unknown, not false.

Guests Can Modify

Developer identifier: calendar_events.guestsCanModifyGuests Can Modify. Whether attendees other than the organizer can modify the event. It distinguishes the provider-defined guests can modify state or classification for the calendar event.

Enables: Filter Calendar Events by whether attendees other than the organizer can modify the event in calendar_events.guestsCanModify; count true, false, and missing results separately.
Interpretation: Google Workspace reports attendees other than the organizer can modify the event as a boolean on each calendar event; a missing field is unknown, not false.

Guests Can See Other Guests

Developer identifier: calendar_events.guestsCanSeeOtherGuestsGuests Can See Other Guests. Whether attendees other than the organizer can see who the event’s attendees are. It distinguishes the provider-defined guests can see other guests state or classification for the calendar event.

Enables: Filter Calendar Events by whether attendees other than the organizer can see who the event’s attendees are in calendar_events.guestsCanSeeOtherGuests; count true, false, and missing results separately.
Interpretation: Google Workspace reports attendees other than the organizer can see who the event’s attendees are as a boolean on each calendar event; a missing field is unknown, not false.

Hangout Link

Developer identifier: calendar_events.hangoutLinkHangout Link. URL for the Google Hangouts link attached to the event. It locates the provider resource or path associated with the calendar event.

Enables: Associate each calendar event with the resource identified by hangout link in calendar_events.hangoutLink; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports hangout link as a resource locator for each calendar event; access still depends on viewer permissions and the URL may expire or change.

HTML Link

Developer identifier: calendar_events.htmlLinkHTML Link. URL link to the event in Google Calendar. It locates the provider resource or path associated with the calendar event.

Enables: Associate each calendar event with the resource identified by html link in calendar_events.htmlLink; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports html link as a resource locator for each calendar event; access still depends on viewer permissions and the URL may expire or change.

I Cal UID

Developer identifier: calendar_events.iCalUIDI Cal UID. Event unique identifier as defined in RFC5545, used to uniquely identify events across calendaring systems. It identifies the related provider object that gives the calendar event its parent, owner, or container context.

Enables: Connect each calendar event to the related i cal uid in calendar_events.iCalUID and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports i cal uid as relationship context on each calendar event; resolve it in the named provider namespace rather than by display text alone.

Developer identifier: calendar_events.idID. Opaque identifier of the event. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Match repeated calendar event entries on ID in calendar_events.id. Only entries that share this key are the same record.
Interpretation: Google Workspace reports ID as an identifier in its calendar event namespace; it is not a universal identity outside Google Workspace. It is the record key.

Kind

Developer identifier: calendar_events.kindKind. Type of the resource, always ‘calendar#event’. It identifies the related provider object that gives the calendar event its parent, owner, or container context.

Enables: Segment calendar event entries in Calendar Events by kind in calendar_events.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.

Location

Developer identifier: calendar_events.locationLocation. Geographic location of the event as free-form text. It supplies the provider-reported address or location facet for the calendar event, not a residency determination.

Enables: Group Calendar Events by location in calendar_events.location without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Google Workspace reports location as a user, device, request, or resource location attribute on each calendar event; it does not establish where data is stored or processed.

Locked

Developer identifier: calendar_events.lockedLocked. Whether this is a locked event copy where no changes can be made. It distinguishes the provider-defined locked state or classification for the calendar event.

Enables: Filter Calendar Events by whether this is a locked event copy where no changes can be made in calendar_events.locked; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is a locked event copy where no changes can be made as a boolean on each calendar event; a missing field is unknown, not false.

Organizer

Developer identifier: calendar_events.organizerOrganizer. The organizer of the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute organizer in calendar_events.organizer to the parent calendar event; identify parent records where that nested organizer object is absent.
Interpretation: Google Workspace reports organizer as a nested object on each calendar event; optional children may be absent from a valid response.

Display Name

Developer identifier: calendar_events.organizer.displayNameDisplay Name. The organizer’s name, if available. It distinguishes the provider-defined display name state or classification for the event organizer.

Enables: Label each event organizer with display name from calendar_events.organizer.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each event organizer; names are mutable and are not stable identities.

Developer identifier: calendar_events.organizer.emailEmail. The organizer’s email address. It supplies the provider-reported address or location facet for the event organizer, not a residency determination.

Enables: Attribute each event organizer to a person or account by the exact email in calendar_events.organizer.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each event organizer; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Developer identifier: calendar_events.organizer.idID. The organizer’s profile ID, if available. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each event organizer in Calendar Events to the referenced event organizer through calendar_events.organizer.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports ID as an identifier in its event organizer namespace; it is not a universal identity outside Google Workspace.

Self

Developer identifier: calendar_events.organizer.selfSelf. Whether the organizer corresponds to the calendar on which this event appears. It distinguishes the provider-defined self state or classification for the event organizer.

Enables: Filter Calendar Events by whether the organizer corresponds to the calendar on which this event appears in calendar_events.organizer.self; count true, false, and missing results separately.
Interpretation: Google Workspace reports the organizer corresponds to the calendar on which this event appears as a boolean on each event organizer; a missing field is unknown, not false.

Original Start Time

Developer identifier: calendar_events.originalStartTimeOriginal Start Time. For an instance of a recurring event, the original start time of the instance in the recurrence. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute original start time in calendar_events.originalStartTime to the parent calendar event; identify parent records where that nested original start time object is absent.
Interpretation: Google Workspace reports original start time as a nested object on each calendar event; optional children may be absent from a valid response.

Out Of Office Properties

Developer identifier: calendar_events.outOfOfficePropertiesOut Of Office Properties. Out-of-office payload, present when eventType is outOfOffice. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute out of office properties in calendar_events.outOfOfficeProperties to the parent calendar event; identify parent records where that nested out of office properties object is absent.
Interpretation: Google Workspace reports out of office properties as a nested object on each calendar event; optional children may be absent from a valid response.

Auto Decline Mode

Developer identifier: calendar_events.outOfOfficeProperties.autoDeclineModeAuto Decline Mode. How meeting invitations are auto-declined during the out-of-office period. It distinguishes the provider-defined auto decline mode state or classification for the event out of office.

Enables: Segment event out of office entries in Calendar Events by auto decline mode in calendar_events.outOfOfficeProperties.autoDeclineMode; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports auto decline mode as a label from its own taxonomy on each event out of office; preserve unknown labels rather than mapping them by assumption.

Decline Message

Developer identifier: calendar_events.outOfOfficeProperties.declineMessageDecline Message. Message sent when an invitation is auto-declined. It supplies the returned decline message text needed to understand the event out of office in context.

Enables: Search the returned decline message text in calendar_events.outOfOfficeProperties.declineMessage and attribute each match to its parent calendar event and reported author when available.
Interpretation: Google Workspace supplies decline message as returned text on each event out of office; truncation, formatting, and access boundaries can limit completeness.

Primary Email

Developer identifier: calendar_events.primaryEmailPrimary Email. Parent primary email reference copied into each calendar event because the child operation does not return that relationship. It identifies the related provider object that gives the calendar event its parent, owner, or container context.

Enables: Attribute each calendar event to a person or account by the exact primary email in calendar_events.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each calendar event; the child Google Workspace operation does not return it.

Private Copy

Developer identifier: calendar_events.privateCopyPrivate Copy. Whether this is a private event copy where changes are not shared with other copies. It distinguishes the provider-defined private copy state or classification for the calendar event.

Enables: Filter Calendar Events by whether this is a private event copy where changes are not shared with other copies in calendar_events.privateCopy; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is a private event copy where changes are not shared with other copies as a boolean on each calendar event; a missing field is unknown, not false.

Recurrence

Developer identifier: calendar_events.recurrenceRecurrence. List of RRULE, EXRULE, RDATE, and EXDATE lines for a recurring event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Compare the exact Google Workspace-configured recurrence set in calendar_events.recurrence for each calendar event; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns recurrence as an array of recurrence value entries on each calendar event; missing, empty, and permission-redacted arrays are not equivalent.

Recurring Event ID

Developer identifier: calendar_events.recurringEventIdRecurring Event ID. For an instance of a recurring event, the ID of the recurring event to which this instance belongs. It provides the reference needed to connect the calendar event to the corresponding provider object.

Enables: Connect each calendar event in Calendar Events to the referenced recurring event through calendar_events.recurringEventId; flag recurring event ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports recurring event ID as an identifier in its recurring event namespace; it is not a universal identity outside Google Workspace.

Reminders

Developer identifier: calendar_events.remindersReminders. Information about the event’s reminders. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute reminders in calendar_events.reminders to the parent calendar event; identify parent records where that nested reminders object is absent.
Interpretation: Google Workspace reports reminders as a nested object on each calendar event; optional children may be absent from a valid response.

Overrides

Developer identifier: calendar_events.reminders.overridesOverrides. If the event doesn’t use the default reminders, this lists the reminders specific to the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Compare the exact Google Workspace-configured overrides set in calendar_events.reminders.overrides for each event reminder; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns overrides as an array of reminder override entries on each event reminder; missing, empty, and permission-redacted arrays are not equivalent.

Method

Developer identifier: calendar_events.reminders.overrides.methodMethod. The method used by this reminder. It distinguishes the provider-defined method state or classification for the reminder override.

Enables: Segment reminder override entries in Calendar Events by method in calendar_events.reminders.overrides.method; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports method as a label from its own taxonomy on each reminder override; preserve unknown labels rather than mapping them by assumption.

Minutes

Developer identifier: calendar_events.reminders.overrides.minutesMinutes. Number of minutes before the start of the event when the reminder should trigger. It supplies the minutes measure for the reminder override at the provider’s declared unit and grain.

Enables: Measure minutes through calendar_events.reminders.overrides.minutes for each reminder override and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports minutes as a measure on each reminder override; compare only records with the same unit and aggregation grain.

Use Default

Developer identifier: calendar_events.reminders.useDefaultUse Default. Whether the default reminders of the calendar apply to the event. It distinguishes the provider-defined use default state or classification for the event reminder.

Enables: Filter Calendar Events by whether the default reminders of the calendar apply to the event in calendar_events.reminders.useDefault; count true, false, and missing results separately.
Interpretation: Google Workspace reports the default reminders of the calendar apply to the event as a boolean on each event reminder; a missing field is unknown, not false.

Sequence

Developer identifier: calendar_events.sequenceSequence. iCalendar revision number for this event; needed to distinguish successive revisions without treating the field as an event count.

Enables: Order revisions of the same calendar event by calendar_events.sequence together with the event ID and updated timestamp.
Interpretation: Google Workspace reports an integer iCalendar revision counter. A higher value identifies a later revision of that event; it is not elapsed time or a business quantity.

Source

Developer identifier: calendar_events.sourceSource. Source from which the event was created. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute source in calendar_events.source to the parent calendar event; identify parent records where that nested source object is absent.
Interpretation: Google Workspace reports source as a nested object on each calendar event; optional children may be absent from a valid response.

Title

Developer identifier: calendar_events.source.titleTitle. Title of the source, e.g., a title of a web page or an email subject. It supplies the returned title text needed to understand the event source in context.

Enables: Label each event source with title from calendar_events.source.title; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports title as display text for each event source; names are mutable and are not stable identities.

URL

Developer identifier: calendar_events.source.urlURL. URL of the source pointing to a resource. It locates the provider resource or path associated with the event source.

Enables: Associate each event source with the resource identified by URL in calendar_events.source.url; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports URL as a resource locator for each event source; access still depends on viewer permissions and the URL may expire or change.

Start

Developer identifier: calendar_events.startStart. The start time of the event. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute start in calendar_events.start to the parent calendar event; identify parent records where that nested start object is absent.
Interpretation: Google Workspace reports start as a nested object on each calendar event; optional children may be absent from a valid response.

Status

Developer identifier: calendar_events.statusStatus. Status of the event. It distinguishes the provider-defined status state or classification for the calendar event.

Enables: Segment calendar event entries in Calendar Events by status in calendar_events.status; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports status as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.

Summary

Developer identifier: calendar_events.summarySummary. Title of the event. It defines the content surface available for this calendar event.

Enables: Locate calendar event records by summary in calendar_events.summary; attribute each text match to its parent calendar event and, when present, its reported author.
Interpretation: Google Workspace supplies summary as text on each calendar event; referenced files or media are not implied unless explicitly represented. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.

Transparency

Developer identifier: calendar_events.transparencyTransparency. Whether the event blocks time on the calendar. It distinguishes the provider-defined transparency state or classification for the calendar event.

Enables: Segment calendar event entries in Calendar Events by transparency in calendar_events.transparency; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports transparency as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.

Updated

Developer identifier: calendar_events.updatedUpdated. Last modification time of the event (RFC3339). It anchors the calendar event on the provider’s reported timeline.

Enables: Order Calendar Events by updated in calendar_events.updated and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports updated as a timestamp on each calendar event; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record.

Visibility

Developer identifier: calendar_events.visibilityVisibility. Visibility of the event. It distinguishes the provider-defined visibility state or classification for the calendar event.

Enables: Segment calendar event entries in Calendar Events by visibility in calendar_events.visibility; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports visibility as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.

Working Location Properties

Developer identifier: calendar_events.workingLocationPropertiesWorking Location Properties. Working-location payload, present when eventType is workingLocation. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute working location properties in calendar_events.workingLocationProperties to the parent calendar event; identify parent records where that nested working location properties object is absent.
Interpretation: Google Workspace reports working location properties as a nested object on each calendar event; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.

Custom Location

Developer identifier: calendar_events.workingLocationProperties.customLocationCustom Location. Free-form custom working location, with a label. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute custom location in calendar_events.workingLocationProperties.customLocation to the parent calendar event; identify parent records where that nested custom location object is absent.
Interpretation: Google Workspace reports custom location as a nested object on each event working location; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.

Home Office

Developer identifier: calendar_events.workingLocationProperties.homeOfficeHome Office. Present (empty) when the user is working from home. It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute home office in calendar_events.workingLocationProperties.homeOffice to the parent calendar event; identify parent records where that nested home office object is absent.
Interpretation: Google Workspace reports home office as a nested object on each event working location; optional children may be absent from a valid response.

Office Location

Developer identifier: calendar_events.workingLocationProperties.officeLocationOffice Location. Structured office location (buildingId, floorId, floorSectionId, deskId, label). It preserves the nested context needed to interpret the parent calendar event.

Enables: Attribute office location in calendar_events.workingLocationProperties.officeLocation to the parent calendar event; identify parent records where that nested office location object is absent.
Interpretation: Google Workspace reports office location as a nested object on each event working location; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.

Type

Developer identifier: calendar_events.workingLocationProperties.typeType. Working-location type (homeOffice, officeLocation, or customLocation). It supplies the provider-reported address or location facet for the event working location, not a residency determination.

Enables: Segment event working location entries in Calendar Events by type in calendar_events.workingLocationProperties.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each event working location; preserve unknown labels rather than mapping them by assumption.

Calendars

Developer identifier: calendarsCalendars. User calendars.

Enables: Inventory calendars visible to each delegated user and compare access role, ownership, visibility, and synchronization state.
Scope: Reads every record from Google Workspace’s https://www.googleapis.com/calendar/v3/users/me/calendarList operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. Removal is recognized from the provider’s tombstone state rather than absence alone.

Access Role

Developer identifier: calendars.accessRoleAccess Role. The effective access role that the authenticated user has on the calendar. It distinguishes the provider-defined access role state or classification for the calendar.

Enables: Segment calendar entries in Calendars by access role in calendars.accessRole; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports access role as a label from its own taxonomy on each calendar; preserve unknown labels rather than mapping them by assumption.

Background Color

Developer identifier: calendars.backgroundColorBackground Color. The main color of the calendar in hexadecimal format (e.g., ‘#0088aa’). It identifies the related provider object that gives the calendar its parent, owner, or container context.

Enables: Connect each calendar to the related background color in calendars.backgroundColor and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports background color as relationship context on each calendar; resolve it in the named provider namespace rather than by display text alone.

Color ID

Developer identifier: calendars.colorIdColor ID. The color ID of the calendar, referring to an entry in the calendar color definitions. It provides the reference needed to connect the calendar to the corresponding provider object.

Enables: Connect each calendar in Calendars to the referenced color through calendars.colorId; flag color ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports color ID as an identifier in its color namespace; it is not a universal identity outside Google Workspace.

Conference Properties

Developer identifier: calendars.conferencePropertiesConference Properties. Conferencing properties for this calendar. It preserves the nested context needed to interpret the parent calendar.

Enables: Attribute conference properties in calendars.conferenceProperties to the parent calendar; identify parent records where that nested conference properties object is absent.
Interpretation: Google Workspace reports conference properties as a nested object on each calendar; optional children may be absent from a valid response.

Allowed Conference Solution Types

Developer identifier: calendars.conferenceProperties.allowedConferenceSolutionTypesAllowed Conference Solution Types. The types of conference solutions that are supported for this calendar. It preserves the nested context needed to interpret the parent calendar.

Enables: Compare the exact Google Workspace-configured allowed conference solution types set in calendars.conferenceProperties.allowedConferenceSolutionTypes for each calendar conference property; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns allowed conference solution types as an array of allowed conference solution type value entries on each calendar conference property; missing, empty, and permission-redacted arrays are not equivalent.

Default Reminders

Developer identifier: calendars.defaultRemindersDefault Reminders. The default reminders that the authenticated user has for this calendar. It preserves the nested context needed to interpret the parent calendar.

Enables: Compare the exact Google Workspace-configured default reminders set in calendars.defaultReminders for each calendar; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns default reminders as an array of calendar reminder entries on each calendar; missing, empty, and permission-redacted arrays are not equivalent.

Method

Developer identifier: calendars.defaultReminders.methodMethod. The method used by this reminder (email or popup). It distinguishes the provider-defined method state or classification for the calendar reminder.

Enables: Match repeated calendar reminder entries on method in calendars.defaultReminders.method. Only entries that share this key are the same record.
Interpretation: Google Workspace reports method as a label from its own taxonomy on each calendar reminder; preserve unknown labels rather than mapping them by assumption. It is the key of this nested record.

Minutes

Developer identifier: calendars.defaultReminders.minutesMinutes. Number of minutes before the start of the event when the reminder should trigger. It supplies the minutes measure for the calendar reminder at the provider’s declared unit and grain.

Enables: Match repeated calendar reminder entries on minutes in calendars.defaultReminders.minutes. Only entries that share this key are the same record.
Interpretation: Google Workspace reports minutes as minutes on each calendar reminder; compare only records with the same unit and aggregation grain. It is the key of this nested record.

Deleted

Developer identifier: calendars.deletedDeleted. Whether this calendar list entry has been removed from the calendar list. It distinguishes the provider-defined deleted state or classification for the calendar.

Enables: Filter Calendars by whether this calendar list entry has been removed from the calendar list in calendars.deleted; count true, false, and missing results separately.
Interpretation: Google Workspace reports this calendar list entry has been removed from the calendar list as a boolean on each calendar; a missing field is unknown, not false.

Description

Developer identifier: calendars.descriptionDescription. Description of the calendar. It defines the content surface available for this calendar.

Enables: Locate calendar records by description in calendars.description; attribute each text match to its parent calendar and, when present, its reported author.
Interpretation: Google Workspace supplies description as text on each calendar; referenced files or media are not implied unless explicitly represented.

ETag

Developer identifier: calendars.etagETag. ETag of the resource. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Use calendars.etag for conditional provider reads and revision checks; pair the ETag with the calendar ID rather than joining on it.
Interpretation: Google Workspace returns this ETag as an opaque revision token for each calendar; it can change when the resource changes and is not a universal identifier.

Foreground Color

Developer identifier: calendars.foregroundColorForeground Color. The foreground color of the calendar in hexadecimal format (e.g., ‘#ffffff’). It identifies the related provider object that gives the calendar its parent, owner, or container context.

Enables: Connect each calendar to the related foreground color in calendars.foregroundColor and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports foreground color as relationship context on each calendar; resolve it in the named provider namespace rather than by display text alone.

Hidden

Developer identifier: calendars.hiddenHidden. Whether the calendar has been hidden from the list. It distinguishes the provider-defined hidden state or classification for the calendar.

Enables: Filter Calendars by whether the calendar has been hidden from the list in calendars.hidden; count true, false, and missing results separately.
Interpretation: Google Workspace reports the calendar has been hidden from the list as a boolean on each calendar; a missing field is unknown, not false.

Developer identifier: calendars.idID. Unique identifier for the calendar. Usually an email address, but holiday/sports group calendars may include characters (e.g. #) that are not valid in Contact.Email. It provides the reference needed to connect the calendar to the corresponding provider object.

Enables: Match repeated calendar entries on ID in calendars.id. Only entries that share this key are the same record.
Interpretation: Google Workspace reports ID as an identifier in its calendar namespace; it is not a universal identity outside Google Workspace. It is the record key.

Kind

Developer identifier: calendars.kindKind. Type of the resource, always ‘calendar#calendarListEntry’. It identifies the related provider object that gives the calendar its parent, owner, or container context.

Enables: Segment calendar entries in Calendars by kind in calendars.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each calendar; preserve unknown labels rather than mapping them by assumption.

Location

Developer identifier: calendars.locationLocation. Geographic location of the calendar as free-form text. It supplies the provider-reported address or location facet for the calendar, not a residency determination.

Enables: Group Calendars by location in calendars.location without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Google Workspace reports location as a user, device, request, or resource location attribute on each calendar; it does not establish where data is stored or processed.

Notification Settings

Developer identifier: calendars.notificationSettingsNotification Settings. The notifications that the authenticated user is receiving for this calendar. It preserves the nested context needed to interpret the parent calendar.

Enables: Attribute notification settings in calendars.notificationSettings to the parent calendar; identify parent records where that nested notification settings object is absent.
Interpretation: Google Workspace reports notification settings as a nested object on each calendar; optional children may be absent from a valid response.

Notifications

Developer identifier: calendars.notificationSettings.notificationsNotifications. The list of notifications set for this calendar. It preserves the nested context needed to interpret the parent calendar.

Enables: Compare the exact Google Workspace-configured notifications set in calendars.notificationSettings.notifications for each calendar notification setting; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns notifications as an array of calendar notification entries on each calendar notification setting; missing, empty, and permission-redacted arrays are not equivalent.

Method

Developer identifier: calendars.notificationSettings.notifications.methodMethod. The method used to deliver the notification. It distinguishes the provider-defined method state or classification for the calendar notification.

Enables: Match repeated calendar notification entries on method in calendars.notificationSettings.notifications.method. Only entries that share this key are the same record.
Interpretation: Google Workspace reports method as a label from its own taxonomy on each calendar notification; preserve unknown labels rather than mapping them by assumption. It is the key of this nested record.

Type

Developer identifier: calendars.notificationSettings.notifications.typeType. The type of notification. It distinguishes the provider-defined type state or classification for the calendar notification.

Enables: Match repeated calendar notification entries on type in calendars.notificationSettings.notifications.type. Only entries that share this key are the same record.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each calendar notification; preserve unknown labels rather than mapping them by assumption. It is the key of this nested record.

Primary

Developer identifier: calendars.primaryPrimary. Whether the calendar is the primary calendar of the authenticated user. It distinguishes the provider-defined primary state or classification for the calendar.

Enables: Filter Calendars by whether the calendar is the primary calendar of the authenticated user in calendars.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports the calendar is the primary calendar of the authenticated user as a boolean on each calendar; a missing field is unknown, not false.

Primary Email

Developer identifier: calendars.primaryEmailPrimary Email. Parent primary email reference copied into each calendar because the child operation does not return that relationship. It identifies the related provider object that gives the calendar its parent, owner, or container context.

Enables: Attribute each calendar to a person or account by the exact primary email in calendars.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each calendar; the child Google Workspace operation does not return it.

Selected

Developer identifier: calendars.selectedSelected. Whether the calendar content shows up in the calendar UI. It distinguishes the provider-defined selected state or classification for the calendar.

Enables: Filter Calendars by whether the calendar content shows up in the calendar ui in calendars.selected; count true, false, and missing results separately.
Interpretation: Google Workspace reports the calendar content shows up in the calendar ui as a boolean on each calendar; a missing field is unknown, not false.

Summary

Developer identifier: calendars.summarySummary. Title of the calendar. It defines the content surface available for this calendar.

Enables: Locate calendar records by summary in calendars.summary; attribute each text match to its parent calendar and, when present, its reported author.
Interpretation: Google Workspace supplies summary as text on each calendar; referenced files or media are not implied unless explicitly represented. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.

Summary Override

Developer identifier: calendars.summaryOverrideSummary Override. The summary that the authenticated user has set for this calendar, overriding the calendar’s default summary. It defines the content surface available for this calendar.

Enables: Locate calendar records by summary override in calendars.summaryOverride; attribute each text match to its parent calendar and, when present, its reported author.
Interpretation: Google Workspace supplies summary override as text on each calendar; referenced files or media are not implied unless explicitly represented. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.

Time Zone

Developer identifier: calendars.timeZoneTime Zone. The time zone of the calendar (IANA timezone identifier). It is needed to interpret companion dates and times for the calendar in the provider’s intended zone.

Enables: Apply the zone in calendars.timeZone when converting the calendar’s companion start, end, or scheduled timestamps; do not infer it from locale.
Interpretation: Google Workspace reports time zone as a timezone identifier for each calendar; supported IANA or provider-specific names and daylight-saving behavior must be preserved.

Chat Space Messages

Developer identifier: chat_space_messagesChat Space Messages. Messages returned for a Google Chat space, excluding system messages such as new-member announcements.

Enables: Inspect message text, sender, thread, attachments, reactions, and provider timestamps within each collected space.
Scope: Reads spaces.messages.list incrementally by createTime with chat.messages.readonly; visibility follows the impersonated user and the Google Chat API response.

Annotations

Developer identifier: chat_space_messages.annotationsAnnotations. Preserves Google’s structured annotations for mentions, rich links, and other marked spans in the message text.

Enables: Interpret visible text spans with the provider metadata that describes them.
Interpretation: Entries retain dynamic Google JSON shapes and depend on message content and API projection; absence does not prove that the text has no semantic references.

Argument Text

Developer identifier: chat_space_messages.argumentTextArgument Text. Provides the plain-text message body after Google removes Chat app mentions.

Enables: Inspect command or argument content without the app-mention prefix.
Interpretation: Google derives this projection from the visible message; it may be empty or absent when the message is not addressed to a Chat app.

Attachments

Developer identifier: chat_space_messages.attachmentAttachments. Preserves the attachment payloads Google returns for the message.

Enables: Inspect visible user-uploaded files with the message that references them.
Interpretation: Entries retain dynamic Google JSON shapes; visibility follows the caller, and metadata presence does not mean file content was downloaded.

Cards V2

Developer identifier: chat_space_messages.cardsV2Cards V2. Preserves the Google Chat card payloads attached to the message.

Enables: Inspect visible structured card content together with its fallback text and parent message.
Interpretation: Entries retain dynamic Google JSON shapes; supported widgets and fields depend on the card producer and API version.

Client-assigned Message ID

Developer identifier: chat_space_messages.clientAssignedMessageIdClient-assigned Message ID. Provides the optional custom identifier supplied when the message was created.

Enables: Match a Chat message to the creating client’s own reference when one is present.
Interpretation: The client controls this value. It may be absent and is not the stream’s record key.

Created At

Developer identifier: chat_space_messages.createTimeCreated At. Records when Google reports the message was created.

Enables: Select incremental windows, order messages, and isolate messages within an exact interval.
Interpretation: Google returns an RFC3339 event timestamp; Parable uses it to find changed records and to keep the latest version of each record.

Deleted At

Developer identifier: chat_space_messages.deleteTimeDeleted At. Records when Google reports that the message was deleted.

Enables: Identify returned soft-deleted messages and place deletion on the provider timeline.
Interpretation: Google leaves the RFC3339 value empty for messages not reported as deleted; absence does not prove a message was never removed outside API visibility.

Deletion Metadata

Developer identifier: chat_space_messages.deletionMetadataDeletion Metadata. Preserves Google’s structured context for a deleted message.

Enables: Inspect the provider-reported deletion details alongside deleteTime.
Interpretation: The value retains a dynamic Google JSON shape and appears only when Google returns deletion context; absence is not proof that no deletion occurred.

Emoji Reaction Summaries

Developer identifier: chat_space_messages.emojiReactionSummariesEmoji Reaction Summaries. Preserves Google’s aggregate reaction payloads for the message.

Enables: Inspect which emoji reactions Google reports and their associated summary metadata.
Interpretation: Entries retain dynamic Google JSON shapes and summarize visible reactions; they do not establish sentiment or complete viewer participation.

Fallback Text

Developer identifier: chat_space_messages.fallbackTextFallback Text. Provides Google’s plain-text description of card content when cards cannot be displayed.

Enables: Inspect an accessible text substitute for visible card payloads.
Interpretation: The card author supplies this text; it may be absent and need not contain every detail present in cardsV2.

Formatted Text

Developer identifier: chat_space_messages.formattedTextFormatted Text. Provides message text with Google’s formatting, mention, and custom-link markup.

Enables: Inspect visible message content while preserving provider markup needed to interpret mentions and links.
Interpretation: The string uses Google Chat markup and may differ from plain text; rendering it safely requires treating it as provider content.

Last Updated At

Developer identifier: chat_space_messages.lastUpdateTimeLast Updated At. Records when Google reports the message was last edited by a user.

Enables: Distinguish messages with later edits and order provider-reported revisions by time.
Interpretation: Google leaves the RFC3339 value empty when the message was never edited; Parable does not use it to find changed records.

Markup Syntax

Developer identifier: chat_space_messages.markupSyntaxMarkup Syntax. Identifies how Google Chat interprets the message’s text field.

Enables: Select the correct parser or renderer for Chat markup versus Markdown.
Interpretation: This is Google’s syntax taxonomy; an unspecified value should not be inferred as either named syntax.

Matched URL

Developer identifier: chat_space_messages.matchedUrlMatched URL. Preserves Google’s metadata for a message URL that matched a link-preview pattern.

Enables: Connect visible link-preview context to the message text that produced it.
Interpretation: The value retains a dynamic Google JSON shape; a missing value does not prove that the message contains no links.

Message Resource Name

Developer identifier: chat_space_messages.nameMessage Resource Name. Identifies the message in Google’s Chat resource namespace.

Enables: Match repeated observations through spaces/{space}/messages/{message} and connect message-level metadata to the same record.
Interpretation: Google assigns this resource name. It is the record key of this stream only.

Parent User Email

Developer identifier: chat_space_messages.primaryEmailParent User Email. Identifies the Workspace user impersonated when Parable listed this message.

Enables: Attribute each collected message to the parent user whose users.primaryEmail drove the space and message requests.
Interpretation: Parable adds this value when it reads the record; Google Chat does not return it in spaces.messages.list, and an email address is mutable.

Private Message Viewer

Developer identifier: chat_space_messages.privateMessageViewerPrivate Message Viewer. Identifies the Google Chat user allowed to view a private message with the Chat app.

Enables: Interpret the provider-reported visibility boundary for private app messages.
Interpretation: Google may return a partial or anonymous user object; this field describes Chat visibility and does not grant Parable broader access.

Display Name

Developer identifier: chat_space_messages.privateMessageViewer.displayNameDisplay Name. Provides the human-readable name Google returns for a Chat user.

Enables: Present a sender or private-message viewer alongside the user’s resource name.
Interpretation: Display names are mutable, may be shared, and may be absent under user-authenticated list responses.

Workspace Domain ID

Developer identifier: chat_space_messages.privateMessageViewer.domainIdWorkspace Domain ID. Identifies the Google Workspace domain associated with the Chat user.

Enables: Compare message participants within Google’s domain namespace.
Interpretation: Google supplies this provider-scoped identifier; it is not a universal organization identity and may be absent.

Anonymous User

Developer identifier: chat_space_messages.privateMessageViewer.isAnonymousAnonymous User. Indicates that Google treats the user as deleted or hides the profile from the caller.

Enables: Avoid treating unavailable profile details as a resolved user identity.
Interpretation: A true value combines deleted and non-visible profiles; it does not establish which condition applies, and false differs from missing.

User Resource Name

Developer identifier: chat_space_messages.privateMessageViewer.nameUser Resource Name. Identifies a sender or viewer in Google’s Chat user namespace.

Enables: Match message participants that reference the same users/{user} resource.
Interpretation: Google assigns this resource name; it may refer to a human or Chat app and is not a universal identity outside Google Chat.

User Type

Developer identifier: chat_space_messages.privateMessageViewer.typeUser Type. Classifies the Google Chat user as a human or Chat app.

Enables: Distinguish human senders and viewers from bot identities in message records.
Interpretation: This is Google’s Chat taxonomy; an unspecified value should remain separate from HUMAN and BOT.

Quoted Message Metadata

Developer identifier: chat_space_messages.quotedMessageMetadataQuoted Message Metadata. Preserves Google’s structured reference to a message quoted by this message.

Enables: Trace visible quote context to the provider metadata returned with the quoting message.
Interpretation: The value retains a dynamic Google JSON shape; visibility and retention may prevent the referenced message from resolving.

Sender

Developer identifier: chat_space_messages.senderSender. Provides the Google Chat user or app that created the message.

Enables: Attribute message content to the provider-reported sender resource and user type.
Interpretation: Visibility follows the impersonated user; profile details may be absent or anonymous, and the record does not establish real-world identity.

Silent Message

Developer identifier: chat_space_messages.silentSilent Message. Indicates whether Google suppressed push notifications for the message.

Enables: Distinguish silent messages from messages eligible for ordinary Chat notifications.
Interpretation: This flag reports message delivery configuration, not whether any person saw the message; keep true, false, and missing distinct.

Space

Developer identifier: chat_space_messages.spaceSpace. References the Google Chat space that contains the message.

Enables: Connect each message to the parent space collected by chat_spaces.
Interpretation: User authentication typically returns only the space resource name; missing details do not indicate that the space lacks them.

Space Resource Name

Developer identifier: chat_space_messages.space.nameSpace Resource Name. Identifies the Google Chat space that contains the message.

Enables: Connect the message to its parent spaces/{space} record.
Interpretation: Google typically returns only this resource name under user authentication; it is scoped to Google Chat.

Message Text

Developer identifier: chat_space_messages.textMessage Text. Provides the plain-text body Google returns for the message.

Enables: Inspect and search visible message content within its sender, thread, and space context.
Interpretation: Content follows the impersonated user’s visibility and Google’s response projection; an empty or missing value is not proof that no richer content exists.

Thread

Developer identifier: chat_space_messages.threadThread. Identifies the Google Chat thread containing the message.

Enables: Group replies and parent messages by thread resource name or optional client key.
Interpretation: Google may return a partial thread object; its identifiers are scoped to the containing Chat space.

Thread Resource Name

Developer identifier: chat_space_messages.thread.nameThread Resource Name. Identifies the conversation thread in Google’s Chat namespace.

Enables: Group messages that reference the same spaces/{space}/threads/{thread} resource.
Interpretation: Google assigns this resource name within a space; it does not identify a thread outside Google Chat.

Thread Key

Developer identifier: chat_space_messages.thread.threadKeyThread Key. Provides the optional client-assigned key used when creating the Chat thread.

Enables: Match messages to an application-supplied thread reference when Google returns one.
Interpretation: The creating client controls this mutable string, Google permits up to 4,000 characters, and it may be absent.

Thread Reply

Developer identifier: chat_space_messages.threadReplyThread Reply. Indicates whether Google classifies the message as a response in a reply thread.

Enables: Separate thread replies from top-level messages when reconstructing conversation structure.
Interpretation: This provider-reported flag describes placement, not the meaning or quality of the reply; keep true, false, and missing distinct.

Chat Spaces

Developer identifier: chat_spacesChat Spaces. Google Chat spaces available to the impersonated Workspace user, including named spaces, group chats, and direct messages.

Enables: Enumerate the spaces available to each impersonated user before collecting child messages.
Scope: Reads spaces.list in full mode with chat.spaces.readonly; visibility follows the impersonated user’s memberships, and omission does not prove that a space does not exist.

Access Settings

Developer identifier: chat_spaces.accessSettingsAccess Settings. Groups Google’s discovery state and target audience for a named space.

Enables: Review how a named space can be discovered and which audience resource applies.
Interpretation: Google populates this object only for SPACE; it describes discovery configuration, not effective member access.

Access State

Developer identifier: chat_spaces.accessSettings.accessStateAccess State. Records whether Google marks the named space private or discoverable.

Enables: Separate private and discoverable spaces when reviewing how a space can be found.
Interpretation: This is Google’s space-discovery state, not proof of effective access or current membership.

Audience Resource Name

Developer identifier: chat_spaces.accessSettings.audienceAudience Resource Name. Identifies the Google target audience that can discover the space.

Enables: Connect discoverable spaces to the referenced audiences/{audience} resource name.
Interpretation: Google supplies this identifier in its audience namespace; it may be absent for private spaces and does not enumerate audience members.

Admin Installed

Developer identifier: chat_spaces.adminInstalledAdmin Installed. Indicates whether a Workspace administrator created the direct-message space for a Chat app.

Enables: Distinguish administrator-installed app conversations from other app direct messages.
Interpretation: Google populates this field only for applicable app DMs; it does not describe the administrator’s intent or current app approval state.

Created At

Developer identifier: chat_spaces.createTimeCreated At. Records when Google reports the space was created.

Enables: Order named spaces and group chats by creation time and compare them within an exact interval.
Interpretation: Google returns an RFC3339 timestamp only for SPACE and GROUP_CHAT; a missing value for a direct message is expected.

Customer Resource Name

Developer identifier: chat_spaces.customerCustomer Resource Name. Identifies the Google Workspace customer associated with the space’s domain.

Enables: Group named spaces and group chats by the referenced customers/{customer} namespace value.
Interpretation: Google omits this field for direct messages; the value is a provider resource name, not a universal organization identifier.

Display Name

Developer identifier: chat_spaces.displayNameDisplay Name. Provides Google’s human-readable label for the Chat space.

Enables: Present and search named spaces alongside their resource names.
Interpretation: The label is mutable and may be empty for direct messages; it is not a stable identifier.

External Users Allowed

Developer identifier: chat_spaces.externalUserAllowedExternal Users Allowed. Indicates whether Google permits users outside the owning organization to join the space.

Enables: Identify spaces whose membership policy allows external Google Chat users.
Interpretation: This setting does not prove that an external user is currently a member; keep true, false, and missing values distinct.

Last Active At

Developer identifier: chat_spaces.lastActiveTimeLast Active At. Records the timestamp of the latest message Google reports for the space.

Enables: Order spaces by provider-reported message recency and identify spaces active within an exact interval.
Interpretation: The RFC3339 value reflects messages visible to the API and does not establish complete activity outside that visibility.

Membership Count

Developer identifier: chat_spaces.membershipCountMembership Count. Groups Google’s direct human-user and group membership counts for the space.

Enables: Compare the two provider-reported membership categories without losing their separate meanings.
Interpretation: The object reports counts rather than member identities and may be absent when Google does not populate it.

Joined Direct Human User Count

Developer identifier: chat_spaces.membershipCount.joinedDirectHumanUserCountJoined Direct Human User Count. Reports how many human users directly joined the Chat space.

Enables: Compare direct human membership counts across spaces and track provider-reported changes.
Interpretation: Google reports a count for the space; zero is distinct from a missing value and does not include indirect group membership.

Joined Group Count

Developer identifier: chat_spaces.membershipCount.joinedGroupCountJoined Group Count. Reports how many groups directly joined the Chat space.

Enables: Compare group membership counts across spaces and identify spaces whose membership includes groups.
Interpretation: Google reports groups, not the number of people represented by those groups; zero is distinct from a missing value.

Space Resource Name

Developer identifier: chat_spaces.nameSpace Resource Name. Identifies the space in Google’s Chat resource namespace.

Enables: Match space records to their messages through spaces/{space} and recognize the same space across syncs.
Interpretation: Google assigns this resource name. It is the record key of this stream only.

Parent User Email

Developer identifier: chat_spaces.primaryEmailParent User Email. Identifies the Workspace user impersonated when Parable listed this space.

Enables: Attribute each collected space to the parent user whose users.primaryEmail drove the request.
Interpretation: Parable adds this value when it reads the record; Google Chat does not return it in the spaces.list response, and an email address is mutable.

Single-user Bot DM

Developer identifier: chat_spaces.singleUserBotDmSingle-user Bot DM. Indicates whether Google identifies the space as a direct message between one human and a Chat app.

Enables: Distinguish single-user bot conversations from other direct messages and spaces.
Interpretation: This provider-reported flag describes the space shape; keep true, false, and missing values distinct.

Space Details

Developer identifier: chat_spaces.spaceDetailsSpace Details. Groups the optional description and participation guidelines Google returns for the space.

Enables: Inspect the stated topic and guidelines with the parent space record.
Interpretation: Google may omit this object; its text is mutable and does not establish member awareness or behavior.

Description

Developer identifier: chat_spaces.spaceDetails.descriptionDescription. Provides Google’s short topic or purpose text for the Chat space.

Enables: Inspect the stated space topic alongside its membership and message activity.
Interpretation: Google supplies up to 150 characters; the text is mutable and may be absent.

Guidelines

Developer identifier: chat_spaces.spaceDetails.guidelinesGuidelines. Provides the rules, expectations, or etiquette published for the Chat space.

Enables: Review the space’s stated participation guidance with its messages and membership context.
Interpretation: Google supplies up to 5,000 characters; this mutable text is not proof that members read or followed it.

History State

Developer identifier: chat_spaces.spaceHistoryStateHistory State. Records whether Google Chat history is on or off for messages and threads in the space.

Enables: Interpret message availability in the context of the space’s provider-reported history setting.
Interpretation: This setting does not guarantee complete historical retrieval; API visibility, retention, and permissions still bound the response.

Threading State

Developer identifier: chat_spaces.spaceThreadingStateThreading State. Records how Google organizes conversations in the space.

Enables: Interpret whether collected messages use threaded, grouped, or unthreaded conversation structure.
Interpretation: This is Google’s current space setting and may change; an unspecified value has no inferred threading behavior.

Space Type

Developer identifier: chat_spaces.spaceTypeSpace Type. Classifies the Chat resource as a named space, group chat, or direct message.

Enables: Segment space records by Google’s SPACE, GROUP_CHAT, and DIRECT_MESSAGE categories.
Interpretation: This is Google’s Chat taxonomy; an unspecified value should remain separate from the named categories.

Space URI

Developer identifier: chat_spaces.spaceUriSpace URI. Provides Google’s user-facing link to the Chat space.

Enables: Open the referenced space from records when the reviewing user has access.
Interpretation: The URL is provider supplied; its presence does not grant access, and Google may omit it.

Chrome Activity

Developer identifier: chrome_activityChrome Activity. All Chrome browser and Chrome OS audit events from Admin Reports API (applicationName=chrome, no eventName filter).

Enables: Trace Chrome and ChromeOS administrator-report events to the acting user, event parameters, application, customer, and occurrence time.
Scope: Reads the new records from Google Workspace’s /admin/reports/v1/activity/users/all/applications/chrome operation on each sync, and each row is one event. This stream is opt-in. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

Synthetic Primary Key

Developer identifier: chrome_activity._synthetic_primary_keySynthetic Primary Key. A key Parable builds from ID.time, ID.uniqueQualifier, ID.applicationName, ID.customerId. It provides the reference needed to connect the chrome activity to the corresponding provider object.

Enables: Match repeated chrome activity entries on synthetic primary key in chrome_activity._synthetic_primary_key. Only entries that share this key are the same record.
Interpretation: Parable builds this key. It is not an identifier that Google Workspace reports, and it means nothing outside this table. It is the record key.

Actor

Developer identifier: chrome_activity.actorActor. The structured actor details attached to each chrome activity in Chrome Activity. It preserves the nested context needed to interpret the parent chrome activity.

Enables: Attribute actor in chrome_activity.actor to the parent chrome activity; identify parent records where that nested actor object is absent.
Interpretation: Google Workspace reports actor as a nested object on each chrome activity; optional children may be absent from a valid response.

Caller Type

Developer identifier: chrome_activity.actor.callerTypeCaller Type. Type of actor (USER, KEY, etc.). It distinguishes the provider-defined caller type state or classification for the Google Workspace reports activity actor.

Enables: Segment Google Workspace reports activity actor entries in Chrome Activity by caller type in chrome_activity.actor.callerType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports caller type as a label from its own taxonomy on each Google Workspace reports activity actor; preserve unknown labels rather than mapping them by assumption.

Developer identifier: chrome_activity.actor.emailEmail. Primary email of the actor. It supplies the email profile facet used to reconcile or attribute the Google Workspace reports activity actor.

Enables: Attribute each Google Workspace reports activity actor to a person or account by the exact email in chrome_activity.actor.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each Google Workspace reports activity actor; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Key

Developer identifier: chrome_activity.actor.keyKey. Consumer key when callerType is KEY. It provides the reference needed to connect the chrome activity to the corresponding provider object.

Enables: Connect each Google Workspace reports activity actor in Chrome Activity to the referenced Google Workspace reports activity actor through chrome_activity.actor.key; flag key values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports key as an identifier in its Google Workspace reports activity actor namespace; it is not a universal identity outside Google Workspace.

Profile ID

Developer identifier: chrome_activity.actor.profileIdProfile ID. Google Workspace profile ID of the actor. It provides the reference needed to connect the chrome activity to the corresponding provider object.

Enables: Connect each Google Workspace reports activity actor in Chrome Activity to the referenced profile through chrome_activity.actor.profileId; flag profile ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports profile ID as an identifier in its profile namespace; it is not a universal identity outside Google Workspace.

Events

Developer identifier: chrome_activity.eventsEvents. Events included in this activity record. It preserves the nested context needed to interpret the parent chrome activity.

Enables: Compare the exact Google Workspace-configured events set in chrome_activity.events for each chrome activity; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns events as an array of Google Workspace reports activity event entries on each chrome activity; missing, empty, and permission-redacted arrays are not equivalent.

Name

Developer identifier: chrome_activity.events.nameName. Event name (e.g. CHROME_OS_LOGIN_FAILURE_EVENT). It gives the Google Workspace reports activity event a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated Google Workspace reports activity event entries on name in chrome_activity.events.name; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports name as display text for each Google Workspace reports activity event; names are mutable and are not stable identities.

Parameters

Developer identifier: chrome_activity.events.parametersParameters. Event-specific parameters. It preserves the nested context needed to interpret the parent chrome activity.

Enables: Compare the exact Google Workspace-configured parameters set in chrome_activity.events.parameters for each Google Workspace reports activity event; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns parameters as an array of Google Workspace reports activity parameter entries on each Google Workspace reports activity event; missing, empty, and permission-redacted arrays are not equivalent.

Bool Value

Developer identifier: chrome_activity.events.parameters.boolValueBool Value. Boolean value of the parameter when present. It distinguishes the provider-defined bool value state or classification for the Google Workspace reports activity parameter.

Enables: Filter Chrome Activity by whether boolean value of the parameter when present in chrome_activity.events.parameters.boolValue; count true, false, and missing results separately.
Interpretation: Google Workspace reports boolean value of the parameter when present as a boolean on each Google Workspace reports activity parameter; a missing field is unknown, not false.

Int Value

Developer identifier: chrome_activity.events.parameters.intValueInt Value. Integer value of the parameter when present. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

Enables: Interpret chrome_activity.events.parameters.intValue with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Google Workspace reports int value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.

Multi Value

Developer identifier: chrome_activity.events.parameters.multiValueMulti Value. Multiple string values when present. It preserves the nested context needed to interpret the parent chrome activity.

Enables: Compare the exact Google Workspace-configured multi value set in chrome_activity.events.parameters.multiValue for each Google Workspace reports activity parameter; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns multi value as an array of multi value value entries on each Google Workspace reports activity parameter; missing, empty, and permission-redacted arrays are not equivalent.

Name

Developer identifier: chrome_activity.events.parameters.nameName. Parameter name (event-specific, e.g. DEVICE_NAME). It gives the Google Workspace reports activity parameter a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated Google Workspace reports activity parameter entries on name in chrome_activity.events.parameters.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each Google Workspace reports activity parameter; names are mutable and are not stable identities. It is the key of this nested record.

Value

Developer identifier: chrome_activity.events.parameters.valueValue. String value of the parameter. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

Enables: Interpret chrome_activity.events.parameters.value with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Google Workspace reports value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.

Type

Developer identifier: chrome_activity.events.typeType. Event category (e.g. CHROME_OS_LOGIN_LOGOUT_TYPE). It distinguishes the provider-defined type state or classification for the Google Workspace reports activity event.

Enables: Segment Google Workspace reports activity event entries in Chrome Activity by type in chrome_activity.events.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each Google Workspace reports activity event; preserve unknown labels rather than mapping them by assumption. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.

Developer identifier: chrome_activity.idID. The structured ID details attached to each chrome activity in Chrome Activity. It preserves the nested context needed to interpret the parent chrome activity.

Enables: Attribute ID in chrome_activity.id to the parent chrome activity; identify parent records where that nested ID object is absent.
Interpretation: Google Workspace reports ID as a nested object on each chrome activity; optional children may be absent from a valid response.

Application Name

Developer identifier: chrome_activity.id.applicationNameApplication Name. Application name for the activity (chrome). It gives the Google Workspace reports activity ID a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Google Workspace reports activity ID with application name from chrome_activity.id.applicationName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports application name as display text for each Google Workspace reports activity ID; names are mutable and are not stable identities.

Customer ID

Developer identifier: chrome_activity.id.customerIdCustomer ID. Google Workspace customer ID. It provides the reference needed to connect the chrome activity to the corresponding provider object.

Enables: Connect each Google Workspace reports activity ID in Chrome Activity to the referenced customer through chrome_activity.id.customerId; flag customer ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports customer ID as an identifier in its customer namespace; it is not a universal identity outside Google Workspace.

Time

Developer identifier: chrome_activity.id.timeTime. Time of occurrence of the activity (RFC 3339). It anchors the chrome activity on the provider’s reported timeline.

Enables: Order Chrome Activity by time in chrome_activity.id.time and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports time as a timestamp on each Google Workspace reports activity ID; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record. It is the time of the event.

Unique Qualifier

Developer identifier: chrome_activity.id.uniqueQualifierUnique Qualifier. Unique qualifier when multiple events share the same time. It identifies the related provider object that gives the Google Workspace reports activity ID its parent, owner, or container context.

Enables: Connect each Google Workspace reports activity ID to the related unique qualifier in chrome_activity.id.uniqueQualifier and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports unique qualifier as relationship context on each Google Workspace reports activity ID; resolve it in the named provider namespace rather than by display text alone.

IP Address

Developer identifier: chrome_activity.ipAddressIP Address. IP address associated with the activity. It supplies the provider-reported address or location facet for the chrome activity, not a residency determination.

Enables: Correlate chrome activity records that report the same network address in chrome_activity.ipAddress during an authorized investigation; account for shared, proxied, or translated addresses.
Interpretation: Google Workspace reports this as an IP network address on each chrome activity. It is not verified geolocation, does not identify a person by itself, and does not establish data residency.

Kind

Developer identifier: chrome_activity.kindKind. API resource kind (admin#reports#activity). It distinguishes the provider-defined kind state or classification for the chrome activity.

Enables: Segment chrome activity entries in Chrome Activity by kind in chrome_activity.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each chrome activity; preserve unknown labels rather than mapping them by assumption.

Owner Domain

Developer identifier: chrome_activity.ownerDomainOwner Domain. Domain affected by the activity. It identifies the related provider object that gives the chrome activity its parent, owner, or container context.

Enables: Connect each chrome activity to the related owner domain in chrome_activity.ownerDomain and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports owner domain as relationship context on each chrome activity; resolve it in the named provider namespace rather than by display text alone.

Conference Record Detail

Developer identifier: conference_record_detailConference Record Detail. Full conference record details.

Enables: Confirm a conference record’s meeting space and exact start and end boundaries before relating detailed child resources.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name} operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

End Time

Developer identifier: conference_record_detail.endTimeEnd Time. Timestamp (RFC3339) when the conference ended. Combined with startTime to calculate meeting duration for time-spend reports. May be absent if the conference is still ongoing. It anchors the conference record detail on the provider’s reported timeline.

Enables: Filter Conference Record Detail by end time in conference_record_detail.endTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports end time as a timestamp on each conference record detail; timezone and precision follow this API field, and absence is not an inferred event time.

Expire Time

Developer identifier: conference_record_detail.expireTimeExpire Time. Timestamp (RFC3339) after which the conference record resource may be deleted by the system. Indicates data retention window for historical meeting analysis. It anchors the conference record detail on the provider’s reported timeline.

Enables: Order Conference Record Detail by expire time in conference_record_detail.expireTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports expire time as a timestamp on each conference record detail; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: conference_record_detail.nameName. Resource name of the conference record (e.g., conferenceRecords/abc123). Serves as the primary key for linking participants, recordings, and transcripts to a specific meeting. It gives the conference record detail a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated conference record detail entries on name in conference_record_detail.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each conference record detail; names are mutable and are not stable identities. It is the record key.

Primary Email

Developer identifier: conference_record_detail.primaryEmailPrimary Email. Parent primary email reference copied into each conference record detail because the child operation does not return that relationship. It identifies the related provider object that gives the conference record detail its parent, owner, or container context.

Enables: Attribute each conference record detail to a person or account by the exact primary email in conference_record_detail.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each conference record detail; the child Google Workspace operation does not return it.

Space

Developer identifier: conference_record_detail.spaceSpace. Resource name of the Meet space where this conference occurred (e.g., spaces/abc123). Links conference records to reusable meeting spaces for recurring meeting analysis. It identifies the related provider object that gives the conference record detail its parent, owner, or container context.

Enables: Connect each conference record detail to the related space in conference_record_detail.space and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports space as relationship context on each conference record detail; resolve it in the named provider namespace rather than by display text alone.

Start Time

Developer identifier: conference_record_detail.startTimeStart Time. Timestamp (RFC3339) when the conference started. Enables time-spend analysis of meeting duration and scheduling patterns. It anchors the conference record detail on the provider’s reported timeline.

Enables: Filter Conference Record Detail by start time in conference_record_detail.startTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports start time as a timestamp on each conference record detail; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record. It is the time of the event.

Conference Records

Developer identifier: conference_recordsConference Records. Google Meet conference records - lists all conferences.

Enables: Reconcile Google Meet conference records to their meeting space, start and end times, and child participant, transcript, and recording resources.
Scope: Reads the new records from Google Workspace’s https://meet.googleapis.com/v2/conferenceRecords operation on each sync, and each row is one event. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

End Time

Developer identifier: conference_records.endTimeEnd Time. Timestamp (RFC3339) when the conference ended. Combined with startTime to calculate meeting duration for time-spend reports. May be absent if the conference is still ongoing. It anchors the conference record on the provider’s reported timeline.

Enables: Filter Conference Records by end time in conference_records.endTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports end time as a timestamp on each conference record; timezone and precision follow this API field, and absence is not an inferred event time.

Expire Time

Developer identifier: conference_records.expireTimeExpire Time. Timestamp (RFC3339) after which the conference record resource may be deleted by the system. Indicates data retention window for historical meeting analysis. It anchors the conference record on the provider’s reported timeline.

Enables: Order Conference Records by expire time in conference_records.expireTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports expire time as a timestamp on each conference record; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: conference_records.nameName. Resource name of the conference record (e.g., conferenceRecords/abc123). Serves as the primary key for linking participants, recordings, and transcripts to a specific meeting. It gives the conference record a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated conference record entries on name in conference_records.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each conference record; names are mutable and are not stable identities. It is the record key.

Organizer Email

Developer identifier: conference_records.organizer_emailOrganizer Email. Parent organizer email reference copied into each conference record because the child operation does not return that relationship. It identifies the related provider object that gives the conference record its parent, owner, or container context.

Enables: Attribute each conference record to a person or account by the exact organizer email in conference_records.organizer_email; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies organizer email from the parent record into each conference record; the child Google Workspace operation does not return it.

Primary Email

Developer identifier: conference_records.primaryEmailPrimary Email. Parent primary email reference copied into each conference record because the child operation does not return that relationship. It identifies the related provider object that gives the conference record its parent, owner, or container context.

Enables: Attribute each conference record to a person or account by the exact primary email in conference_records.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each conference record; the child Google Workspace operation does not return it.

Space

Developer identifier: conference_records.spaceSpace. Resource name of the Meet space where this conference occurred (e.g., spaces/abc123). Links conference records to reusable meeting spaces for recurring meeting analysis. It identifies the related provider object that gives the conference record its parent, owner, or container context.

Enables: Connect each conference record to the related space in conference_records.space and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports space as relationship context on each conference record; resolve it in the named provider namespace rather than by display text alone.

Start Time

Developer identifier: conference_records.startTimeStart Time. Timestamp (RFC3339) when the conference started. Enables time-spend analysis of meeting duration and scheduling patterns. It anchors the conference record on the provider’s reported timeline.

Enables: Filter Conference Records by start time in conference_records.startTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports start time as a timestamp on each conference record; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record. It is the time of the event.

Gemini Activity

Developer identifier: gemini_activityGemini Activity. Gemini in Workspace Apps usage events from Admin Reports API (applicationName=gemini_in_workspace_apps). Each ai_usage_event carries the acting user, the Workspace app, and the Gemini action performed. This is the only source of per-user Gemini activity; the Gemini Generative Language API exposes no activity surface and no user attribution.

Enables: Attribute Google-reported Gemini actions in Workspace apps to the acting user, application, and event time.
Scope: Reads the new records from Google Workspace’s /admin/reports/v1/activity/users/all/applications/gemini_in_workspace_apps operation on each sync, and each row is one event. This stream is opt-in. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. Google supplies the action classifications; the stream does not contain prompts, responses, or an independent Parable assessment of the activity. This stream supplies no reliable deletion signal.

Synthetic Primary Key

Developer identifier: gemini_activity._synthetic_primary_keySynthetic Primary Key. A key Parable builds from ID.time, ID.uniqueQualifier, ID.applicationName, ID.customerId. It provides the reference needed to connect the gemini activity to the corresponding provider object.

Enables: Match repeated gemini activity entries on synthetic primary key in gemini_activity._synthetic_primary_key. Only entries that share this key are the same record.
Interpretation: Parable builds this key. It is not an identifier that Google Workspace reports, and it means nothing outside this table. It is the record key.

Actor

Developer identifier: gemini_activity.actorActor. The structured actor details attached to each gemini activity in Gemini Activity. It preserves the nested context needed to interpret the parent gemini activity.

Enables: Attribute actor in gemini_activity.actor to the parent gemini activity; identify parent records where that nested actor object is absent.
Interpretation: Google Workspace reports actor as a nested object on each gemini activity; optional children may be absent from a valid response.

Caller Type

Developer identifier: gemini_activity.actor.callerTypeCaller Type. Type of actor (USER, KEY, etc.). It distinguishes the provider-defined caller type state or classification for the Google Workspace reports activity actor.

Enables: Segment Google Workspace reports activity actor entries in Gemini Activity by caller type in gemini_activity.actor.callerType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports caller type as a label from its own taxonomy on each Google Workspace reports activity actor; preserve unknown labels rather than mapping them by assumption.

Developer identifier: gemini_activity.actor.emailEmail. Primary email of the actor. It supplies the email profile facet used to reconcile or attribute the Google Workspace reports activity actor.

Enables: Attribute each Google Workspace reports activity actor to a person or account by the exact email in gemini_activity.actor.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each Google Workspace reports activity actor; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Key

Developer identifier: gemini_activity.actor.keyKey. Consumer key when callerType is KEY. It provides the reference needed to connect the gemini activity to the corresponding provider object.

Enables: Connect each Google Workspace reports activity actor in Gemini Activity to the referenced Google Workspace reports activity actor through gemini_activity.actor.key; flag key values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports key as an identifier in its Google Workspace reports activity actor namespace; it is not a universal identity outside Google Workspace.

Profile ID

Developer identifier: gemini_activity.actor.profileIdProfile ID. Google Workspace profile ID of the actor. It provides the reference needed to connect the gemini activity to the corresponding provider object.

Enables: Connect each Google Workspace reports activity actor in Gemini Activity to the referenced profile through gemini_activity.actor.profileId; flag profile ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports profile ID as an identifier in its profile namespace; it is not a universal identity outside Google Workspace.

Events

Developer identifier: gemini_activity.eventsEvents. Events included in this activity record. It preserves the nested context needed to interpret the parent gemini activity.

Enables: Compare the exact Google Workspace-configured events set in gemini_activity.events for each gemini activity; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns events as an array of Google Workspace reports activity event entries on each gemini activity; missing, empty, and permission-redacted arrays are not equivalent.

Name

Developer identifier: gemini_activity.events.nameName. Event name (e.g. feature_utilization). It gives the Google Workspace reports activity event a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated Google Workspace reports activity event entries on name in gemini_activity.events.name; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports name as display text for each Google Workspace reports activity event; names are mutable and are not stable identities.

Parameters

Developer identifier: gemini_activity.events.parametersParameters. Event-specific parameters. It preserves the nested context needed to interpret the parent gemini activity.

Enables: Compare the exact Google Workspace-configured parameters set in gemini_activity.events.parameters for each Google Workspace reports activity event; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns parameters as an array of Google Workspace reports activity parameter entries on each Google Workspace reports activity event; missing, empty, and permission-redacted arrays are not equivalent.

Bool Value

Developer identifier: gemini_activity.events.parameters.boolValueBool Value. Boolean value of the parameter when present. It distinguishes the provider-defined bool value state or classification for the Google Workspace reports activity parameter.

Enables: Filter Gemini Activity by whether boolean value of the parameter when present in gemini_activity.events.parameters.boolValue; count true, false, and missing results separately.
Interpretation: Google Workspace reports boolean value of the parameter when present as a boolean on each Google Workspace reports activity parameter; a missing field is unknown, not false.

Int Value

Developer identifier: gemini_activity.events.parameters.intValueInt Value. Integer value of the parameter when present. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

Enables: Interpret gemini_activity.events.parameters.intValue with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Google Workspace reports int value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.

Multi Value

Developer identifier: gemini_activity.events.parameters.multiValueMulti Value. Multiple string values when present. It preserves the nested context needed to interpret the parent gemini activity.

Enables: Compare the exact Google Workspace-configured multi value set in gemini_activity.events.parameters.multiValue for each Google Workspace reports activity parameter; preserve provider labels and unknown entries.
Interpretation: Google Workspace returns multi value as an array of multi value value entries on each Google Workspace reports activity parameter; missing, empty, and permission-redacted arrays are not equivalent.

Name

Developer identifier: gemini_activity.events.parameters.nameName. Parameter name (action, app_name, event_category, feature_source). It gives the Google Workspace reports activity parameter a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated Google Workspace reports activity parameter entries on name in gemini_activity.events.parameters.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each Google Workspace reports activity parameter; names are mutable and are not stable identities. It is the key of this nested record. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.

Value

Developer identifier: gemini_activity.events.parameters.valueValue. String value of the parameter. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

Enables: Interpret gemini_activity.events.parameters.value with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Google Workspace reports value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.

Type

Developer identifier: gemini_activity.events.typeType. Event category (ai_usage_event for Gemini utilization events). It distinguishes the provider-defined type state or classification for the Google Workspace reports activity event.

Enables: Segment Google Workspace reports activity event entries in Gemini Activity by type in gemini_activity.events.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each Google Workspace reports activity event; preserve unknown labels rather than mapping them by assumption. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.

Developer identifier: gemini_activity.idID. The structured ID details attached to each gemini activity in Gemini Activity. It preserves the nested context needed to interpret the parent gemini activity.

Enables: Attribute ID in gemini_activity.id to the parent gemini activity; identify parent records where that nested ID object is absent.
Interpretation: Google Workspace reports ID as a nested object on each gemini activity; optional children may be absent from a valid response.

Application Name

Developer identifier: gemini_activity.id.applicationNameApplication Name. Application name for the activity (gemini_in_workspace_apps). It gives the Google Workspace reports activity ID a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Google Workspace reports activity ID with application name from gemini_activity.id.applicationName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports application name as display text for each Google Workspace reports activity ID; names are mutable and are not stable identities.

Customer ID

Developer identifier: gemini_activity.id.customerIdCustomer ID. Google Workspace customer ID. It provides the reference needed to connect the gemini activity to the corresponding provider object.

Enables: Connect each Google Workspace reports activity ID in Gemini Activity to the referenced customer through gemini_activity.id.customerId; flag customer ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports customer ID as an identifier in its customer namespace; it is not a universal identity outside Google Workspace.

Time

Developer identifier: gemini_activity.id.timeTime. Time of occurrence of the activity (RFC 3339). It anchors the gemini activity on the provider’s reported timeline.

Enables: Order Gemini Activity by time in gemini_activity.id.time and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports time as a timestamp on each Google Workspace reports activity ID; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record. It is the time of the event.

Unique Qualifier

Developer identifier: gemini_activity.id.uniqueQualifierUnique Qualifier. Unique qualifier when multiple events share the same time. It identifies the related provider object that gives the Google Workspace reports activity ID its parent, owner, or container context.

Enables: Connect each Google Workspace reports activity ID to the related unique qualifier in gemini_activity.id.uniqueQualifier and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports unique qualifier as relationship context on each Google Workspace reports activity ID; resolve it in the named provider namespace rather than by display text alone.

IP Address

Developer identifier: gemini_activity.ipAddressIP Address. IP address associated with the activity. It supplies the provider-reported address or location facet for the gemini activity, not a residency determination.

Enables: Correlate gemini activity records that report the same network address in gemini_activity.ipAddress during an authorized investigation; account for shared, proxied, or translated addresses.
Interpretation: Google Workspace reports this as an IP network address on each gemini activity. It is not verified geolocation, does not identify a person by itself, and does not establish data residency.

Kind

Developer identifier: gemini_activity.kindKind. API resource kind (admin#reports#activity). It distinguishes the provider-defined kind state or classification for the gemini activity.

Enables: Segment gemini activity entries in Gemini Activity by kind in gemini_activity.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each gemini activity; preserve unknown labels rather than mapping them by assumption.

Owner Domain

Developer identifier: gemini_activity.ownerDomainOwner Domain. Domain affected by the activity. It identifies the related provider object that gives the gemini activity its parent, owner, or container context.

Enables: Connect each gemini activity to the related owner domain in gemini_activity.ownerDomain and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports owner domain as relationship context on each gemini activity; resolve it in the named provider namespace rather than by display text alone.

Group Members

Developer identifier: group_membersGroup Members. Members of a Google Workspace group.

Enables: Match each Google group to its returned users, groups, or external members and their provider role and status. Supply the group memberships, nested groups included, that source permissions expand group grants through.
Scope: Reads every record from Google Workspace’s /admin/directory/v1/groups/{id}/members operation on each sync. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. A later complete read can treat a previously seen record that is absent as removed.

Delivery Settings

Developer identifier: group_members.delivery_settingsDelivery Settings. Delivery settings for the member’s notifications. Possible values: ALL_MAIL, DAILY, DIGEST, DISABLED, NONE. It distinguishes the provider-defined delivery settings state or classification for the group member.

Enables: Segment group member entries in Group Members by delivery settings in group_members.delivery_settings; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports delivery settings as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.

Developer identifier: group_members.emailEmail. The member’s email address. If the member is a user, this is the user’s primary email; if a group, the group’s email address. It supplies the provider-reported address or location facet for the group member, not a residency determination.

Enables: Attribute each group member to a person or account by the exact email in group_members.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each group member; aliases, casing, and unverified addresses can prevent a one-to-one person match. Parable uses this field as the account’s email when it links the account to a person.

ETag

Developer identifier: group_members.etagETag. ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Use group_members.etag for conditional provider reads and revision checks; pair the ETag with the group member ID rather than joining on it.
Interpretation: Google Workspace returns this ETag as an opaque revision token for each group member; it can change when the resource changes and is not a universal identifier.

Group ID

Developer identifier: group_members.group_idGroup ID. The Google Workspace group this membership belongs to, copied from the parent group because the group members operation does not return it.

Enables: Join each membership to groups.id and list the groups a member belongs to.
Interpretation: Parable copies the group ID from the parent record into each member row; the value is in Google Workspace’s group namespace. Rows that Parable read before it added this field have no value. For source permissions, Parable marks this field as the group of the membership, matched on groups.id.

Developer identifier: group_members.idID. The unique ID of the group member: the user’s ID when the member is a user, the group’s ID when the member is a group.

Enables: Connect each group membership to the member’s Google Workspace account through group_members.id.
Interpretation: Google Workspace reports this value in its user namespace. The same value repeats once for every group the member belongs to, so it does not identify a row on its own. Parable uses this field as the account’s ID when it links the account to a person. For source permissions, Parable marks this field as the member of the membership, matched on the member’s principal id.

Kind

Developer identifier: group_members.kindKind. The type of the API resource. For group members, this is ‘admin#directory#member’. It locates the provider resource or path associated with the group member.

Enables: Segment group member entries in Group Members by kind in group_members.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.

Membership Key

Developer identifier: group_members.membership_keyMembership Key. A key Parable builds from group_id and id, so each combination of those values has one key.

Enables: Identify each group membership on its own, so a member who belongs to several Google Workspace groups has one row per group.
Interpretation: Parable calculates membership_key when it reads the record. It identifies one group-to-member relationship, not the member or the group by itself, and is not a Google Workspace identifier. It is the record key.

Role

Developer identifier: group_members.roleRole. The member’s role in the group. Possible values: OWNER, MANAGER, MEMBER. It distinguishes the provider-defined role state or classification for the group member.

Enables: Segment group member entries in Group Members by role in group_members.role; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports role as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.

Status

Developer identifier: group_members.statusStatus. The status of the member. Possible values: ACTIVE, SUSPENDED, UNKNOWN. It distinguishes the provider-defined status state or classification for the group member.

Enables: Segment group member entries in Group Members by status in group_members.status; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports status as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.

Type

Developer identifier: group_members.typeType. The type of group member. Possible values: USER, GROUP, CUSTOMER. It distinguishes the provider-defined type state or classification for the group member.

Enables: Segment group member entries in Group Members by type in group_members.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption. For source permissions, Parable reads USER as a user member, GROUP as a nested group, and CUSTOMER as every user of the Google Workspace account.

Groups

Developer identifier: groupsGroups. Google Workspace groups.

Enables: Inventory Google Workspace groups by email, aliases, name, description, and administrative settings, and read their members. Supply the group principals that source permissions match Drive grants against.
Scope: Reads every record from Google Workspace’s /admin/directory/v1/groups operation on each sync. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. A later complete read can treat a previously seen record that is absent as removed.

Admin Created

Developer identifier: groups.adminCreatedAdmin Created. Whether the group was created by an admin. Distinguishes admin-managed groups from user-created ones. It distinguishes the provider-defined admin created state or classification for the group.

Enables: Filter Groups by whether the group was created by an admin in groups.adminCreated; count true, false, and missing results separately.
Interpretation: Google Workspace reports the group was created by an admin as a boolean on each group; a missing field is unknown, not false.

Aliases

Developer identifier: groups.aliasesAliases. List of alias email addresses for the group. It preserves the nested context needed to interpret the parent group.

Enables: Reconcile each returned aliase in groups.aliases with the parent group’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns aliases as an array of aliase entries on each group; missing, empty, and permission-redacted arrays are not equivalent.

Description

Developer identifier: groups.descriptionDescription. Description of the group’s purpose. It defines the content surface available for this group.

Enables: Locate group records by description in groups.description; attribute each text match to its parent group and, when present, its reported author.
Interpretation: Google Workspace supplies description as text on each group; referenced files or media are not implied unless explicitly represented.

Direct Members Count

Developer identifier: groups.directMembersCountDirect Members Count. Number of direct members in the group. Returned as a string by the API. It supplies the direct members count measure for the group at the provider’s declared unit and grain.

Enables: Measure direct members count through groups.directMembersCount for each group and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports direct members count as a measure on each group; compare only records with the same unit and aggregation grain.

Developer identifier: groups.emailEmail. Email address of the group. It supplies the provider-reported address or location facet for the group, not a residency determination.

Enables: Attribute each group to a person or account by the exact email in groups.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each group; aliases, casing, and unverified addresses can prevent a one-to-one person match. For source permissions, Parable marks this address as the group’s primary principal reference: a grant to this address reaches the group and its members.

ETag

Developer identifier: groups.etagETag. ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Use groups.etag for conditional provider reads and revision checks; pair the ETag with the group ID rather than joining on it.
Interpretation: Google Workspace returns this ETag as an opaque revision token for each group; it can change when the resource changes and is not a universal identifier.

Developer identifier: groups.idID. Unique identifier for the group. Used as the primary key. It provides the reference needed to connect the group to the corresponding provider object.

Enables: Match repeated group entries on ID in groups.id. Only entries that share this key are the same record.
Interpretation: Google Workspace reports ID as an identifier in its group namespace; it is not a universal identity outside Google Workspace. It is the record key. For source permissions, Parable marks this field as the id of a group principal.

Kind

Developer identifier: groups.kindKind. The type of the API resource. For groups, this is admin#directory#group. It locates the provider resource or path associated with the group.

Enables: Segment group entries in Groups by kind in groups.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each group; preserve unknown labels rather than mapping them by assumption.

Name

Developer identifier: groups.nameName. Display name of the group. It gives the group a human-readable provider label while its identifier remains the stable reference.

Enables: Label each group with name from groups.name; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports name as display text for each group; names are mutable and are not stable identities.

Non Editable Aliases

Developer identifier: groups.nonEditableAliasesNon Editable Aliases. List of non-editable alias email addresses for the group, typically auto-generated by the system. It preserves the nested context needed to interpret the parent group.

Enables: Reconcile each returned non editable aliase in groups.nonEditableAliases with the parent group’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns non editable aliases as an array of non editable aliase entries on each group; missing, empty, and permission-redacted arrays are not equivalent.

Labels

Developer identifier: labelsLabels. The system and user labels of each Gmail mailbox, with the name of each label.

Enables: Turn the label IDs on each Gmail message, such as Label_12, into the label names that the mailbox owner sees.
Scope: Reads every label from Google Workspace’s https://gmail.googleapis.com/gmail/v1/users/{primaryEmail}/labels operation on each sync, one request per mailbox. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. Label IDs are unique only inside one mailbox, so each row is keyed by the mailbox and the label ID. A label that a sync no longer returns is marked deleted. A suspended user, or a mailbox that Gmail refuses in a sync, has its labels marked deleted until its next good read, while its messages stay.

Color

Developer identifier: labels.colorColor. The text and background color the mailbox owner chose for the label. Only user labels have a color.

Enables: Show a label in the colors that the mailbox owner sees in Gmail.
Interpretation: Google Workspace returns no color for system labels or for user labels with the default color.

Background Color

Developer identifier: labels.color.backgroundColorBackground Color. The background color of the label, as a hex string such as #16a765.

Enables: Show the label in the color that the mailbox owner sees.
Interpretation: Gmail allows only colors from its own palette.

Text Color

Developer identifier: labels.color.textColorText Color. The text color of the label, as a hex string such as #ffffff.

Enables: Show the label in the color that the mailbox owner sees.
Interpretation: Gmail allows only colors from its own palette.

Label ID

Developer identifier: labels.idLabel ID. The ID that Gmail puts in thread_messages.labelIds for messages with this label.

Enables: Join thread_messages.labelIds to labels.id for the same primaryEmail to get each label name.
Interpretation: System labels use fixed IDs such as INBOX and CATEGORY_UPDATES. User label IDs such as Label_12 are unique only inside one mailbox, so the same ID can name different labels in two mailboxes.

Label Key

Developer identifier: labels.label_keyLabel Key. The mailbox address and the label ID, joined by |.

Enables: Identify one label of one mailbox across syncs.
Interpretation: Parable builds this key because a user label ID is unique only inside its mailbox. It is the record key.

Label List Visibility

Developer identifier: labels.labelListVisibilityLabel List Visibility. Whether Gmail shows the label in the mailbox’s label list.

Enables: Separate labels the mailbox owner sees in the label list from hidden ones.
Interpretation: Google Workspace reports labelShow, labelShowIfUnread or labelHide; keep unknown values as they are.

Message List Visibility

Developer identifier: labels.messageListVisibilityMessage List Visibility. Whether Gmail shows the label on messages in the message list.

Enables: Separate labels shown on messages from hidden ones.
Interpretation: Google Workspace reports show or hide; keep unknown values as they are.

Name

Developer identifier: labels.nameName. The display name of the label, as the mailbox owner sees it in Gmail.

Enables: Group or filter messages by label name after a join on labels.id.
Interpretation: A nested user label uses / in its name, such as Customers/Acme. The mailbox owner can rename a label; the ID stays the same.

Primary Email

Developer identifier: labels.primaryEmailPrimary Email. The address of the mailbox that owns the label, copied from the parent user because the labels operation does not return it.

Enables: Join each label to the messages of the same mailbox in thread_messages.
Interpretation: Parable copies the primary email from the parent user record into each label; the Google Workspace operation does not return it.

Type

Developer identifier: labels.typeType. Whether Gmail or the mailbox owner created the label.

Enables: Separate the owner’s own labels from Gmail’s system labels and categories.
Interpretation: Google Workspace reports system or user; keep unknown values as they are.

Messages List

Developer identifier: messages_listMessages List. Gmail message identifiers used to enumerate messages.get work.

Enables: Enumerate Gmail message and thread identifiers that drive the subsequent message-detail fetch.
Scope: Reads the new records from Google Workspace’s https://gmail.googleapis.com/gmail/v1/users/{primaryEmail}/messages operation on each sync, and each row is one event. Each mailbox keeps its own row for a message, because Gmail IDs are unique only inside one mailbox. A message that a later sync lists again keeps the row stored first. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. This enumeration returns message and thread IDs only; it contains no headers, snippets, bodies, or attachment bytes. This stream supplies no reliable deletion signal.

Developer identifier: messages_list.idID. Gmail identifier of the message, unique only inside one mailbox. It provides the reference needed to connect the message reference to the corresponding provider object.

Enables: Join a message reference to other Gmail data for the same primaryEmail.
Interpretation: Google Workspace reports ID as an identifier in its message reference namespace. It is not a universal identity outside Google Workspace. Gmail IDs are unique only inside one mailbox, so the record key is message_key.

Message Key

Developer identifier: messages_list.message_keyMessage Key. A key Parable builds from primaryEmail and id, so each message in each mailbox has one key.

Enables: Identify each message in one mailbox, so two mailboxes that hold the same Gmail ID keep separate rows. Join a message reference to its details on thread_messages.message_key.
Interpretation: Parable calculates message_key when it reads the record. It is not a Gmail identifier. It is the record key.

Primary Email

Developer identifier: messages_list.primaryEmailPrimary Email. Parent primary email reference copied into each message reference because the child operation does not return that relationship. It supplies the primary email profile facet used to reconcile or attribute the messages list.

Enables: Attribute each message reference to a person or account by the exact primary email in messages_list.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each message reference; the child Google Workspace operation does not return it.

Thread ID

Developer identifier: messages_list.threadIdThread ID. The provider-reported thread ID for each message reference in message reference. It provides the reference needed to connect the message reference to the corresponding provider object.

Enables: Connect each message reference in message reference to the referenced thread through messages_list.threadId; flag thread ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports thread ID as an identifier in its thread namespace; it is not a universal identity outside Google Workspace.

Org Units

Developer identifier: org_unitsOrg Units. Organizational units.

Enables: Reconstruct the Google Workspace organizational-unit hierarchy by parent path and preserve each unit’s policy inheritance state.
Scope: Reads every record from Google Workspace’s /admin/directory/v1/customer/my_customer/orgunits operation on each sync. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. A later complete read can treat a previously seen record that is absent as removed.

Block Inheritance

Developer identifier: org_units.blockInheritanceBlock Inheritance. Determines if sub-organizational units can inherit the settings of the parent organization. This field is deprecated but may still appear in responses. It distinguishes the provider-defined block inheritance state or classification for the org unit.

Enables: Filter Org Units by whether determines if sub-organizational units can inherit the settings of the parent organization in org_units.blockInheritance; count true, false, and missing results separately.
Interpretation: Google Workspace reports determines if sub-organizational units can inherit the settings of the parent organization as a boolean on each org unit; a missing field is unknown, not false.

Description

Developer identifier: org_units.descriptionDescription. Description of the organizational unit, providing context for its purpose. It defines the content surface available for this org unit.

Enables: Locate org unit records by description in org_units.description; attribute each text match to its parent org unit and, when present, its reported author.
Interpretation: Google Workspace supplies description as text on each org unit; referenced files or media are not implied unless explicitly represented.

ETag

Developer identifier: org_units.etagETag. ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Use org_units.etag for conditional provider reads and revision checks; pair the ETag with the org unit ID rather than joining on it.
Interpretation: Google Workspace returns this ETag as an opaque revision token for each org unit; it can change when the resource changes and is not a universal identifier.

Kind

Developer identifier: org_units.kindKind. The type of the API resource. For org units, this is ‘admin#directory#orgUnit’. It supplies the kind boundary, band, or unit needed to interpret the companion measure.

Enables: Segment org unit entries in Org Units by kind in org_units.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each org unit; preserve unknown labels rather than mapping them by assumption.

Name

Developer identifier: org_units.nameName. Name of the organizational unit. It supplies the name boundary, band, or unit needed to interpret the companion measure.

Enables: Label each org unit with name from org_units.name; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports name as display text for each org unit; names are mutable and are not stable identities.

Org Unit ID

Developer identifier: org_units.orgUnitIdOrg Unit ID. Unique identifier for the organizational unit. This is the immutable ID assigned by Google. It provides the reference needed to connect the org unit to the corresponding provider object.

Enables: Match repeated org unit entries on org unit ID in org_units.orgUnitId. Only entries that share this key are the same record.
Interpretation: Google Workspace reports org unit ID as an identifier in its org unit namespace; it is not a universal identity outside Google Workspace. It is the record key.

Org Unit Path

Developer identifier: org_units.orgUnitPathOrg Unit Path. Full path of the organizational unit within the hierarchy (e.g., ‘/Engineering/Backend’). It supplies the org unit path boundary, band, or unit needed to interpret the companion measure.

Enables: Interpret org_units.orgUnitPath with its companion minimum, maximum, interval, or unit before comparing the org unit path across like-for-like records.
Interpretation: Google Workspace reports org unit path as a boundary, band, interval, or unit on each org unit; it is meaningful only with its companion measure and provider scale.

Parent Org Unit ID

Developer identifier: org_units.parentOrgUnitIdParent Org Unit ID. The unique ID of the parent organizational unit. Used for building the org unit tree structure. It provides the reference needed to connect the org unit to the corresponding provider object.

Enables: Connect each org unit in Org Units to the referenced parent org unit through org_units.parentOrgUnitId; flag parent org unit ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports parent org unit ID as an identifier in its parent org unit namespace; it is not a universal identity outside Google Workspace.

Parent Org Unit Path

Developer identifier: org_units.parentOrgUnitPathParent Org Unit Path. Path of the parent organizational unit (e.g., ‘/Engineering’). Root org units have ’/’ as parent. It supplies the parent org unit path boundary, band, or unit needed to interpret the companion measure.

Enables: Interpret org_units.parentOrgUnitPath with its companion minimum, maximum, interval, or unit before comparing the parent org unit path across like-for-like records.
Interpretation: Google Workspace reports parent org unit path as a boundary, band, interval, or unit on each org unit; it is meaningful only with its companion measure and provider scale.

Participant Detail

Developer identifier: participant_detailParticipant Detail. Full participant details.

Enables: Resolve a participant resource to its conference and provider-reported signed-in, anonymous, or phone identity.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name} operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

Anonymous User

Developer identifier: participant_detail.anonymousUserAnonymous User. Anonymous user information, present when the participant joined without signing in. It preserves the nested context needed to interpret the parent participant detail.

Enables: Attribute anonymous user in participant_detail.anonymousUser to the parent participant detail; identify parent records where that nested anonymous user object is absent.
Interpretation: Google Workspace reports anonymous user as a nested object on each participant detail; optional children may be absent from a valid response.

Display Name

Developer identifier: participant_detail.anonymousUser.displayNameDisplay Name. The display name provided by the anonymous user when joining the meeting. It distinguishes the provider-defined display name state or classification for the anonymous user.

Enables: Label each anonymous user with display name from participant_detail.anonymousUser.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each anonymous user; names are mutable and are not stable identities.

Earliest Start Time

Developer identifier: participant_detail.earliestStartTimeEarliest Start Time. The earliest time the participant joined the conference across all participant sessions. It anchors the participant detail on the provider’s reported timeline.

Enables: Filter Participant Detail by earliest start time in participant_detail.earliestStartTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports earliest start time as a timestamp on each participant detail; timezone and precision follow this API field, and absence is not an inferred event time.

Latest End Time

Developer identifier: participant_detail.latestEndTimeLatest End Time. The latest time the participant left the conference across all participant sessions. Unset if the participant is still in the meeting. It anchors the participant detail on the provider’s reported timeline.

Enables: Filter Participant Detail by latest end time in participant_detail.latestEndTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports latest end time as a timestamp on each participant detail; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: participant_detail.nameName. Resource name of the participant, in the format conferenceRecords//participants/. It gives the participant detail a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated participant detail entries on name in participant_detail.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each participant detail; names are mutable and are not stable identities. It is the record key.

Phone User

Developer identifier: participant_detail.phoneUserPhone User. Phone user information, present when the participant joined via phone dial-in. It preserves the nested context needed to interpret the parent participant detail.

Enables: Attribute phone user in participant_detail.phoneUser to the parent participant detail; identify parent records where that nested phone user object is absent.
Interpretation: Google Workspace reports phone user as a nested object on each participant detail; optional children may be absent from a valid response.

Display Name

Developer identifier: participant_detail.phoneUser.displayNameDisplay Name. The display name or partial phone number shown for the phone dial-in participant. It distinguishes the provider-defined display name state or classification for the phone user.

Enables: Label each phone user with display name from participant_detail.phoneUser.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each phone user; names are mutable and are not stable identities.

Primary Email

Developer identifier: participant_detail.primaryEmailPrimary Email. Parent primary email reference copied into each participant detail because the child operation does not return that relationship. It identifies the related provider object that gives the participant detail its parent, owner, or container context.

Enables: Attribute each participant detail to a person or account by the exact primary email in participant_detail.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each participant detail; the child Google Workspace operation does not return it.

Signedin User

Developer identifier: participant_detail.signedinUserSignedin User. Signed-in user information, present when the participant is an authenticated Google user. It preserves the nested context needed to interpret the parent participant detail.

Enables: Attribute signedin user in participant_detail.signedinUser to the parent participant detail; identify parent records where that nested signedin user object is absent.
Interpretation: Google Workspace reports signedin user as a nested object on each participant detail; optional children may be absent from a valid response.

Display Name

Developer identifier: participant_detail.signedinUser.displayNameDisplay Name. The display name of the signed-in user at the time they joined the meeting. It distinguishes the provider-defined display name state or classification for the signed in user.

Enables: Label each signed in user with display name from participant_detail.signedinUser.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each signed in user; names are mutable and are not stable identities.

User

Developer identifier: participant_detail.signedinUser.userUser. Resource name of the signed-in Google user, in the format users/user. Unique identifier for cross-system identity resolution. It identifies the related provider object that gives the signed in user its parent, owner, or container context.

Enables: Connect each signed in user to the related user in participant_detail.signedinUser.user and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports user as relationship context on each signed in user; resolve it in the named provider namespace rather than by display text alone.

Participants

Developer identifier: participantsParticipants. Conference participants.

Enables: Match each Google Meet participant resource to its conference and provider-reported user or anonymous identity.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name}/participants operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

Anonymous User

Developer identifier: participants.anonymousUserAnonymous User. Information about the participant if they joined anonymously without signing in. It preserves the nested context needed to interpret the parent participant.

Enables: Attribute anonymous user in participants.anonymousUser to the parent participant; identify parent records where that nested anonymous user object is absent.
Interpretation: Google Workspace reports anonymous user as a nested object on each participant; optional children may be absent from a valid response.

Display Name

Developer identifier: participants.anonymousUser.displayNameDisplay Name. Display name of the anonymous participant as self-reported when joining the meeting. It distinguishes the provider-defined display name state or classification for the anonymous user.

Enables: Label each anonymous user with display name from participants.anonymousUser.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each anonymous user; names are mutable and are not stable identities.

Conference Record Name

Developer identifier: participants.conferenceRecordNameConference Record Name. Parent conference record name reference copied into each participant because the child operation does not return that relationship. It gives the participant a human-readable provider label while its identifier remains the stable reference.

Enables: Label each participant with conference record name from participants.conferenceRecordName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Parable copies conference record name from the parent record into each participant; the child Google Workspace operation does not return it.

Earliest Start Time

Developer identifier: participants.earliestStartTimeEarliest Start Time. Earliest time the participant joined the meeting (RFC3339 UTC). Tracks when participants joined for time spend and meeting punctuality analysis. It anchors the participant on the provider’s reported timeline.

Enables: Filter Participants by earliest start time in participants.earliestStartTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports earliest start time as a timestamp on each participant; timezone and precision follow this API field, and absence is not an inferred event time.

Latest End Time

Developer identifier: participants.latestEndTimeLatest End Time. Latest time the participant left the meeting (RFC3339 UTC). Tracks when participants left for meeting duration and engagement analysis. It anchors the participant on the provider’s reported timeline.

Enables: Filter Participants by latest end time in participants.latestEndTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports latest end time as a timestamp on each participant; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: participants.nameName. Resource name of the participant (e.g., conferenceRecords/abc/participants/123). Unique identifier for cross-referencing participant sessions and attendance tracking. It identifies the related provider object that gives the participant its parent, owner, or container context.

Enables: Match repeated participant entries on name in participants.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each participant; names are mutable and are not stable identities. It is the record key.

Phone User

Developer identifier: participants.phoneUserPhone User. Information about the participant if they joined via phone (PSTN dial-in). It preserves the nested context needed to interpret the parent participant.

Enables: Attribute phone user in participants.phoneUser to the parent participant; identify parent records where that nested phone user object is absent.
Interpretation: Google Workspace reports phone user as a nested object on each participant; optional children may be absent from a valid response.

Display Name

Developer identifier: participants.phoneUser.displayNameDisplay Name. Display name of the phone participant, typically derived from the phone number or caller ID. It distinguishes the provider-defined display name state or classification for the phone user.

Enables: Label each phone user with display name from participants.phoneUser.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each phone user; names are mutable and are not stable identities.

Primary Email

Developer identifier: participants.primaryEmailPrimary Email. Parent primary email reference copied into each participant because the child operation does not return that relationship. It identifies the related provider object that gives the participant its parent, owner, or container context.

Enables: Attribute each participant to a person or account by the exact primary email in participants.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each participant; the child Google Workspace operation does not return it.

Signedin User

Developer identifier: participants.signedinUserSignedin User. Information about the participant if they were signed in with a Google account. It preserves the nested context needed to interpret the parent participant.

Enables: Attribute signedin user in participants.signedinUser to the parent participant; identify parent records where that nested signedin user object is absent.
Interpretation: Google Workspace reports signedin user as a nested object on each participant; optional children may be absent from a valid response.

Display Name

Developer identifier: participants.signedinUser.displayNameDisplay Name. Display name of the signed-in participant as shown in the meeting. It distinguishes the provider-defined display name state or classification for the signed in user.

Enables: Label each signed in user with display name from participants.signedinUser.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each signed in user; names are mutable and are not stable identities.

User

Developer identifier: participants.signedinUser.userUser. The authenticated user resource name (e.g., users/123456789). Links meeting attendance to specific Google Workspace users for activity analysis. It identifies the related provider object that gives the signed in user its parent, owner, or container context.

Enables: Connect each signed in user to the related user in participants.signedinUser.user and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports user as relationship context on each signed in user; resolve it in the named provider namespace rather than by display text alone.

Participantsessions

Developer identifier: participantsessionsParticipantsessions. Participant sessions.

Enables: Measure each participant’s join and leave intervals within the parent Google Meet conference.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name}/participantSessions operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

Conference Record Name

Developer identifier: participantsessions.conferenceRecordNameConference Record Name. Parent conference record name reference copied into each participantsession because the child operation does not return that relationship. It gives the participantsession a human-readable provider label while its identifier remains the stable reference.

Enables: Label each participantsession with conference record name from participantsessions.conferenceRecordName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Parable copies conference record name from the parent record into each participantsession; the child Google Workspace operation does not return it.

End Time

Developer identifier: participantsessions.endTimeEnd Time. Timestamp (RFC3339) when this participant session ended (i.e., when the participant left the meeting for this session). Null or absent if the session is still active. It anchors the participantsession on the provider’s reported timeline.

Enables: Filter Participantsessions by end time in participantsessions.endTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports end time as a timestamp on each participantsession; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: participantsessions.nameName. Resource name of the participant session, in the format conferenceRecords/conferenceRecord/participants/participant/participantSessions/participantSession. Used as the primary key for granular session-level meeting participation tracking. It gives the participantsession a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated participantsession entries on name in participantsessions.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each participantsession; names are mutable and are not stable identities. It is the record key.

Primary Email

Developer identifier: participantsessions.primaryEmailPrimary Email. Parent primary email reference copied into each participantsession because the child operation does not return that relationship. It identifies the related provider object that gives the participantsession its parent, owner, or container context.

Enables: Attribute each participantsession to a person or account by the exact primary email in participantsessions.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each participantsession; the child Google Workspace operation does not return it.

Start Time

Developer identifier: participantsessions.startTimeStart Time. Timestamp (RFC3339) when this participant session started (i.e., when the participant joined the meeting for this session). It anchors the participantsession on the provider’s reported timeline.

Enables: Filter Participantsessions by start time in participantsessions.startTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports start time as a timestamp on each participantsession; timezone and precision follow this API field, and absence is not an inferred event time.

Recording Detail

Developer identifier: recording_detailRecording Detail. Full recording details.

Enables: Attribute recording metadata to the corresponding conference and Drive destination.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name} operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The detail record contains recording metadata and destinations, not the recording bytes. This stream supplies no reliable deletion signal.

Drive Destination

Developer identifier: recording_detail.driveDestinationDrive Destination. Output only. The Google Drive destination where the recording file is saved. Only set when state is FILE_GENERATED. It preserves the nested context needed to interpret the parent recording detail.

Enables: Attribute drive destination in recording_detail.driveDestination to the parent recording detail; identify parent records where that nested drive destination object is absent.
Interpretation: Google Workspace reports drive destination as a nested object on each recording detail; optional children may be absent from a valid response.

Export URI

Developer identifier: recording_detail.driveDestination.exportUriExport URI. URL to export/download the recording file from Google Drive. It locates the provider resource or path associated with the drive destination.

Enables: Associate each drive destination with the resource identified by export URI in recording_detail.driveDestination.exportUri; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports export URI as a resource locator for each drive destination; access still depends on viewer permissions and the URL may expire or change.

File

Developer identifier: recording_detail.driveDestination.fileFile. Resource name of the Drive file where the recording is stored, in the format files/*. Can be used with the Google Drive API to access the recording file. It identifies the file, document, recording, or attachment metadata associated with the drive destination.

Enables: Associate the file in recording_detail.driveDestination.file with its parent recording detail; inventory the artifact reference without assuming binary content is present.
Interpretation: Google Workspace reports file as file, document, recording, or attachment metadata on each drive destination; binary bytes are not implied.

End Time

Developer identifier: recording_detail.endTimeEnd Time. Timestamp when the recording ended, in RFC 3339 UTC format. Only set when the recording has ended. It anchors the recording detail on the provider’s reported timeline.

Enables: Filter Recording Detail by end time in recording_detail.endTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports end time as a timestamp on each recording detail; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: recording_detail.nameName. Resource name of the recording, in the format conferenceRecords//recordings/. Serves as the unique identifier for this recording. It identifies the related provider object that gives the recording detail its parent, owner, or container context.

Enables: Match repeated recording detail entries on name in recording_detail.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each recording detail; names are mutable and are not stable identities. It is the record key.

Primary Email

Developer identifier: recording_detail.primaryEmailPrimary Email. Parent primary email reference copied into each recording detail because the child operation does not return that relationship. It identifies the related provider object that gives the recording detail its parent, owner, or container context.

Enables: Attribute each recording detail to a person or account by the exact primary email in recording_detail.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each recording detail; the child Google Workspace operation does not return it.

Start Time

Developer identifier: recording_detail.startTimeStart Time. Timestamp when the recording started, in RFC 3339 UTC format. It anchors the recording detail on the provider’s reported timeline.

Enables: Filter Recording Detail by start time in recording_detail.startTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports start time as a timestamp on each recording detail; timezone and precision follow this API field, and absence is not an inferred event time.

State

Developer identifier: recording_detail.stateState. Current state of the recording. Possible values: STARTED (recording in progress), ENDED (recording stopped but file not yet generated), FILE_GENERATED (recording file is available). It distinguishes the provider-defined state state or classification for the recording detail.

Enables: Segment recording detail entries in Recording Detail by state in recording_detail.state; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports state as a label from its own taxonomy on each recording detail; preserve unknown labels rather than mapping them by assumption.

Recordings

Developer identifier: recordingsRecordings. Conference recordings.

Enables: Inventory recording-resource metadata associated with Google Meet conferences.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name}/recordings operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. These are recording resource records, not audio or video bytes. This stream supplies no reliable deletion signal.

Conference Record Name

Developer identifier: recordings.conferenceRecordNameConference Record Name. Parent conference record name reference copied into each recording because the child operation does not return that relationship. It gives the recording a human-readable provider label while its identifier remains the stable reference.

Enables: Label each recording with conference record name from recordings.conferenceRecordName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Parable copies conference record name from the parent record into each recording; the child Google Workspace operation does not return it.

Drive Destination

Developer identifier: recordings.driveDestinationDrive Destination. Output only. The Google Drive destination where the recording file is saved. It preserves the nested context needed to interpret the parent recording.

Enables: Attribute drive destination in recordings.driveDestination to the parent recording; identify parent records where that nested drive destination object is absent.
Interpretation: Google Workspace reports drive destination as a nested object on each recording; optional children may be absent from a valid response.

Export URI

Developer identifier: recordings.driveDestination.exportUriExport URI. Output only. Link to access the recording file in Google Drive. It locates the provider resource or path associated with the drive destination.

Enables: Associate each drive destination with the resource identified by export URI in recordings.driveDestination.exportUri; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports export URI as a resource locator for each drive destination; access still depends on viewer permissions and the URL may expire or change.

File

Developer identifier: recordings.driveDestination.fileFile. Output only. The Drive file resource name where the recording is stored, in the format files/fileId. It identifies the file, document, recording, or attachment metadata associated with the drive destination.

Enables: Associate the file in recordings.driveDestination.file with its parent recording; inventory the artifact reference without assuming binary content is present.
Interpretation: Google Workspace reports file as file, document, recording, or attachment metadata on each drive destination; binary bytes are not implied.

End Time

Developer identifier: recordings.endTimeEnd Time. Timestamp when the recording ended, in RFC3339 UTC format. It anchors the recording on the provider’s reported timeline.

Enables: Filter Recordings by end time in recordings.endTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports end time as a timestamp on each recording; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: recordings.nameName. Resource name of the recording, in the format conferenceRecords//recordings/. It gives the recording a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated recording entries on name in recordings.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each recording; names are mutable and are not stable identities. It is the record key.

Primary Email

Developer identifier: recordings.primaryEmailPrimary Email. Parent primary email reference copied into each recording because the child operation does not return that relationship. It identifies the related provider object that gives the recording its parent, owner, or container context.

Enables: Attribute each recording to a person or account by the exact primary email in recordings.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each recording; the child Google Workspace operation does not return it.

Start Time

Developer identifier: recordings.startTimeStart Time. Timestamp when the recording started, in RFC3339 UTC format. It anchors the recording on the provider’s reported timeline.

Enables: Filter Recordings by start time in recordings.startTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports start time as a timestamp on each recording; timezone and precision follow this API field, and absence is not an inferred event time.

State

Developer identifier: recordings.stateState. State of the recording (e.g., STARTED, ENDED, FILE_GENERATED). It distinguishes the provider-defined state state or classification for the recording.

Enables: Segment recording entries in Recordings by state in recordings.state; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports state as a label from its own taxonomy on each recording; preserve unknown labels rather than mapping them by assumption.

Shared Drive File Permissions

Developer identifier: shared_drive_file_permissionsShared Drive File Permissions. The permissions of each shared drive Doc, Sheet, and folder that has permissions of its own: the users, groups, domains, and link audiences it is shared with, and the role each one has.

Enables: List who can open an item that is shared beyond its folder or that is a limited-access folder. For source permissions, each permission is a grant on its item, which the items under a folder inherit.
Scope: Reads Google Drive’s permissions.list operation (https://www.googleapis.com/drive/v3/files/{id}/permissions) with supportsAllDrives=true, 100 permissions per page, in the delegated context of the manager that listed the item, in full on each sync. Drive does not return permissions with shared drive items, so each sync sends at least one request for every item whose Has Augmented Permissions is true, and none for the other items. The list holds the item’s permissions that it inherits, too. A later complete read marks a permission that is absent as removed.

Allow File Discovery

Developer identifier: shared_drive_file_permissions.allowFileDiscoveryAllow File Discovery. Whether people in the audience of a domain or anyone permission can find the item through search, or need the link to open it.

Enables: Separate discoverable domain and anyone grants from link-only grants in shared_drive_file_permissions.allowFileDiscovery.
Interpretation: Google Workspace reports this boolean on domain and anyone permissions only. When it is false, the grant admits only people who hold the link, and the link holders are not in the data. A missing value on a user or group permission does not mean false.

Deleted

Developer identifier: shared_drive_file_permissions.deletedDeleted. Whether the account that the permission names was deleted.

Enables: Exclude grants to deleted accounts in shared_drive_file_permissions.deleted when you list who has access to the shared drive item.
Interpretation: Google Workspace reports this boolean on user and group permissions. A true value means the permission grants nothing. A missing value does not mark the grant inactive.

Domain

Developer identifier: shared_drive_file_permissions.domainDomain. The Google Workspace domain that a domain permission names.

Enables: Read domain-wide access to the shared drive item from shared_drive_file_permissions.domain, and match it to the domain of a reader’s primary email address.
Interpretation: Google Workspace reports the domain as a DNS name. The grantee type of the same permission decides whether this field or Email Address names the grantee. A domain grant is not a list of the people in that domain.

Email Address

Developer identifier: shared_drive_file_permissions.emailAddressEmail Address. The email address of the user or group that the permission names.

Enables: Resolve a user or group grantee in shared_drive_file_permissions.emailAddress to a Google Workspace user or group by its email address.
Interpretation: Google Workspace reports email address on user and group permissions only. Aliases, casing, and addresses outside the directory can prevent a match. A grantee outside the directory still names a real grant. A group address names the group, not its members. The value is part of the row’s synthetic key.

Expiration Time

Developer identifier: shared_drive_file_permissions.expirationTimeExpiration Time. The time at which the permission stops giving access to the shared drive item.

Enables: Drop expired grants in shared_drive_file_permissions.expirationTime before the next sync removes them.
Interpretation: Google Workspace reports expiration time as a timestamp on user and group permissions that have an expiry. A missing value means that the permission has no expiry.

File ID

Developer identifier: shared_drive_file_permissions.file_idFile ID. The shared drive item this permission belongs to, copied from the parent item because the permissions operation does not return it.

Enables: Join each permission to shared_drive_files.id and list who can open an item.
Interpretation: Parable copies the item ID from the parent record into each permission row. The value is in Google Drive’s item namespace. For source permissions, Parable uses this field as the item that the grant applies to and ties each row to its item, so a reader sees the permissions of the items they can open.

Permission ID

Developer identifier: shared_drive_file_permissions.idPermission ID. Google Drive’s ID for the permission. It is also the grantee’s permission ID.

Enables: Identify each permission of the shared drive item by Permission ID in shared_drive_file_permissions.id, and connect a user grantee to the Permission ID that Drive reports for that user on other items.
Interpretation: Google Workspace reports permission ID as an opaque identifier in its Drive permission namespace. It names one grantee, and the same grantee has the same ID on other items. It is not the user’s directory ID.

Permission Key

Developer identifier: shared_drive_file_permissions.permission_keyPermission Key. A key Parable builds from file_id, id, and emailAddress, so each combination of those values has one key.

Enables: Deduplicate each permission of a shared drive item on its own, so a grantee with access to several items keeps one row per item.
Interpretation: Parable calculates permission_key when it reads the record. It identifies one item-to-grantee relationship, not the grantee or the item by itself, and is not a Google Workspace identifier. It is the record key.

Role

Developer identifier: shared_drive_file_permissions.roleRole. The Drive role that the permission grants on the shared drive item.

Enables: Compare grants in shared_drive_file_permissions.role on a common level: owner and organizer as owner, fileOrganizer and writer as write, commenter as comment, and reader as read.
Interpretation: Google Workspace reports role as a label from its Drive role taxonomy. In a shared drive, organizer is the Manager role and fileOrganizer is the Content manager role. The role is a sharing setting, not a record of what the grantee did.

Grantee Type

Developer identifier: shared_drive_file_permissions.typeGrantee Type. The kind of grantee that the permission names: a user, a group, a domain, or anyone.

Enables: Decide from shared_drive_file_permissions.type which field names the grantee: Email Address for a user or a group, Domain for a domain, and neither for anyone.
Interpretation: Google Workspace reports grantee type as a label from its Drive permission taxonomy. For source permissions, Parable reads each value as the kind of the grant’s subject.

View

Developer identifier: shared_drive_file_permissions.viewView. The view that a permission belongs to. metadata marks access to the item’s name and metadata only, as Drive gives inside a limited-access folder to people who can no longer open it.

Enables: Separate metadata-only entries from permissions that open the item in shared_drive_file_permissions.view.
Interpretation: Google Workspace reports view only on permissions that belong to a view. Drive returns published view permissions only on request, and this stream does not request them. For source permissions, Parable reads a metadata entry as a grant that admits nobody.

Shared Drive Files

Developer identifier: shared_drive_filesShared Drive Files. Google Docs, Sheets, and folders in each shared drive, with their folder and the facts that decide who inherits access to them.

Enables: Inventory the Docs, Sheets, and folders of each shared drive, rebuild its folder tree, and find limited-access folders and items shared beyond their folder. For source permissions, each item admits the members of its drive, the people its folders are shared with, and the people it is shared with directly, until a limited-access folder stops inheritance.
Scope: Reads Google Drive’s files.list operation (https://www.googleapis.com/drive/v3/files) with corpora=drive, driveId, includeItemsFromAllDrives=true, and supportsAllDrives=true, 1,000 items per page, in full on each sync. Drive lists a shared drive’s items only to its members, so each drive is read once, in the delegated context of its first active user manager (organizer) in Shared Drive Members. A drive with no such manager, or whose manager cannot be delegated to, is not read. Only items that are not trashed are read, so a later complete read marks a trashed or removed item as removed. The stream contains item metadata, not document text, spreadsheet cell contents, or file bytes.

Created Time

Developer identifier: shared_drive_files.createdTimeCreated Time. The time the item was created (RFC 3339).

Enables: Order Shared Drive Files by created time in shared_drive_files.createdTime.
Interpretation: Google Workspace reports created time as a timestamp on each item. Absence is not an inferred event time.

Drive ID

Developer identifier: shared_drive_files.driveIdDrive ID. The shared drive that holds the item.

Enables: Join each item to its drive in shared_drives.id through shared_drive_files.driveId, and count items per drive.
Interpretation: Google Workspace reports drive ID as an identifier in its Drive item namespace. It is also the ID of the drive’s top-level folder.

Has Augmented Permissions

Developer identifier: shared_drive_files.hasAugmentedPermissionsHas Augmented Permissions. Whether the item has permissions of its own, beyond those it inherits from its folder and its drive.

Enables: Find the items in shared_drive_files.hasAugmentedPermissions that are shared with more people than their folder. Shared Drive File Permissions reads the permissions of only these items.
Interpretation: Google Workspace reports this boolean only for items in shared drives. A missing value is unknown, not false, and Parable then reads no permissions for the item.

Developer identifier: shared_drive_files.idID. Google Drive’s ID for the item.

Enables: Match repeated shared drive item entries on ID in shared_drive_files.id, connect an item to the items whose Parents name it, and connect it to its permissions in shared_drive_file_permissions.file_id.
Interpretation: Google Workspace reports ID as an identifier in its Drive item namespace. It is not a universal identity outside Google Workspace. It is the record key.

Inherited Permissions Disabled

Developer identifier: shared_drive_files.inheritedPermissionsDisabledInherited Permissions Disabled. Whether the item is a limited-access folder: only managers of the drive and the people it is shared with directly can open it.

Enables: Find the limited-access folders in shared_drive_files.inheritedPermissionsDisabled, whose items do not inherit the drive’s members.
Interpretation: Google Workspace reports this boolean on each item, and documents limited access for folders only. For source permissions, a true value stops inheritance from the parent folder and the drive: the item keeps only its own permissions, and the items under it inherit only those.

MIME Type

Developer identifier: shared_drive_files.mimeTypeMIME Type. The kind of item: a Google Doc, a Google Sheet, or a folder.

Enables: Separate documents, spreadsheets, and folders in shared_drive_files.mimeType.
Interpretation: Google Workspace reports MIME type as a label from its own taxonomy. The stream asks only for application/vnd.google-apps.document, application/vnd.google-apps.spreadsheet, and application/vnd.google-apps.folder.

Modified Time

Developer identifier: shared_drive_files.modifiedTimeModified Time. The last time anyone modified the item (RFC 3339).

Enables: Order Shared Drive Files by modified time in shared_drive_files.modifiedTime, and keep the latest state of each item.
Interpretation: Google Workspace reports modified time as a timestamp on each item. A sharing change does not always change it. Parable uses this field to order records for latest-state processing.

Name

Developer identifier: shared_drive_files.nameName. The name of the item.

Enables: Label each shared drive item with the name from shared_drive_files.name. Distinguish items that share a name by their ID.
Interpretation: Google Workspace reports name as display text for each item. Names are mutable and are not stable identities.

Organizer Email

Developer identifier: shared_drive_files.organizer_emailOrganizer Email. The email address of the drive manager (organizer) whose delegated identity listed the item, copied from the Shared Drive Members row.

Enables: Trace which manager’s identity read each drive in shared_drive_files.organizer_email, and read the item’s permissions as the same manager.
Interpretation: Parable copies the address from the parent record. The Drive operation does not return it. One manager is chosen per drive, the first active user manager in the members list. It does not mean that the manager created or owns the item.

Parents

Developer identifier: shared_drive_files.parentsParents. The folder that holds the item: another folder of the drive, or the drive’s top-level folder, whose ID is the drive ID.

Enables: Rebuild the folder tree of each shared drive from shared_drive_files.parents, and find the items of a folder.
Interpretation: Google Workspace returns parents as an array. Google documents that an item in a shared drive has exactly one parent. For source permissions, Parable gives each item the grants of its parent folder, up to the drive’s members, and stops where Inherited Permissions Disabled is true.

Web View Link

Developer identifier: shared_drive_files.webViewLinkWeb View Link. A link that opens the item in a Google editor or viewer in a browser.

Enables: Open the item that a row describes from shared_drive_files.webViewLink.
Interpretation: Google Workspace reports the link as a resource locator for each item. Access still depends on the viewer’s own Drive permissions, and the URL can change.

Shared Drive Members

Developer identifier: shared_drive_membersShared Drive Members. The members of each shared drive: the users, groups, domains, and link audiences that the drive is shared with, and the role each one has.

Enables: List who can open each shared drive and with which role. For source permissions, each member is a grant on the drive’s top-level folder, which every item of the drive inherits until a folder limits access.
Scope: Reads Google Drive’s permissions.list operation (https://www.googleapis.com/drive/v3/files/{id}/permissions) on each shared drive’s ID, with useDomainAdminAccess=true and supportsAllDrives=true, as the Workspace administrator that the connection delegates to, 100 permissions per page, in full on each sync. Each sync sends at least one request per drive. A later complete read marks a membership that is absent as removed. A group member names the group. Group Members supplies its members.

Allow File Discovery

Developer identifier: shared_drive_members.allowFileDiscoveryAllow File Discovery. Whether people in the audience of a domain or anyone permission can find the drive’s items through search, or need the link to open it.

Enables: Separate discoverable domain and anyone grants from link-only grants in shared_drive_members.allowFileDiscovery.
Interpretation: Google Workspace reports this boolean on domain and anyone permissions only. When it is false, the grant admits only people who hold the link, and the link holders are not in the data. A missing value on a user or group permission does not mean false.

Deleted

Developer identifier: shared_drive_members.deletedDeleted. Whether the account that the permission names was deleted.

Enables: Exclude grants to deleted accounts in shared_drive_members.deleted when you list who has access to the shared drive.
Interpretation: Google Workspace reports this boolean on user and group permissions. A true value means the permission grants nothing. A missing value does not mark the grant inactive.

Domain

Developer identifier: shared_drive_members.domainDomain. The Google Workspace domain that a domain permission names.

Enables: Read domain-wide access to the shared drive from shared_drive_members.domain, and match it to the domain of a reader’s primary email address.
Interpretation: Google Workspace reports the domain as a DNS name. The grantee type of the same permission decides whether this field or Email Address names the grantee. A domain grant is not a list of the people in that domain.

Drive ID

Developer identifier: shared_drive_members.drive_idDrive ID. The shared drive this membership belongs to, copied from the parent drive because the permissions operation does not return it.

Enables: Join each membership to shared_drives.id and list the shared drives a grantee is a member of.
Interpretation: Parable copies the drive ID from the parent record into each member row. The value is in Google Drive’s item namespace. Google documents that a shared drive’s ID is also the ID of its top-level folder, and that folder’s permissions are the drive’s members. For source permissions, Parable uses this field as the item that the grant applies to, the drive’s top-level folder in Shared Drive Files, and ties each row to its drive in Shared Drives.

Email Address

Developer identifier: shared_drive_members.emailAddressEmail Address. The email address of the user or group that the permission names.

Enables: Resolve a user or group grantee in shared_drive_members.emailAddress to a Google Workspace user or group by its email address.
Interpretation: Google Workspace reports email address on user and group permissions only. Aliases, casing, and addresses outside the directory can prevent a match. A grantee outside the directory still names a real grant. A group address names the group, not its members. The value is part of the row’s synthetic key.

Expiration Time

Developer identifier: shared_drive_members.expirationTimeExpiration Time. The time at which the permission stops giving access to the shared drive.

Enables: Drop expired grants in shared_drive_members.expirationTime before the next sync removes them.
Interpretation: Google Workspace reports expiration time as a timestamp on user and group permissions that have an expiry. A missing value means that the permission has no expiry.

Permission ID

Developer identifier: shared_drive_members.idPermission ID. Google Drive’s ID for the permission. It is also the grantee’s permission ID.

Enables: Identify each permission of the shared drive by Permission ID in shared_drive_members.id, and connect a user grantee to the Permission ID that Drive reports for that user on other items.
Interpretation: Google Workspace reports permission ID as an opaque identifier in its Drive permission namespace. It names one grantee, and the same grantee has the same ID on other items. It is not the user’s directory ID.

Member Key

Developer identifier: shared_drive_members.member_keyMember Key. A key Parable builds from drive_id, id, and emailAddress, so each combination of those values has one key.

Enables: Deduplicate each membership of a shared drive on its own, so a grantee who is a member of several drives keeps one row per drive.
Interpretation: Parable calculates member_key when it reads the record. It identifies one drive-to-grantee relationship, not the grantee or the drive by itself, and is not a Google Workspace identifier. It is the record key.

Role

Developer identifier: shared_drive_members.roleRole. The Drive role that the permission grants on the shared drive.

Enables: Compare grants in shared_drive_members.role on a common level: owner and organizer as owner, fileOrganizer and writer as write, commenter as comment, and reader as read.
Interpretation: Google Workspace reports role as a label from its Drive role taxonomy. In a shared drive, organizer is the Manager role and fileOrganizer is the Content manager role. The role is a sharing setting, not a record of what the grantee did.

Grantee Type

Developer identifier: shared_drive_members.typeGrantee Type. The kind of grantee that the permission names: a user, a group, a domain, or anyone.

Enables: Decide from shared_drive_members.type which field names the grantee: Email Address for a user or a group, Domain for a domain, and neither for anyone.
Interpretation: Google Workspace reports grantee type as a label from its Drive permission taxonomy. For source permissions, Parable reads each value as the kind of the grant’s subject.

Shared Drives

Developer identifier: shared_drivesShared Drives. The shared drives of the Google Workspace domain, with their names, organizational units, and sharing restrictions.

Enables: Inventory shared drives, and supply the drives whose members and items the Shared Drive Members and Shared Drive Files streams read. For source permissions, each drive admits the members of its top-level folder.
Scope: Reads Google Drive’s drives.list operation (https://www.googleapis.com/drive/v3/drives) with useDomainAdminAccess=true, as the Workspace administrator that the connection delegates to, in full on each sync. The administrator sees every shared drive of the domain without being a member. A later complete read marks a drive that is absent as removed. The stream is off by default: turning it on adds one drives.list request per 100 drives to each sync.

Created Time

Developer identifier: shared_drives.createdTimeCreated Time. The time the shared drive was created (RFC 3339).

Enables: Order Shared Drives by created time in shared_drives.createdTime.
Interpretation: Google Workspace reports created time as a timestamp on each shared drive. Absence is not an inferred event time.

Hidden

Developer identifier: shared_drives.hiddenHidden. Whether the shared drive is hidden from the default view.

Enables: Filter Shared Drives by shared_drives.hidden. Count true, false, and missing results separately.
Interpretation: Google Workspace reports this boolean on each shared drive. A hidden drive is still a drive with members and items. Hiding it does not change who can open it.

Developer identifier: shared_drives.idID. Google Drive’s ID for the shared drive. Google documents that it is also the ID of the drive’s top-level folder.

Enables: Match repeated shared drive entries on ID in shared_drives.id, and connect each drive to its members (shared_drive_members.drive_id) and its items (shared_drive_files.driveId).
Interpretation: Google Workspace reports ID as an identifier in its Drive item namespace. It is not a universal identity outside Google Workspace. It is the record key. For source permissions, Parable gives the drive the grants of its top-level folder, which are the drive’s members.

Name

Developer identifier: shared_drives.nameName. The name of the shared drive.

Enables: Label each shared drive with the name from shared_drives.name. Distinguish drives that share a name by their ID.
Interpretation: Google Workspace reports name as display text for each shared drive. Names are mutable and are not stable identities.

Organizational Unit ID

Developer identifier: shared_drives.orgUnitIdOrganizational Unit ID. The organizational unit of the shared drive.

Enables: Group Shared Drives by organizational unit in shared_drives.orgUnitId, and connect a drive to org_units.
Interpretation: Google Workspace reports this identifier only to a domain administrator, which is how this stream reads it. The value is in Google Workspace’s organizational unit namespace.

Restrictions

Developer identifier: shared_drives.restrictionsRestrictions. The restrictions set on the shared drive and its items.

Enables: Find the shared drives in shared_drives.restrictions that allow sharing outside the domain or outside the drive’s members.
Interpretation: Google Workspace reports restrictions as a nested object on each shared drive. They limit what members can share. Source permissions read the grants that exist, not these settings.

Admin Managed Restrictions

Developer identifier: shared_drives.restrictions.adminManagedRestrictionsAdmin Managed Restrictions. Whether only domain administrators can change the restrictions of the shared drive.

Enables: Filter Shared Drives by this restriction in shared_drives.restrictions.adminManagedRestrictions. Count true, false, and missing results separately.
Interpretation: Google Workspace reports this boolean on each shared drive. A missing value is unknown, not false.

Copy Requires Writer Permission

Developer identifier: shared_drives.restrictions.copyRequiresWriterPermissionCopy Requires Writer Permission. Whether readers and commenters cannot copy, print, or download the items of the shared drive.

Enables: Filter Shared Drives by this restriction in shared_drives.restrictions.copyRequiresWriterPermission. Count true, false, and missing results separately.
Interpretation: Google Workspace reports this boolean on each shared drive. It limits what readers can do with an item, not who can open it. A missing value is unknown, not false.

Domain Users Only

Developer identifier: shared_drives.restrictions.domainUsersOnlyDomain Users Only. Whether only users of the domain that owns the shared drive can open the drive and its items.

Enables: Filter Shared Drives by this restriction in shared_drives.restrictions.domainUsersOnly. Count true, false, and missing results separately.
Interpretation: Google Workspace reports this boolean on each shared drive. It applies to new sharing. Google can keep earlier grants to other domains. A missing value is unknown, not false.

Drive Members Only

Developer identifier: shared_drives.restrictions.driveMembersOnlyDrive Members Only. Whether only members of the shared drive can open its items.

Enables: Filter Shared Drives by this restriction in shared_drives.restrictions.driveMembersOnly. Count true, false, and missing results separately.
Interpretation: Google Workspace reports this boolean on each shared drive. When it is true, members cannot share an item with people outside the drive. A missing value is unknown, not false.

Sharing Folders Requires Organizer Permission

Developer identifier: shared_drives.restrictions.sharingFoldersRequiresOrganizerPermissionSharing Folders Requires Organizer Permission. Whether only managers (organizers) of the shared drive can share its folders.

Enables: Filter Shared Drives by this restriction in shared_drives.restrictions.sharingFoldersRequiresOrganizerPermission. Count true, false, and missing results separately.
Interpretation: Google Workspace reports this boolean on each shared drive. A missing value is unknown, not false.

Spaces

Developer identifier: spacesSpaces. Google Meet space details fetched per unique space from conference records.

Enables: Match each unique Google Meet space referenced by conference records to its meeting code, configuration, and active-conference state.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{space} operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

Active Conference

Developer identifier: spaces.activeConferenceActive Conference. Information about the currently active conference in this space, if any. It preserves the nested context needed to interpret the parent space.

Enables: Attribute active conference in spaces.activeConference to the parent space; identify parent records where that nested active conference object is absent.
Interpretation: Google Workspace reports active conference as a nested object on each space; optional children may be absent from a valid response.

Conference Record

Developer identifier: spaces.activeConference.conferenceRecordConference Record. Resource name of the active conference record (e.g., conferenceRecords/abc123). Links to the Conference Records stream for detailed meeting data. It identifies the related provider object that gives the active conference its parent, owner, or container context.

Enables: Connect each active conference to the related conference record in spaces.activeConference.conferenceRecord and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports conference record as relationship context on each active conference; resolve it in the named provider namespace rather than by display text alone.

Config

Developer identifier: spaces.configConfig. Configuration settings for the meeting space, including access controls. It preserves the nested context needed to interpret the parent space.

Enables: Attribute config in spaces.config to the parent space; identify parent records where that nested config object is absent.
Interpretation: Google Workspace reports config as a nested object on each space; optional children may be absent from a valid response.

Access Type

Developer identifier: spaces.config.accessTypeAccess Type. Access type controlling who can join the meeting space. It distinguishes the provider-defined access type state or classification for the space config.

Enables: Segment space config entries in Spaces by access type in spaces.config.accessType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports access type as a label from its own taxonomy on each space config; preserve unknown labels rather than mapping them by assumption.

Entry Point Access

Developer identifier: spaces.config.entryPointAccessEntry Point Access. Entry point access controlling which apps can be used to join. It distinguishes the provider-defined entry point access state or classification for the space config.

Enables: Segment space config entries in Spaces by entry point access in spaces.config.entryPointAccess; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports entry point access as a label from its own taxonomy on each space config; preserve unknown labels rather than mapping them by assumption.

Meeting Code

Developer identifier: spaces.meetingCodeMeeting Code. Human-readable code used to join the meeting, typically a short alphanumeric string. It supplies the sensitive provider access code needed to join the space, not a stable record identifier.

Enables: Reconcile spaces.meetingCode with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
Interpretation: Google Workspace returns meeting code as meeting or conference access metadata on each space; it can rotate and does not identify the meeting by itself.

Meeting URI

Developer identifier: spaces.meetingUriMeeting URI. URI used to join the meeting space, typically a meet.google.com link. It locates the provider resource or path associated with the space.

Enables: Associate each space with the resource identified by meeting URI in spaces.meetingUri; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports meeting URI as a resource locator for each space; access still depends on viewer permissions and the URL may expire or change.

Name

Developer identifier: spaces.nameName. Resource name of the space (e.g., spaces/abc123). Serves as the unique identifier for this meeting space. It identifies the related provider object that gives the space its parent, owner, or container context.

Enables: Match repeated space entries on name in spaces.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each space; names are mutable and are not stable identities. It is the record key.

Primary Email

Developer identifier: spaces.primaryEmailPrimary Email. Parent primary email reference copied into each space because the child operation does not return that relationship. It identifies the related provider object that gives the space its parent, owner, or container context.

Enables: Attribute each space to a person or account by the exact primary email in spaces.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each space; the child Google Workspace operation does not return it.

Thread Messages

Developer identifier: thread_messagesThread Messages. Projected Gmail message details fetched for each enumerated message.

Enables: Attribute projected Gmail headers, labels, snippets, MIME metadata, and timestamps to each message and mailbox.
Scope: Reads every record from Google Workspace’s https://gmail.googleapis.com/gmail/v1/users/{primaryEmail}/messages/{id} operation on each sync, and each row is one event. Each mailbox keeps its own row for a message, because Gmail IDs are unique only inside one mailbox. A message that a later sync reads again keeps the row stored first, so its labels are those of the first read. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The projection includes selected headers, labels, snippets, and MIME-part metadata, but excludes MIME body data, raw RFC email, and attachment bytes. This stream supplies no reliable deletion signal.

History ID

Developer identifier: thread_messages.historyIdHistory ID. The ID of the last history record that modified this message, for Gmail history API correlation. It provides the reference needed to connect the thread message to the corresponding provider object.

Enables: Connect each thread message in Thread Messages to the referenced history through thread_messages.historyId; flag history ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports history ID as an identifier in its history namespace; it is not a universal identity outside Google Workspace.

Developer identifier: thread_messages.idID. Gmail identifier of the message, unique only inside one mailbox. Used with primaryEmail to cross-reference Gmail messages with other activity data. It provides the reference needed to connect the thread message to the corresponding provider object.

Enables: Join a message to other Gmail data for the same primaryEmail.
Interpretation: Google Workspace reports ID as an identifier in its thread message namespace. It is not a universal identity outside Google Workspace. Gmail IDs are unique only inside one mailbox, so the record key is message_key.

Internal Date

Developer identifier: thread_messages.internalDateInternal Date. Gmail internalDate: milliseconds since Unix epoch as a decimal string (not ISO-8601). It anchors the thread message on the provider’s reported timeline.

Enables: Order Thread Messages by internal date in thread_messages.internalDate and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports internal date in milliseconds since the Unix epoch on each thread message; it is not ISO-8601 and must be converted with that explicit unit. Parable uses this field to keep the latest version of each record. It is the time of the event.

Label IDs

Developer identifier: thread_messages.labelIdsLabel IDs. List of label IDs applied to this message (e.g., INBOX, SENT, UNREAD, SPAM, CATEGORY_*). Drives direction and category classification downstream. It preserves the nested context needed to interpret the parent thread message.

Enables: Connect the parent thread message to every referenced label ID value in thread_messages.labelIds; identify provider IDs that do not resolve to the expected related object.
Interpretation: Google Workspace returns label IDs as an array of label ID value entries on each thread message; missing, empty, and permission-redacted arrays are not equivalent. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.

Message Key

Developer identifier: thread_messages.message_keyMessage Key. A key Parable builds from primaryEmail and id, so each message in each mailbox has one key.

Enables: Identify each message in one mailbox, so two mailboxes that hold the same Gmail ID keep separate rows.
Interpretation: Parable calculates message_key when it reads the record. It is not a Gmail identifier. It is the record key.

Payload

Developer identifier: thread_messages.payloadPayload. The parsed MIME structure of the message: recursive part tree with per-part headers, MIME types, attachment filenames, and body sizes. Body data is excluded by the fields projection. It preserves the nested context needed to interpret the parent thread message.

Enables: Attribute payload in thread_messages.payload to the parent thread message; identify parent records where that nested payload object is absent.
Interpretation: Google Workspace reports payload as a nested object on each thread message; optional children may be absent from a valid response. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

Body

Developer identifier: thread_messages.payload.bodyBody. The message part body metadata for this part (size and attachment ID; body data is not fetched). It preserves the nested context needed to interpret the parent thread message.

Enables: Attribute body in thread_messages.payload.body to the parent thread message; identify parent records where that nested body object is absent.
Interpretation: Google Workspace reports body as a nested object on each gmail message part; optional children may be absent from a valid response. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

Attachment ID

Developer identifier: thread_messages.payload.body.attachmentIdAttachment ID. The ID of the attachment if this body represents an attachment. Present only on attachment parts. It provides the reference needed to connect the thread message to the corresponding provider object.

Enables: Connect each gmail message part body in Thread Messages to the referenced attachment through thread_messages.payload.body.attachmentId; flag attachment ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports attachment ID as an identifier in its attachment namespace; it is not a universal identity outside Google Workspace. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

Size

Developer identifier: thread_messages.payload.body.sizeSize. Number of bytes for the message part data (encoding notwithstanding). It supplies the size measure for the gmail message part body at the provider’s declared unit and grain.

Enables: Measure size through thread_messages.payload.body.size for each gmail message part body and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports size as a measure on each gmail message part body; compare only records with the same unit and aggregation grain. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.

Filename

Developer identifier: thread_messages.payload.filenameFilename. The filename of the attachment. Empty string for non-attachment parts. It identifies the file, document, recording, or attachment metadata associated with the gmail message part.

Enables: Associate the filename in thread_messages.payload.filename with its parent thread message; inventory the artifact reference without assuming binary content is present.
Interpretation: Google Workspace reports filename as file, document, recording, or attachment metadata on each gmail message part; binary bytes are not implied. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.

Headers

Developer identifier: thread_messages.payload.headersHeaders. List of headers on this message part. For the top-level payload, includes standard RFC 2822 headers such as From, To, Subject, Date. It preserves the nested context needed to interpret the parent thread message.

Enables: Search the returned headers content in thread_messages.payload.headers while preserving element order and attribution to the parent thread message.
Interpretation: Google Workspace returns headers as ordered content or provider-generated content metadata on each gmail message part; truncation, omission, and inaccessible source media can limit completeness. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.

Name

Developer identifier: thread_messages.payload.headers.nameName. The name of the header (e.g., From, To, Subject, Date, Content-Type, Message-ID). It supplies the returned name text needed to understand the gmail message part header in context.

Enables: Match repeated gmail message part header entries on name in thread_messages.payload.headers.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each gmail message part header; names are mutable and are not stable identities. It is the key of this nested record. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.

Value

Developer identifier: thread_messages.payload.headers.valueValue. The value of the header. It must be interpreted with the enclosing provider field name, type, or custom schema for the gmail message part header.

Enables: Interpret thread_messages.payload.headers.value with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Google Workspace reports value under the enclosing custom or typed field contract on each gmail message part header; compare it only with values from the same provider key and type. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.

MIME Type

Developer identifier: thread_messages.payload.mimeTypeMIME Type. The MIME type of the message part (e.g., text/plain, text/html, multipart/alternative). It supplies the returned MIME type text needed to understand the gmail message part in context.

Enables: Segment gmail message part entries in Thread Messages by MIME type in thread_messages.payload.mimeType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports MIME type as a label from its own taxonomy on each gmail message part; preserve unknown labels rather than mapping them by assumption. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.

Part ID

Developer identifier: thread_messages.payload.partIdPart ID. The immutable ID of the message part. It provides the reference needed to connect the thread message to the corresponding provider object.

Enables: Match repeated gmail message part entries on part ID in thread_messages.payload.partId. Only entries that share this key are the same record.
Interpretation: Google Workspace reports part ID as an identifier in its part namespace; it is not a universal identity outside Google Workspace. It is the key of this nested record. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.

Parts

Developer identifier: thread_messages.payload.partsParts. Child MIME message parts for multipart content. The fields projection requests up to two nested levels below the payload root. It preserves the nested context needed to interpret the parent thread message.

Enables: Search the returned parts content in thread_messages.payload.parts while preserving element order and attribution to the parent thread message.
Interpretation: Google Workspace returns parts as ordered content or provider-generated content metadata on each gmail message part; truncation, omission, and inaccessible source media can limit completeness. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.

Primary Email

Developer identifier: thread_messages.primaryEmailPrimary Email. Parent primary email reference copied into each thread message because the child operation does not return that relationship. It identifies the related provider object that gives the thread message its parent, owner, or container context.

Enables: Attribute each thread message to a person or account by the exact primary email in thread_messages.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each thread message; the child Google Workspace operation does not return it.

Snippet

Developer identifier: thread_messages.snippetSnippet. Short plain-text snippet of the message content. The only message-content excerpt ingested; full body data is never fetched. It defines the content surface available for this thread message.

Enables: Locate thread message records whose snippet in thread_messages.snippet contains the search term; open the Google Workspace record when the excerpt lacks needed context.
Interpretation: This is an excerpt supplied by the provider, not the complete body or an attachment.

Thread ID

Developer identifier: thread_messages.threadIdThread ID. ID of the thread this message belongs to. Links messages into conversation threads for conversation-thread grouping. It provides the reference needed to connect the thread message to the corresponding provider object.

Enables: Connect each thread message in Thread Messages to the referenced thread through thread_messages.threadId; flag thread ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports thread ID as an identifier in its thread namespace; it is not a universal identity outside Google Workspace.

Threads

Developer identifier: threadsThreads. Gmail threads for users.

Enables: Enumerate Gmail conversation threads by mailbox and correlate their identifiers, history markers, and snippets.
Scope: Reads the new records from Google Workspace’s https://gmail.googleapis.com/gmail/v1/users/{primaryEmail}/threads operation on each sync, and each row is one event. Each mailbox keeps its own row for a thread, because Gmail IDs are unique only inside one mailbox. A thread that a later sync reads again keeps the row stored first, so its history ID and snippet are those of the first read. The newest messages of a thread are in thread_messages. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The current projection returns thread IDs, history IDs, and the latest-message snippet only; it does not return messages, MIME bodies, raw RFC email, or attachment bytes. This stream supplies no reliable deletion signal.

History ID

Developer identifier: threads.historyIdHistory ID. History ID for incremental sync tracking via Gmail history API. It provides the reference needed to connect the thread to the corresponding provider object.

Enables: Connect each thread in Threads to the referenced history through threads.historyId; flag history ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports history ID as an identifier in its history namespace; it is not a universal identity outside Google Workspace.

Developer identifier: threads.idID. Gmail identifier of the thread, unique only inside one mailbox. It provides the reference needed to connect the thread to the corresponding provider object.

Enables: Join a thread to its messages in thread_messages.threadId for the same primaryEmail.
Interpretation: Google Workspace reports ID as an identifier in its thread namespace. It is not a universal identity outside Google Workspace. Gmail IDs are unique only inside one mailbox, so the record key is thread_key.

Primary Email

Developer identifier: threads.primaryEmailPrimary Email. Parent primary email reference copied into each thread because the child operation does not return that relationship. It identifies the related provider object that gives the thread its parent, owner, or container context.

Enables: Attribute each thread to a person or account by the exact primary email in threads.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each thread; the child Google Workspace operation does not return it.

Snippet

Developer identifier: threads.snippetSnippet. Short snippet of the most recent message in the thread. It defines the content surface available for this thread.

Enables: Locate thread records whose snippet in threads.snippet contains the search term; open the Google Workspace record when the excerpt lacks needed context.
Interpretation: This is an excerpt supplied by the provider, not the complete body or an attachment.

Thread Key

Developer identifier: threads.thread_keyThread Key. A key Parable builds from primaryEmail and id, so each thread in each mailbox has one key.

Enables: Identify each thread in one mailbox, so two mailboxes that hold the same Gmail ID keep separate rows.
Interpretation: Parable calculates thread_key when it reads the record. It is not a Gmail identifier. It is the record key.

Transcript Detail

Developer identifier: transcript_detailTranscript Detail. Full transcript details.

Enables: Attribute transcript entries and speaker references to the corresponding Google Meet conference.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name} operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal.

Docs Destination

Developer identifier: transcript_detail.docsDestinationDocs Destination. Google Google Google Google Docs destination where the transcript content is exported. It preserves the nested context needed to interpret the parent transcript detail.

Enables: Attribute Google Google Google Docs destination in transcript_detail.docsDestination to the parent transcript detail; identify parent records where that nested Google Google Google Docs destination object is absent.
Interpretation: Google Workspace reports Google Google Google Docs destination as a nested object on each transcript detail; optional children may be absent from a valid response.

Document

Developer identifier: transcript_detail.docsDestination.documentDocument. Resource name of the Google Docs document where the transcript is stored, in the format documents/documentId. It identifies the file, document, recording, or attachment metadata associated with the docs destination.

Enables: Associate the document in transcript_detail.docsDestination.document with its parent transcript detail; inventory the artifact reference without assuming binary content is present.
Interpretation: Google Workspace reports document as file, document, recording, or attachment metadata on each docs destination; binary bytes are not implied.

Export URI

Developer identifier: transcript_detail.docsDestination.exportUriExport URI. URI for the Google Docs transcript file, providing a direct link to the exported document. It locates the provider resource or path associated with the docs destination.

Enables: Associate each Google Google Google Docs destination with the resource identified by export URI in transcript_detail.docsDestination.exportUri; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports export URI as a resource locator for each Google Google Google Docs destination; access still depends on viewer permissions and the URL may expire or change.

End Time

Developer identifier: transcript_detail.endTimeEnd Time. Timestamp when transcription ended for this conference record. It anchors the transcript detail on the provider’s reported timeline.

Enables: Filter Transcript Detail by end time in transcript_detail.endTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports end time as a timestamp on each transcript detail; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: transcript_detail.nameName. Resource name of the transcript, in the format conferenceRecords//transcripts/. Serves as the primary key for this transcript resource. It gives the transcript detail a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated transcript detail entries on name in transcript_detail.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each transcript detail; names are mutable and are not stable identities. It is the record key.

Primary Email

Developer identifier: transcript_detail.primaryEmailPrimary Email. Parent primary email reference copied into each transcript detail because the child operation does not return that relationship. It identifies the related provider object that gives the transcript detail its parent, owner, or container context.

Enables: Attribute each transcript detail to a person or account by the exact primary email in transcript_detail.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each transcript detail; the child Google Workspace operation does not return it.

Start Time

Developer identifier: transcript_detail.startTimeStart Time. Timestamp when transcription started for this conference record. It anchors the transcript detail on the provider’s reported timeline.

Enables: Filter Transcript Detail by start time in transcript_detail.startTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports start time as a timestamp on each transcript detail; timezone and precision follow this API field, and absence is not an inferred event time.

State

Developer identifier: transcript_detail.stateState. State of the transcript indicating its lifecycle stage. Possible values include STARTED, ENDED, and FILE_GENERATED. It distinguishes the provider-defined state state or classification for the transcript detail.

Enables: Segment transcript detail entries in Transcript Detail by state in transcript_detail.state; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports state as a label from its own taxonomy on each transcript detail; preserve unknown labels rather than mapping them by assumption.

Transcripts

Developer identifier: transcriptsTranscripts. Conference transcripts.

Enables: Inventory transcript resources associated with Google Meet conference records before fetching their details.
Scope: Reads every record from Google Workspace’s https://meet.googleapis.com/v2/{name}/transcripts operation on each sync. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. These are transcript resource records, not transcript text or meeting audio. This stream supplies no reliable deletion signal.

Conference Record Name

Developer identifier: transcripts.conferenceRecordNameConference Record Name. Parent conference record name reference copied into each transcript because the child operation does not return that relationship. It gives the transcript a human-readable provider label while its identifier remains the stable reference.

Enables: Label each transcript with conference record name from transcripts.conferenceRecordName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Parable copies conference record name from the parent record into each transcript; the child Google Workspace operation does not return it.

Docs Destination

Developer identifier: transcripts.docsDestinationDocs Destination. The Google Google Google Google Docs destination where the transcript content is exported. It preserves the nested context needed to interpret the parent transcript.

Enables: Attribute Google Google Google Docs destination in transcripts.docsDestination to the parent transcript; identify parent records where that nested Google Google Google Docs destination object is absent.
Interpretation: Google Workspace reports Google Google Google Docs destination as a nested object on each transcript; optional children may be absent from a valid response.

Document

Developer identifier: transcripts.docsDestination.documentDocument. The resource name of the Google Docs document where the transcript is stored, in the format documents/documentId. It identifies the related provider object that gives the docs destination its parent, owner, or container context.

Enables: Connect each docs destination to the related document in transcripts.docsDestination.document and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports document as relationship context on each docs destination; resolve it in the named provider namespace rather than by display text alone.

Export URI

Developer identifier: transcripts.docsDestination.exportUriExport URI. The URI for the Google Docs document where the transcript content can be accessed. It locates the provider resource or path associated with the docs destination.

Enables: Associate each Google Google Google Docs destination with the resource identified by export URI in transcripts.docsDestination.exportUri; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports export URI as a resource locator for each Google Google Google Docs destination; access still depends on viewer permissions and the URL may expire or change.

End Time

Developer identifier: transcripts.endTimeEnd Time. Timestamp when the transcript ended, in RFC3339 UTC format. Used to calculate transcript duration. It anchors the transcript on the provider’s reported timeline.

Enables: Filter Transcripts by end time in transcripts.endTime; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Google Workspace reports end time as a timestamp on each transcript; timezone and precision follow this API field, and absence is not an inferred event time.

Name

Developer identifier: transcripts.nameName. Resource name of the transcript, in the format conferenceRecords//transcripts/. Serves as the unique identifier for this transcript resource. It identifies the related provider object that gives the transcript its parent, owner, or container context.

Enables: Match repeated transcript entries on name in transcripts.name. Only entries that share this key are the same record.
Interpretation: Google Workspace reports name as display text for each transcript; names are mutable and are not stable identities. It is the record key.

Primary Email

Developer identifier: transcripts.primaryEmailPrimary Email. Parent primary email reference copied into each transcript because the child operation does not return that relationship. It identifies the related provider object that gives the transcript its parent, owner, or container context.

Enables: Attribute each transcript to a person or account by the exact primary email in transcripts.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each transcript; the child Google Workspace operation does not return it.

Start Time

Developer identifier: transcripts.startTimeStart Time. Timestamp when the transcript started being generated, in RFC3339 UTC format. It anchors the transcript on the provider’s reported timeline.

Enables: Filter Transcripts by start time in transcripts.startTime; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Google Workspace reports start time as a timestamp on each transcript; timezone and precision follow this API field, and absence is not an inferred event time.

State

Developer identifier: transcripts.stateState. State of the transcript indicating its lifecycle stage. Possible values include STARTED, ENDED, and FILE_GENERATED. It distinguishes the provider-defined state state or classification for the transcript.

Enables: Segment transcript entries in Transcripts by state in transcripts.state; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports state as a label from its own taxonomy on each transcript; preserve unknown labels rather than mapping them by assumption.

Users

Developer identifier: usersUsers. Google Workspace users.

Enables: Reconcile Google Workspace accounts to primary email, aliases, organization, suspension state, and administrator or delegation settings. Supply the user principals that source permissions match Drive grants against.
Scope: Reads every user of the configured domain, suspended users included, from Google Workspace’s /admin/directory/v1/users operation on each sync. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. A later complete read can treat a previously seen record that is absent as removed. The Gmail, Calendar, Drive, Meet, and Chat streams under this stream read only users who are not suspended.

Addresses

Developer identifier: users.addressesAddresses. List of addresses for the user. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user address in users.addresses with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns addresses as an array of user address entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Country

Developer identifier: users.addresses.countryCountry. Country name. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by country in users.addresses.country without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Google Workspace reports country as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.

Country Code

Developer identifier: users.addresses.countryCodeCountry Code. ISO 3166-1 alpha-2 country code. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by country code in users.addresses.countryCode without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Google Workspace reports country code as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.

Custom Type

Developer identifier: users.addresses.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user address.

Enables: Segment user address entries in Users by custom type in users.addresses.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user address; preserve unknown labels rather than mapping them by assumption.

Extended Address

Developer identifier: users.addresses.extendedAddressExtended Address. Extended address (e.g., apartment number). It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by the exact extended address in users.addresses.extendedAddress while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports extended address as an address or location facet on each user address; it does not establish verified geolocation or data residency.

Formatted

Developer identifier: users.addresses.formattedFormatted. Full formatted address string. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Match repeated user address entries on formatted in users.addresses.formatted; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports formatted on each user address; missing and empty values can have different meanings.

Locality

Developer identifier: users.addresses.localityLocality. City or town. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by locality in users.addresses.locality without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Google Workspace reports locality as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.

Po Box

Developer identifier: users.addresses.poBoxPo Box. Post office box. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by the exact po box in users.addresses.poBox while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports po box as an address or location facet on each user address; it does not establish verified geolocation or data residency.

Postal Code

Developer identifier: users.addresses.postalCodePostal Code. Postal/ZIP code. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by the exact postal code in users.addresses.postalCode while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports postal code as an address or location facet on each user address; it does not establish verified geolocation or data residency.

Primary

Developer identifier: users.addresses.primaryPrimary. Whether this is the user’s primary address. It distinguishes the provider-defined primary state or classification for the user address.

Enables: Filter Users by whether this is the user’s primary address in users.addresses.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is the user’s primary address as a boolean on each user address; a missing field is unknown, not false.

Region

Developer identifier: users.addresses.regionRegion. State or province. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by region in users.addresses.region without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Google Workspace reports region as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.

Source Is Structured

Developer identifier: users.addresses.sourceIsStructuredSource Is Structured. Whether the address was entered in structured or unstructured format. It distinguishes the provider-defined source is structured state or classification for the user address.

Enables: Filter Users by whether the address was entered in structured or unstructured format in users.addresses.sourceIsStructured; count true, false, and missing results separately.
Interpretation: Google Workspace reports the address was entered in structured or unstructured format as a boolean on each user address; a missing field is unknown, not false.

Street Address

Developer identifier: users.addresses.streetAddressStreet Address. Street address. It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Group Users by the exact street address in users.addresses.streetAddress while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports street address as an address or location facet on each user address; it does not establish verified geolocation or data residency.

Type

Developer identifier: users.addresses.typeType. The type of address (custom, home, other, work). It supplies the provider-reported address or location facet for the user address, not a residency determination.

Enables: Match repeated user address entries on type in users.addresses.type; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user address; preserve unknown labels rather than mapping them by assumption.

Agreed To Terms

Developer identifier: users.agreedToTermsAgreed To Terms. Whether the user has agreed to the Terms of Service. It distinguishes the provider-defined agreed to terms state or classification for the user.

Enables: Filter Users by whether the user has agreed to the terms of service in users.agreedToTerms; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user has agreed to the terms of service as a boolean on each user; a missing field is unknown, not false.

Aliases

Developer identifier: users.aliasesAliases. List of the user’s alias email addresses. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned aliase value in users.aliases with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns aliases as an array of aliase value entries on each user; missing, empty, and permission-redacted arrays are not equivalent. For source permissions, Parable marks each alias as a principal reference: a grant to an alias reaches the user.

Archived

Developer identifier: users.archivedArchived. Whether the user account is archived. It distinguishes the provider-defined archived state or classification for the user.

Enables: Filter Users by whether the user account is archived in users.archived; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user account is archived as a boolean on each user; a missing field is unknown, not false. For source permissions, Parable treats a user whose value is true as inactive, and an inactive user’s sharing in the Provider gives no access in Parable.

Change Password At Next Login

Developer identifier: users.changePasswordAtNextLoginChange Password At Next Login. Whether the user must change their password at next login. It supplies the sensitive provider access code needed to join the user, not a stable record identifier.

Enables: Filter Users by whether the user must change their password at next login in users.changePasswordAtNextLogin; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user must change their password at next login as a boolean on each user; a missing field is unknown, not false.

Creation Time

Developer identifier: users.creationTimeCreation Time. When the user account was created (ISO 8601). It anchors the user on the provider’s reported timeline.

Enables: Order Users by creation time in users.creationTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports creation time as a timestamp on each user; timezone and precision follow this API field, and absence is not an inferred event time.

Customer ID

Developer identifier: users.customerIdCustomer ID. The unique ID of the customer’s Google Workspace account. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Connect each user in Users to the referenced customer through users.customerId; flag customer ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports customer ID as an identifier in its customer namespace; it is not a universal identity outside Google Workspace.

Custom Schemas

Developer identifier: users.customSchemasCustom Schemas. Custom schema fields defined by the Workspace admin. Keys are schema names, values are objects of field name to value. It preserves the nested context needed to interpret the parent user.

Enables: Attribute custom schemas in users.customSchemas to the parent user; identify parent records where that nested custom schemas object is absent.
Interpretation: Google Workspace reports custom schemas as a nested object on each user; optional children may be absent from a valid response.

Deletion Time

Developer identifier: users.deletionTimeDeletion Time. When the user account was deleted, if applicable (ISO 8601). It anchors the user on the provider’s reported timeline.

Enables: Order Users by deletion time in users.deletionTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports deletion time as a timestamp on each user; timezone and precision follow this API field, and absence is not an inferred event time.

Emails

Developer identifier: users.emailsEmails. List of email addresses for the user including aliases. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user email in users.emails with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns emails as an array of user email entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Address

Developer identifier: users.emails.addressAddress. The email address. It supplies the provider-reported address or location facet for the user email, not a residency determination.

Enables: Match repeated user email entries on address in users.emails.address. Only entries that share this key are the same record.
Interpretation: Google Workspace reports address as an address on each user email; aliases, casing, and unverified addresses can prevent a one-to-one person match. It is the key of this nested record.

Custom Type

Developer identifier: users.emails.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user email.

Enables: Segment user email entries in Users by custom type in users.emails.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user email; preserve unknown labels rather than mapping them by assumption.

Primary

Developer identifier: users.emails.primaryPrimary. Whether this is the user’s primary email address. It distinguishes the provider-defined primary state or classification for the user email.

Enables: Filter Users by whether this is the user’s primary email address in users.emails.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is the user’s primary email address as a boolean on each user email; a missing field is unknown, not false.

Type

Developer identifier: users.emails.typeType. The type of email (custom, home, other, work). It distinguishes the provider-defined type state or classification for the user email.

Enables: Segment user email entries in Users by type in users.emails.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user email; preserve unknown labels rather than mapping them by assumption.

ETag

Developer identifier: users.etagETag. ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Use users.etag for conditional provider reads and revision checks; pair the ETag with the user ID rather than joining on it.
Interpretation: Google Workspace returns this ETag as an opaque revision token for each user; it can change when the resource changes and is not a universal identifier.

External IDs

Developer identifier: users.externalIdsExternal IDs. List of external ID values for the user (employee ID, etc.). It preserves the nested context needed to interpret the parent user.

Enables: Connect the parent user to every referenced user external ID in users.externalIds; identify provider IDs that do not resolve to the expected related object.
Interpretation: Google Workspace returns external IDs as an array of user external ID entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Custom Type

Developer identifier: users.externalIds.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user external ID.

Enables: Segment user external ID entries in Users by custom type in users.externalIds.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user external ID; preserve unknown labels rather than mapping them by assumption.

Type

Developer identifier: users.externalIds.typeType. The type of external ID (account, custom, customer, login_id, network, organization). It distinguishes the provider-defined type state or classification for the user external ID.

Enables: Match repeated user external ID entries on type in users.externalIds.type. Only entries that share this key are the same record.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user external ID; preserve unknown labels rather than mapping them by assumption. It is the key of this nested record.

Value

Developer identifier: users.externalIds.valueValue. The value of the external ID. It must be interpreted with the enclosing provider field name, type, or custom schema for the user external ID.

Enables: Match repeated user external ID entries on value in users.externalIds.value. Only entries that share this key are the same record.
Interpretation: Google Workspace reports value on each user external ID; missing and empty values can have different meanings. It is the key of this nested record.

Gender

Developer identifier: users.genderGender. Gender information for the user. It preserves the nested context needed to interpret the parent user.

Enables: Attribute gender in users.gender to the parent user; identify parent records where that nested gender object is absent.
Interpretation: Google Workspace reports gender as a nested object on each user; optional children may be absent from a valid response.

Address Me As

Developer identifier: users.gender.addressMeAsAddress Me As. How the user prefers to be addressed. It supplies the provider-reported address or location facet for the user gender, not a residency determination.

Enables: Group Users by the exact address me as in users.gender.addressMeAs while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports address me as as an address or location facet on each user gender; it does not establish verified geolocation or data residency.

Custom Gender

Developer identifier: users.gender.customGenderCustom Gender. Custom gender string if type is ‘other’. It supplies the custom gender profile facet used to reconcile or attribute the user gender.

Enables: Reconcile the user’s custom gender in users.gender.customGender with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Google Workspace reports custom gender as a mutable profile or directory attribute on each user gender; it may be absent, shared, or non-unique.

Type

Developer identifier: users.gender.typeType. Gender type (female, male, other, unknown). It distinguishes the provider-defined type state or classification for the user gender.

Enables: Segment user gender entries in Users by type in users.gender.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user gender; preserve unknown labels rather than mapping them by assumption.

Hash Function

Developer identifier: users.hashFunctionHash Function. Hash function used to store the password (MD5, SHA-1, crypt). The current read stream does not collect or emit this write-only credential field.

Enables: Confirm that users.hashFunction is absent from the configured read response; no join, filter, attribution, or measurement may rely on it.
Interpretation: Google Workspace documents this field for credential writes, but the configured read operation does not return or collect it.

Developer identifier: users.idID. Unique immutable ID of the user. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Match repeated user entries on ID in users.id. Only entries that share this key are the same record.
Interpretation: Google Workspace reports ID as an identifier in its user namespace; it is not a universal identity outside Google Workspace. It is the record key. Parable uses this field as the account’s ID when it links the account to a person. For source permissions, Parable marks this field as the id of a user principal.

Ims

Developer identifier: users.imsIms. Instant messenger accounts for the user. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user im in users.ims with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns ims as an array of user im entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Custom Protocol

Developer identifier: users.ims.customProtocolCustom Protocol. Custom protocol label if protocol is ‘custom_protocol’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user im.

Enables: Interpret users.ims.customProtocol with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Google Workspace reports custom protocol under the enclosing custom or typed field contract on each user im; compare it only with values from the same provider key and type.

Custom Type

Developer identifier: users.ims.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user im.

Enables: Segment user im entries in Users by custom type in users.ims.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user im; preserve unknown labels rather than mapping them by assumption.

Developer identifier: users.ims.imIm. The IM network handle/ID. It supplies the im profile facet used to reconcile or attribute the user im.

Enables: Match repeated user im entries on im in users.ims.im; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports im on each user im; missing and empty values can have different meanings.

Primary

Developer identifier: users.ims.primaryPrimary. Whether this is the user’s primary IM. It distinguishes the provider-defined primary state or classification for the user im.

Enables: Filter Users by whether this is the user’s primary im in users.ims.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is the user’s primary im as a boolean on each user im; a missing field is unknown, not false.

Protocol

Developer identifier: users.ims.protocolProtocol. The IM protocol (aim, custom_protocol, gtalk, icq, jabber, msn, net_meeting, qq, skype, yahoo). It must be interpreted with the enclosing provider field name, type, or custom schema for the user im.

Enables: Interpret users.ims.protocol with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Google Workspace reports protocol under the enclosing custom or typed field contract on each user im; compare it only with values from the same provider key and type.

Type

Developer identifier: users.ims.typeType. The type of IM account (custom, home, other, work). It distinguishes the provider-defined type state or classification for the user im.

Enables: Match repeated user im entries on type in users.ims.type; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user im; preserve unknown labels rather than mapping them by assumption.

Include In Global Address List

Developer identifier: users.includeInGlobalAddressListInclude In Global Address List. Whether the user’s profile is visible in the Global Address List. It distinguishes the provider-defined include in global address list state or classification for the user.

Enables: Filter Users by whether the user’s profile is visible in the global address list in users.includeInGlobalAddressList; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user’s profile is visible in the global address list as a boolean on each user; a missing field is unknown, not false.

IP Whitelisted

Developer identifier: users.ipWhitelistedIP Whitelisted. Whether the user’s IP address is whitelisted. It distinguishes the provider-defined IP whitelisted state or classification for the user.

Enables: Filter Users by whether the user’s IP address is whitelisted in users.ipWhitelisted; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user’s IP address is whitelisted as a boolean on each user; a missing field is unknown, not false.

Is Admin

Developer identifier: users.isAdminIs Admin. Whether the user has super admin privileges. It distinguishes the provider-defined is admin state or classification for the user.

Enables: Filter Users by whether the user has super admin privileges in users.isAdmin; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user has super admin privileges as a boolean on each user; a missing field is unknown, not false.

Is Delegated Admin

Developer identifier: users.isDelegatedAdminIs Delegated Admin. Whether the user is a delegated admin. It distinguishes the provider-defined is delegated admin state or classification for the user.

Enables: Filter Users by whether the user is a delegated admin in users.isDelegatedAdmin; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user is a delegated admin as a boolean on each user; a missing field is unknown, not false.

Is Enforced In2 Sv

Developer identifier: users.isEnforcedIn2SvIs Enforced In2 Sv. Whether 2-step verification is enforced for the user. It distinguishes the provider-defined is enforced in2 sv state or classification for the user.

Enables: Filter Users by whether 2-step verification is enforced for the user in users.isEnforcedIn2Sv; count true, false, and missing results separately.
Interpretation: Google Workspace reports 2-step verification is enforced for the user as a boolean on each user; a missing field is unknown, not false.

Is Enrolled In2 Sv

Developer identifier: users.isEnrolledIn2SvIs Enrolled In2 Sv. Whether the user is enrolled in 2-step verification. It distinguishes the provider-defined is enrolled in2 sv state or classification for the user.

Enables: Filter Users by whether the user is enrolled in 2-step verification in users.isEnrolledIn2Sv; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user is enrolled in 2-step verification as a boolean on each user; a missing field is unknown, not false.

Is Mailbox Setup

Developer identifier: users.isMailboxSetupIs Mailbox Setup. Whether the user’s Google mailbox has been created. It distinguishes the provider-defined is mailbox setup state or classification for the user.

Enables: Filter Users by whether the user’s google mailbox has been created in users.isMailboxSetup; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user’s google mailbox has been created as a boolean on each user; a missing field is unknown, not false.

Keywords

Developer identifier: users.keywordsKeywords. Keywords associated with the user. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user keyword in users.keywords with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns keywords as an array of user keyword entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Custom Type

Developer identifier: users.keywords.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user keyword.

Enables: Segment user keyword entries in Users by custom type in users.keywords.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user keyword; preserve unknown labels rather than mapping them by assumption.

Type

Developer identifier: users.keywords.typeType. The type of keyword (custom, mission, occupation, outlook). It distinguishes the provider-defined type state or classification for the user keyword.

Enables: Match repeated user keyword entries on type in users.keywords.type; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user keyword; preserve unknown labels rather than mapping them by assumption.

Value

Developer identifier: users.keywords.valueValue. The keyword value. It must be interpreted with the enclosing provider field name, type, or custom schema for the user keyword.

Enables: Match repeated user keyword entries on value in users.keywords.value; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports value on each user keyword; missing and empty values can have different meanings.

Kind

Developer identifier: users.kindKind. The type of the API resource, e.g. admin#directory#user. It locates the provider resource or path associated with the user.

Enables: Segment user entries in Users by kind in users.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each user; preserve unknown labels rather than mapping them by assumption.

Languages

Developer identifier: users.languagesLanguages. Languages the user speaks. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user language in users.languages with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns languages as an array of user language entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Custom Language

Developer identifier: users.languages.customLanguageCustom Language. Custom language name if not a standard code. It supplies the custom language profile facet used to reconcile or attribute the user language.

Enables: Reconcile the user’s custom language in users.languages.customLanguage with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Google Workspace reports custom language as a mutable profile or directory attribute on each user language; it may be absent, shared, or non-unique.

Language Code

Developer identifier: users.languages.languageCodeLanguage Code. ISO 639 language code (e.g., en, fr). It supplies the language code profile facet used to reconcile or attribute the user language.

Enables: Match repeated user language entries on language code in users.languages.languageCode. Only entries that share this key are the same record.
Interpretation: Google Workspace reports language code on each user language; missing and empty values can have different meanings. It is the key of this nested record.

Preference

Developer identifier: users.languages.preferencePreference. Whether this is a preferred language (preferred or not_preferred). It distinguishes the provider-defined preference state or classification for the user language.

Enables: Filter Users by the exact Google Workspace-defined preference in users.languages.preference and preserve unknown values as distinct categories.
Interpretation: Google Workspace supplies preference from its own taxonomy on each user language; preserve unknown and newly introduced labels.

Last Login Time

Developer identifier: users.lastLoginTimeLast Login Time. When the user last logged in (ISO 8601). It anchors the user on the provider’s reported timeline.

Enables: Order Users by last login time in users.lastLoginTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports last login time as a timestamp on each user; timezone and precision follow this API field, and absence is not an inferred event time.

Locations

Developer identifier: users.locationsLocations. Physical locations associated with the user (building, floor, desk). It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user location in users.locations with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns locations as an array of user location entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Area

Developer identifier: users.locations.areaArea. Textual location (usually city and state). It supplies the provider-reported address or location facet for the user location, not a residency determination.

Enables: Group Users by the exact area in users.locations.area while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports area as an address or location facet on each user location; it does not establish verified geolocation or data residency.

Building ID

Developer identifier: users.locations.buildingIdBuilding ID. Building identifier. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Match repeated user location entries on building ID in users.locations.buildingId. Only entries that share this key are the same record.
Interpretation: Google Workspace reports building ID as an identifier in its building namespace; it is not a universal identity outside Google Workspace. It is the key of this nested record.

Custom Type

Developer identifier: users.locations.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user location.

Enables: Segment user location entries in Users by custom type in users.locations.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user location; preserve unknown labels rather than mapping them by assumption.

Desk Code

Developer identifier: users.locations.deskCodeDesk Code. Desk location/number. It supplies the provider-reported address or location facet for the user location, not a residency determination.

Enables: Group Users by the exact desk code in users.locations.deskCode while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports desk code as an address or location facet on each user location; it does not establish verified geolocation or data residency.

Floor Name

Developer identifier: users.locations.floorNameFloor Name. Floor name/number. It supplies the provider-reported address or location facet for the user location, not a residency determination.

Enables: Label each user location with floor name from users.locations.floorName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports floor name as display text for each user location; names are mutable and are not stable identities.

Floor Section

Developer identifier: users.locations.floorSectionFloor Section. Floor section (e.g., wing, zone). It supplies the provider-reported address or location facet for the user location, not a residency determination.

Enables: Group Users by the exact floor section in users.locations.floorSection while keeping that address or location separate from geolocation and residency claims.
Interpretation: Google Workspace reports floor section as an address or location facet on each user location; it does not establish verified geolocation or data residency.

Type

Developer identifier: users.locations.typeType. The type of location (custom, default, desk). It supplies the provider-reported address or location facet for the user location, not a residency determination.

Enables: Match repeated user location entries on type in users.locations.type. Only entries that share this key are the same record.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user location; preserve unknown labels rather than mapping them by assumption. It is the key of this nested record.

Name

Developer identifier: users.nameName. User’s name object containing givenName, familyName, fullName. It preserves the nested context needed to interpret the parent user.

Enables: Attribute name in users.name to the parent user; identify parent records where that nested name object is absent.
Interpretation: Google Workspace reports name as a nested object on each user; optional children may be absent from a valid response.

Display Name

Developer identifier: users.name.displayNameDisplay Name. Display name for the user. It distinguishes the provider-defined display name state or classification for the user name.

Enables: Label each user name with display name from users.name.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each user name; names are mutable and are not stable identities.

Family Name

Developer identifier: users.name.familyNameFamily Name. The user’s last/family name. It gives the user name a human-readable provider label while its identifier remains the stable reference.

Enables: Label each user name with family name from users.name.familyName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports family name as display text for each user name; names are mutable and are not stable identities.

Full Name

Developer identifier: users.name.fullNameFull Name. The user’s full name formed by concatenating first and last name. It gives the user name a human-readable provider label while its identifier remains the stable reference.

Enables: Label each user name with full name from users.name.fullName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports full name as display text for each user name; names are mutable and are not stable identities. Parable uses this field as the person’s name.

Given Name

Developer identifier: users.name.givenNameGiven Name. The user’s first/given name. It gives the user name a human-readable provider label while its identifier remains the stable reference.

Enables: Label each user name with given name from users.name.givenName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports given name as display text for each user name; names are mutable and are not stable identities.

Non Editable Aliases

Developer identifier: users.nonEditableAliasesNon Editable Aliases. List of non-editable alias email addresses (typically outside the primary domain). It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned non editable aliase value in users.nonEditableAliases with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns non editable aliases as an array of non editable aliase value entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Notes

Developer identifier: users.notesNotes. Notes about the user. It preserves the nested context needed to interpret the parent user.

Enables: Attribute notes in users.notes to the parent user; identify parent records where that nested notes object is absent.
Interpretation: Google Workspace reports notes as a nested object on each user; optional children may be absent from a valid response.

Organizations

Developer identifier: users.organizationsOrganizations. User’s organization details (title, department, cost center, etc.). It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user organization in users.organizations with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns organizations as an array of user organization entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Cost Center

Developer identifier: users.organizations.costCenterCost Center. Cost center of the user’s organization. It supplies the cost center measure for the user organization at the provider’s declared unit and grain.

Enables: Measure cost center through users.organizations.costCenter for each user organization and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports cost center as a measure on each user organization; compare only records with the same unit and aggregation grain.

Custom Type

Developer identifier: users.organizations.customTypeCustom Type. Custom type label if type is custom. It must be interpreted with the enclosing provider field name, type, or custom schema for the user organization.

Enables: Segment user organization entries in Users by custom type in users.organizations.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user organization; preserve unknown labels rather than mapping them by assumption.

Department

Developer identifier: users.organizations.departmentDepartment. Department within the organization. It supplies the department profile facet used to reconcile or attribute the user organization.

Enables: Reconcile the user’s department in users.organizations.department with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Google Workspace reports department as a mutable profile or directory attribute on each user organization; it may be absent, shared, or non-unique.

Description

Developer identifier: users.organizations.descriptionDescription. Description of the organization. It defines the content surface available for this user.

Enables: Locate user organization records by description in users.organizations.description; attribute each text match to its parent user and, when present, its reported author.
Interpretation: Google Workspace supplies description as text on each user organization; referenced files or media are not implied unless explicitly represented.

Domain

Developer identifier: users.organizations.domainDomain. The domain the organization is associated with. It supplies the domain profile facet used to reconcile or attribute the user organization.

Enables: Reconcile the user’s domain in users.organizations.domain with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Google Workspace reports domain as a mutable profile or directory attribute on each user organization; it may be absent, shared, or non-unique.

Full Time Equivalent

Developer identifier: users.organizations.fullTimeEquivalentFull Time Equivalent. Full-time equivalent millipercent (100000 = 100%). It supplies the full time equivalent measure for the user organization at the provider’s declared unit and grain.

Enables: Measure full time equivalent through users.organizations.fullTimeEquivalent for each user organization and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports full time equivalent as a measure on each user organization; compare only records with the same unit and aggregation grain.

Location

Developer identifier: users.organizations.locationLocation. Physical location of the organization. It supplies the provider-reported address or location facet for the user organization, not a residency determination.

Enables: Group Users by location in users.organizations.location without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Google Workspace reports location as a user, device, request, or resource location attribute on each user organization; it does not establish where data is stored or processed.

Name

Developer identifier: users.organizations.nameName. Name of the organization. It gives the user organization a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated user organization entries on name in users.organizations.name; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports name as display text for each user organization; names are mutable and are not stable identities.

Primary

Developer identifier: users.organizations.primaryPrimary. Whether this is the user’s primary organization. It distinguishes the provider-defined primary state or classification for the user organization.

Enables: Filter Users by whether this is the user’s primary organization in users.organizations.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is the user’s primary organization as a boolean on each user organization; a missing field is unknown, not false.

Symbol

Developer identifier: users.organizations.symbolSymbol. Text string symbol of the organization (e.g., stock ticker). It supplies the returned symbol text needed to understand the user organization in context.

Enables: Search the returned symbol text in users.organizations.symbol and attribute each match to its parent user and reported author when available.
Interpretation: Google Workspace supplies symbol as returned text on each user organization; truncation, formatting, and access boundaries can limit completeness.

Title

Developer identifier: users.organizations.titleTitle. The user’s title within the organization. It gives the user organization a human-readable provider label while its identifier remains the stable reference.

Enables: Label each user organization with title from users.organizations.title; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports title as display text for each user organization; names are mutable and are not stable identities.

Type

Developer identifier: users.organizations.typeType. The type of organization (domain_only, school, unknown, work). It distinguishes the provider-defined type state or classification for the user organization.

Enables: Match repeated user organization entries on type in users.organizations.type; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user organization; preserve unknown labels rather than mapping them by assumption.

Org Unit Path

Developer identifier: users.orgUnitPathOrg Unit Path. Organizational unit path the user belongs to (e.g. /). It supplies the org unit path boundary, band, or unit needed to interpret the companion measure.

Enables: Interpret users.orgUnitPath with its companion minimum, maximum, interval, or unit before comparing the org unit path across like-for-like records.
Interpretation: Google Workspace reports org unit path as a boundary, band, interval, or unit on each user; it is meaningful only with its companion measure and provider scale.

Password

Developer identifier: users.passwordPassword. User’s password (only present in create/update requests, never in responses). The current read stream does not collect or emit this write-only credential field.

Enables: Confirm that users.password is absent from the configured read response; no join, filter, attribution, or measurement may rely on it.
Interpretation: Google Workspace documents this field for credential writes, but the configured read operation does not return or collect it.

Phones

Developer identifier: users.phonesPhones. List of phone numbers for the user. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user phone in users.phones with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns phones as an array of user phone entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Custom Type

Developer identifier: users.phones.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user phone.

Enables: Segment user phone entries in Users by custom type in users.phones.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user phone; preserve unknown labels rather than mapping them by assumption.

Primary

Developer identifier: users.phones.primaryPrimary. Whether this is the user’s primary phone number. It distinguishes the provider-defined primary state or classification for the user phone.

Enables: Filter Users by whether this is the user’s primary phone number in users.phones.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is the user’s primary phone number as a boolean on each user phone; a missing field is unknown, not false.

Type

Developer identifier: users.phones.typeType. The type of phone number (assistant, callback, car, company_main, custom, grand_central, home, home_fax, isdn, main, mobile, other, other_fax, pager, radio, telex, tty_tdd, work, work_fax, work_mobile, work_pager). It distinguishes the provider-defined type state or classification for the user phone.

Enables: Match repeated user phone entries on type in users.phones.type. Only entries that share this key are the same record.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user phone; preserve unknown labels rather than mapping them by assumption. It is the key of this nested record.

Value

Developer identifier: users.phones.valueValue. The phone number. It must be interpreted with the enclosing provider field name, type, or custom schema for the user phone.

Enables: Match repeated user phone entries on value in users.phones.value. Only entries that share this key are the same record.
Interpretation: Google Workspace reports value on each user phone; missing and empty values can have different meanings. It is the key of this nested record.

Posix Accounts

Developer identifier: users.posixAccountsPosix Accounts. POSIX account information for the user. It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user posix account in users.posixAccounts with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns posix accounts as an array of user posix account entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Account ID

Developer identifier: users.posixAccounts.accountIdAccount ID. A POSIX account field identifier. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Connect each user posix account in Users to the referenced account through users.posixAccounts.accountId; flag account ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports account ID as an identifier in its account namespace; it is not a universal identity outside Google Workspace.

Gecos

Developer identifier: users.posixAccounts.gecosGecos. The GECOS field. It supplies the gecos profile facet used to reconcile or attribute the user posix account.

Enables: Reconcile the user’s gecos in users.posixAccounts.gecos with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Google Workspace reports gecos as a mutable profile or directory attribute on each user posix account; it may be absent, shared, or non-unique.

Gid

Developer identifier: users.posixAccounts.gidGid. The POSIX group ID. It identifies the related provider object that gives the user posix account its parent, owner, or container context.

Enables: Connect each user posix account to the related gid in users.posixAccounts.gid and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports gid as relationship context on each user posix account; resolve it in the named provider namespace rather than by display text alone.

Home Directory

Developer identifier: users.posixAccounts.homeDirectoryHome Directory. The home directory path. It locates the provider resource or path associated with the user posix account.

Enables: Resolve the user’s provider resource or path through users.posixAccounts.homeDirectory; verify access separately and do not infer that Parable read the linked content.
Interpretation: Google Workspace returns home directory as a resource locator or path for each user posix account; access can expire or depend on viewer permissions, and linked content is not implied.

Operating System Type

Developer identifier: users.posixAccounts.operatingSystemTypeOperating System Type. The operating system type (linux, unspecified, windows). It distinguishes the provider-defined operating system type state or classification for the user posix account.

Enables: Segment user posix account entries in Users by operating system type in users.posixAccounts.operatingSystemType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports operating system type as a label from its own taxonomy on each user posix account; preserve unknown labels rather than mapping them by assumption.

Primary

Developer identifier: users.posixAccounts.primaryPrimary. Whether this is the primary POSIX account. It distinguishes the provider-defined primary state or classification for the user posix account.

Enables: Filter Users by whether this is the primary posix account in users.posixAccounts.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is the primary posix account as a boolean on each user posix account; a missing field is unknown, not false.

Shell

Developer identifier: users.posixAccounts.shellShell. The login shell path. It locates the provider resource or path associated with the user posix account.

Enables: Resolve the user’s provider resource or path through users.posixAccounts.shell; verify access separately and do not infer that Parable read the linked content.
Interpretation: Google Workspace returns shell as a resource locator or path for each user posix account; access can expire or depend on viewer permissions, and linked content is not implied.

System ID

Developer identifier: users.posixAccounts.systemIdSystem ID. System identifier for which this account applies. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Match repeated user posix account entries on system ID in users.posixAccounts.systemId. Only entries that share this key are the same record.
Interpretation: Google Workspace reports system ID as an identifier in its system namespace; it is not a universal identity outside Google Workspace. It is the key of this nested record.

Uid

Developer identifier: users.posixAccounts.uidUid. The POSIX user ID. It identifies the related provider object that gives the user posix account its parent, owner, or container context.

Enables: Connect each user posix account to the related uid in users.posixAccounts.uid and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Google Workspace reports uid as relationship context on each user posix account; resolve it in the named provider namespace rather than by display text alone.

User Name

Developer identifier: users.posixAccounts.usernameUser Name. The POSIX username. It gives the user posix account a human-readable provider label while its identifier remains the stable reference.

Enables: Label each user posix account with user name from users.posixAccounts.username; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports user name as display text for each user posix account; names are mutable and are not stable identities.

Primary Email

Developer identifier: users.primaryEmailPrimary Email. Primary email address of the user. It supplies the provider-reported address or location facet for the user, not a residency determination.

Enables: Attribute each user to a person or account by the exact primary email in users.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports primary email as an address on each user; aliases, casing, and unverified addresses can prevent a one-to-one person match. Parable uses this field as the account’s email when it links the account to a person. For source permissions, Parable marks this address as the user’s primary principal reference: a grant to this address reaches the user, and the user gets a token for the address’s domain.

Recovery Email

Developer identifier: users.recoveryEmailRecovery Email. Recovery email address for the user. It supplies the provider-reported address or location facet for the user, not a residency determination.

Enables: Attribute each user to a person or account by the exact recovery email in users.recoveryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports recovery email as an address on each user; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Recovery Phone

Developer identifier: users.recoveryPhoneRecovery Phone. Recovery phone number for the user in E.164 format. It supplies the recovery phone profile facet used to reconcile or attribute the user.

Enables: Reconcile the user’s recovery phone in users.recoveryPhone with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Google Workspace reports recovery phone as a mutable profile or directory attribute on each user; it may be absent, shared, or non-unique.

Relations

Developer identifier: users.relationsRelations. User’s relationships (e.g., manager, assistant). It preserves the nested context needed to interpret the parent user.

Enables: Reconcile each returned user relation in users.relations with the parent user’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Google Workspace returns relations as an array of user relation entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Custom Type

Developer identifier: users.relations.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user relation.

Enables: Segment user relation entries in Users by custom type in users.relations.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user relation; preserve unknown labels rather than mapping them by assumption.

Type

Developer identifier: users.relations.typeType. The type of relation (admin_assistant, assistant, brother, child, custom, domestic_partner, dotted_line_manager, exec_assistant, father, friend, manager, mother, parent, partner, referred_by, relative, sister, spouse). It identifies the related provider object that gives the user relation its parent, owner, or container context.

Enables: Match repeated user relation entries on type in users.relations.type. Only entries that share this key are the same record.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user relation; preserve unknown labels rather than mapping them by assumption. It is the key of this nested record.

Value

Developer identifier: users.relations.valueValue. The related person’s identifier (typically email). It identifies the related provider object that gives the user relation its parent, owner, or container context.

Enables: Match repeated user relation entries on value in users.relations.value. Only entries that share this key are the same record.
Interpretation: Google Workspace reports value on each user relation; missing and empty values can have different meanings. It is the key of this nested record.

SSH Public Keys

Developer identifier: users.sshPublicKeysSSH Public Keys. SSH public keys for the user. It preserves the nested context needed to interpret the parent user.

Enables: Connect the parent user to every referenced user ssh public key in users.sshPublicKeys; identify provider IDs that do not resolve to the expected related object.
Interpretation: Google Workspace returns ssh public keys as an array of user ssh public key entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Expiration Time Usec

Developer identifier: users.sshPublicKeys.expirationTimeUsecExpiration Time Usec. Expiration time of the SSH key in microseconds since epoch. It is needed to place the user ssh public key on the provider timeline at the field’s stated precision.

Enables: Order Users by the provider-reported instant in users.sshPublicKeys.expirationTimeUsec and isolate records inside the same time window and precision.
Interpretation: Google Workspace reports expiration time usec as a time value for each user ssh public key; format, timezone, precision, and absolute-versus-relative meaning follow this field’s contract.

Fingerprint

Developer identifier: users.sshPublicKeys.fingerprintFingerprint. The SHA-256 fingerprint of the SSH public key. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Match repeated user ssh public key entries on fingerprint in users.sshPublicKeys.fingerprint. Only entries that share this key are the same record.
Interpretation: Google Workspace reports fingerprint on each user ssh public key; missing and empty values can have different meanings. It is the key of this nested record.

Key

Developer identifier: users.sshPublicKeys.keyKey. The SSH public key value. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Connect each user ssh public key in Users to the referenced user ssh public key through users.sshPublicKeys.key; flag key values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports key as an identifier in its user ssh public key namespace; it is not a universal identity outside Google Workspace.

Suspended

Developer identifier: users.suspendedSuspended. Whether the user account is suspended. It distinguishes the provider-defined suspended state or classification for the user.

Enables: Filter Users by whether the user account is suspended in users.suspended; count true, false, and missing results separately.
Interpretation: Google Workspace reports the user account is suspended as a boolean on each user; a missing field is unknown, not false. For source permissions, Parable treats a user whose value is true as inactive, and an inactive user’s sharing in the Provider gives no access in Parable. The users request reads suspended users too, so a user suspended after a sync reads true on the next sync. The Gmail, Calendar, Drive, Meet, and Chat streams skip a user whose value is true.

Suspension Reason

Developer identifier: users.suspensionReasonSuspension Reason. The reason the user account was suspended, if applicable. It supplies the returned suspension reason text needed to understand the user in context.

Enables: Search the returned suspension reason text in users.suspensionReason and attribute each match to its parent user and reported author when available.
Interpretation: Google Workspace supplies suspension reason as returned text on each user; truncation, formatting, and access boundaries can limit completeness.

Thumbnail Photo ETag

Developer identifier: users.thumbnailPhotoEtagThumbnail Photo ETag. ETag of the user’s profile photo. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

Enables: Use users.thumbnailPhotoEtag for conditional provider reads and revision checks; pair the ETag with the user ID rather than joining on it.
Interpretation: Google Workspace returns this ETag as an opaque revision token for each user; it can change when the resource changes and is not a universal identifier.

Thumbnail Photo URL

Developer identifier: users.thumbnailPhotoUrlThumbnail Photo URL. URL of the user’s profile photo thumbnail. It locates the provider resource or path associated with the user.

Enables: Associate each user with the resource identified by thumbnail photo URL in users.thumbnailPhotoUrl; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports thumbnail photo URL as a resource locator for each user; access still depends on viewer permissions and the URL may expire or change. Parable uses this image as the person’s photo.

Websites

Developer identifier: users.websitesWebsites. Websites associated with the user. It preserves the nested context needed to interpret the parent user.

Enables: Associate every returned user website in users.websites with the parent user; use the provider locator for reference without inferring that linked content was collected.
Interpretation: Google Workspace returns websites as an array of user website entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Custom Type

Developer identifier: users.websites.customTypeCustom Type. Custom type label if type is ‘custom’. It must be interpreted with the enclosing provider field name, type, or custom schema for the user website.

Enables: Segment user website entries in Users by custom type in users.websites.customType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports custom type as a label from its own taxonomy on each user website; preserve unknown labels rather than mapping them by assumption.

Primary

Developer identifier: users.websites.primaryPrimary. Whether this is the user’s primary website. It distinguishes the provider-defined primary state or classification for the user website.

Enables: Filter Users by whether this is the user’s primary website in users.websites.primary; count true, false, and missing results separately.
Interpretation: Google Workspace reports this is the user’s primary website as a boolean on each user website; a missing field is unknown, not false.

Type

Developer identifier: users.websites.typeType. The type of website (app_install_page, blog, custom, ftp, home, home_page, other, profile, reservations, resume, work). It distinguishes the provider-defined type state or classification for the user website.

Enables: Match repeated user website entries on type in users.websites.type; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each user website; preserve unknown labels rather than mapping them by assumption.

Value

Developer identifier: users.websites.valueValue. The URL of the website. It locates the provider resource or path associated with the user website.

Enables: Match repeated user website entries on value in users.websites.value; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Google Workspace reports value as a resource locator for each user website; access still depends on viewer permissions and the URL may expire or change.

Workspace Drive Activity

Developer identifier: workspace_drive_activityWorkspace Drive Activity. Google Workspace workspace drive activity records.

Enables: Trace provider-reported Drive actions to an actor, target resource, action detail, and event time.
Scope: Reads the new records from Google Workspace’s https://driveactivity.googleapis.com/v2/activity:query operation on each sync, and each row is one event. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. Drive change details are action metadata and diffs, not the body of the changed file. This stream supplies no reliable deletion signal.

Actors

Developer identifier: workspace_drive_activity.actorsActors. Actors involved in the activity. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Match every returned Google Workspace drive activity actor in workspace_drive_activity.actors to the parent workspace drive activity; use the element’s provider identity or role to reconcile membership and attribution.
Interpretation: Google Workspace returns actors as an array of Google Workspace drive activity actor entries on each workspace drive activity; missing, empty, and permission-redacted arrays are not equivalent. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

User

Developer identifier: workspace_drive_activity.actors.userUser. User actor details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute user in workspace_drive_activity.actors.user to the parent workspace drive activity; identify parent records where that nested user object is absent.
Interpretation: Google Workspace reports user as a nested object on each Google Workspace drive activity actor; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Known User

Developer identifier: workspace_drive_activity.actors.user.knownUserKnown User. Known Google user. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute known user in workspace_drive_activity.actors.user.knownUser to the parent workspace drive activity; identify parent records where that nested known user object is absent.
Interpretation: Google Workspace reports known user as a nested object on each Google Workspace drive activity user; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Developer identifier: workspace_drive_activity.actors.user.knownUser.emailEmail. Known user’s email address when returned by the API. It supplies the provider-reported address or location facet for the Google Workspace drive activity known user, not a residency determination.

Enables: Attribute each Google Workspace drive activity known user to a person or account by the exact email in workspace_drive_activity.actors.user.knownUser.email; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email as an address on each Google Workspace drive activity known user; aliases, casing, and unverified addresses can prevent a one-to-one person match. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Is Current User

Developer identifier: workspace_drive_activity.actors.user.knownUser.isCurrentUserIs Current User. Whether this actor is the authenticated user. It distinguishes the provider-defined is current user state or classification for the Google Workspace drive activity known user.

Enables: Filter Workspace Drive Activity by whether this actor is the authenticated user in workspace_drive_activity.actors.user.knownUser.isCurrentUser; count true, false, and missing results separately.
Interpretation: Google Workspace reports this actor is the authenticated user as a boolean on each Google Workspace drive activity known user; a missing field is unknown, not false. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Person Name

Developer identifier: workspace_drive_activity.actors.user.knownUser.personNamePerson Name. People API resource name for the user. It gives the Google Workspace drive activity known user a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Google Workspace drive activity known user with person name from workspace_drive_activity.actors.user.knownUser.personName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports person name as display text for each Google Workspace drive activity known user; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Developer identifier: workspace_drive_activity.idID. A key Parable builds for each row. It stays the same when Parable reads the same activity through different users. It provides the reference needed to connect the workspace drive activity to the corresponding provider object.

Enables: Match repeated workspace drive activity entries on ID in workspace_drive_activity.id. Only entries that share this key are the same record.
Interpretation: Google Workspace reports ID as an identifier in its workspace drive activity namespace; it is not a universal identity outside Google Workspace. It is the record key. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Primary Action Detail

Developer identifier: workspace_drive_activity.primaryActionDetailPrimary Action Detail. The primary action represented by this activity. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute primary action detail in workspace_drive_activity.primaryActionDetail to the parent workspace drive activity; identify parent records where that nested primary action detail object is absent.
Interpretation: Google Workspace reports primary action detail as a nested object on each workspace drive activity; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Comment

Developer identifier: workspace_drive_activity.primaryActionDetail.commentComment. Comment action details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute comment in workspace_drive_activity.primaryActionDetail.comment to the parent workspace drive activity; identify parent records where that nested comment object is absent.
Interpretation: Google Workspace reports comment as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Create

Developer identifier: workspace_drive_activity.primaryActionDetail.createCreate. Create action details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute create in workspace_drive_activity.primaryActionDetail.create to the parent workspace drive activity; identify parent records where that nested create object is absent.
Interpretation: Google Workspace reports create as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Delete

Developer identifier: workspace_drive_activity.primaryActionDetail.deleteDelete. Delete action details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute delete in workspace_drive_activity.primaryActionDetail.delete to the parent workspace drive activity; identify parent records where that nested delete object is absent.
Interpretation: Google Workspace reports delete as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Type

Developer identifier: workspace_drive_activity.primaryActionDetail.delete.typeType. Delete type, such as TRASH or PERMANENT_DELETE. It distinguishes the provider-defined type state or classification for the Google Workspace drive activity delete.

Enables: Segment Google Workspace drive activity delete entries in Workspace Drive Activity by type in workspace_drive_activity.primaryActionDetail.delete.type; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports type as a label from its own taxonomy on each Google Workspace drive activity delete; preserve unknown labels rather than mapping them by assumption. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Edit

Developer identifier: workspace_drive_activity.primaryActionDetail.editEdit. Edit action details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute edit in workspace_drive_activity.primaryActionDetail.edit to the parent workspace drive activity; identify parent records where that nested edit object is absent.
Interpretation: Google Workspace reports edit as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Move

Developer identifier: workspace_drive_activity.primaryActionDetail.moveMove. Move action details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute move in workspace_drive_activity.primaryActionDetail.move to the parent workspace drive activity; identify parent records where that nested move object is absent.
Interpretation: Google Workspace reports move as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Permission Change

Developer identifier: workspace_drive_activity.primaryActionDetail.permissionChangePermission Change. Permission-change action details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute permission change in workspace_drive_activity.primaryActionDetail.permissionChange to the parent workspace drive activity; identify parent records where that nested permission change object is absent.
Interpretation: Google Workspace reports permission change as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Rename

Developer identifier: workspace_drive_activity.primaryActionDetail.renameRename. Rename action details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute rename in workspace_drive_activity.primaryActionDetail.rename to the parent workspace drive activity; identify parent records where that nested rename object is absent.
Interpretation: Google Workspace reports rename as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

New Title

Developer identifier: workspace_drive_activity.primaryActionDetail.rename.newTitleNew Title. New title. It gives the Google Workspace drive activity rename a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Google Workspace drive activity rename with new title from workspace_drive_activity.primaryActionDetail.rename.newTitle; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports new title as display text for each Google Workspace drive activity rename; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Old Title

Developer identifier: workspace_drive_activity.primaryActionDetail.rename.oldTitleOld Title. Previous title. It gives the Google Workspace drive activity rename a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Google Workspace drive activity rename with old title from workspace_drive_activity.primaryActionDetail.rename.oldTitle; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports old title as display text for each Google Workspace drive activity rename; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Primary Email

Developer identifier: workspace_drive_activity.primaryEmailPrimary Email. Parent primary email reference copied into each workspace drive activity because the child operation does not return that relationship. It supplies the primary email profile facet used to reconcile or attribute the workspace drive activity.

Enables: Attribute each workspace drive activity to a person or account by the exact primary email in workspace_drive_activity.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each workspace drive activity; the child Google Workspace operation does not return it. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Targets

Developer identifier: workspace_drive_activity.targetsTargets. Targets affected by the activity. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute every returned Google Workspace drive activity target in workspace_drive_activity.targets to its parent workspace drive activity; keep each relationship distinct and distinguish an absent array from an explicitly empty one.
Interpretation: Google Workspace returns targets as an array of Google Workspace drive activity target entries on each workspace drive activity; missing, empty, and permission-redacted arrays are not equivalent. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Drive Item

Developer identifier: workspace_drive_activity.targets.driveItemDrive Item. Drive item target. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute drive item in workspace_drive_activity.targets.driveItem to the parent workspace drive activity; identify parent records where that nested drive item object is absent.
Interpretation: Google Workspace reports drive item as a nested object on each Google Workspace drive activity target; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

MIME Type

Developer identifier: workspace_drive_activity.targets.driveItem.mimeTypeMIME Type. Drive item MIME type. It identifies the file, document, recording, or attachment metadata associated with the Google Workspace drive activity drive item.

Enables: Segment Google Workspace drive activity drive item entries in Workspace Drive Activity by MIME type in workspace_drive_activity.targets.driveItem.mimeType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports MIME type as a label from its own taxonomy on each Google Workspace drive activity drive item; preserve unknown labels rather than mapping them by assumption. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Name

Developer identifier: workspace_drive_activity.targets.driveItem.nameName. Drive item resource name. It gives the Google Workspace drive activity drive item a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Google Workspace drive activity drive item with name from workspace_drive_activity.targets.driveItem.name; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports name as display text for each Google Workspace drive activity drive item; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Owner

Developer identifier: workspace_drive_activity.targets.driveItem.ownerOwner. Drive item owner. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute owner in workspace_drive_activity.targets.driveItem.owner to the parent workspace drive activity; identify parent records where that nested owner object is absent.
Interpretation: Google Workspace reports owner as a nested object on each Google Workspace drive activity drive item; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

User

Developer identifier: workspace_drive_activity.targets.driveItem.owner.userUser. Owner user details. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute user in workspace_drive_activity.targets.driveItem.owner.user to the parent workspace drive activity; identify parent records where that nested user object is absent.
Interpretation: Google Workspace reports user as a nested object on each Google Workspace drive activity owner; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Title

Developer identifier: workspace_drive_activity.targets.driveItem.titleTitle. Drive item display title. It gives the Google Workspace drive activity drive item a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Google Workspace drive activity drive item with title from workspace_drive_activity.targets.driveItem.title; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports title as display text for each Google Workspace drive activity drive item; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

File Comment

Developer identifier: workspace_drive_activity.targets.fileCommentFile Comment. File comment target. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute file comment in workspace_drive_activity.targets.fileComment to the parent workspace drive activity; identify parent records where that nested file comment object is absent.
Interpretation: Google Workspace reports file comment as a nested object on each Google Workspace drive activity target; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Legacy Comment ID

Developer identifier: workspace_drive_activity.targets.fileComment.legacyCommentIdLegacy Comment ID. Legacy comment identifier. It provides the reference needed to connect the workspace drive activity to the corresponding provider object.

Enables: Connect each Google Workspace drive activity file comment in Workspace Drive Activity to the referenced legacy comment through workspace_drive_activity.targets.fileComment.legacyCommentId; flag legacy comment ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports legacy comment ID as an identifier in its legacy comment namespace; it is not a universal identity outside Google Workspace. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Time Range

Developer identifier: workspace_drive_activity.timeRangeTime Range. Time range (startTime/endTime) for activities aggregated over a window instead of a single timestamp. It preserves the nested context needed to interpret the parent workspace drive activity.

Enables: Attribute time range in workspace_drive_activity.timeRange to the parent workspace drive activity; identify parent records where that nested time range object is absent.
Interpretation: Google Workspace reports time range as a nested object on each workspace drive activity; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Timestamp

Developer identifier: workspace_drive_activity.timestampTimestamp. Activity event timestamp. It anchors the workspace drive activity on the provider’s reported timeline.

Enables: Order Workspace Drive Activity by timestamp in workspace_drive_activity.timestamp and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports timestamp as a timestamp on each workspace drive activity; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record. It is the time of the event. This stream describes Drive action and change metadata; it does not include the affected file’s body or bytes.

Workspace Drive Files

Developer identifier: workspace_drive_filesWorkspace Drive Files. Google Docs and Sheets metadata, with the sharing permissions of each file, for files whose current modifiedTime falls in the period each sync reads.

Enables: Inventory Google Docs and Sheets metadata changed in the requested window, attribute each file to its owners, and list the users, groups, domains, and link audiences each file is shared with.
Scope: Reads the records that changed since the previous sync from Google Workspace’s https://www.googleapis.com/drive/v3/files operation, and keeps the latest version of each record. Each request runs in the parent user’s delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream contains Docs and Sheets file metadata and sharing permissions, not document text, spreadsheet cell contents, or file bytes. Drive returns the permissions of a file only when the delegated user can share it, and never for items in shared drives. A sharing change that does not change modifiedTime may not be read until the file changes again. This stream supplies no reliable deletion signal.

Created Time

Developer identifier: workspace_drive_files.createdTimeCreated Time. Time the file was created (RFC 3339). It anchors the workspace drive file on the provider’s reported timeline.

Enables: Order Workspace Drive Files by created time in workspace_drive_files.createdTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports created time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time.

Drive ID

Developer identifier: workspace_drive_files.driveIdDrive ID. ID of the shared drive the file resides in. Only populated for items in shared drives. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

Enables: Connect each workspace drive file in Workspace Drive Files to the referenced drive through workspace_drive_files.driveId; flag drive ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports drive ID as an identifier in its drive namespace; it is not a universal identity outside Google Workspace.

Developer identifier: workspace_drive_files.idID. Unique identifier for the file. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

Enables: Match repeated workspace drive file entries on ID in workspace_drive_files.id. Only entries that share this key are the same record.
Interpretation: Google Workspace reports ID as an identifier in its workspace drive file namespace; it is not a universal identity outside Google Workspace. It is the record key.

Last Modifying User

Developer identifier: workspace_drive_files.lastModifyingUserLast Modifying User. The last user to modify the file. It preserves the nested context needed to interpret the parent workspace drive file.

Enables: Attribute last modifying user in workspace_drive_files.lastModifyingUser to the parent workspace drive file; identify parent records where that nested last modifying user object is absent.
Interpretation: Google Workspace reports last modifying user as a nested object on each workspace drive file; optional children may be absent from a valid response.

Display Name

Developer identifier: workspace_drive_files.lastModifyingUser.displayNameDisplay Name. A plain text displayable name for this user. It distinguishes the provider-defined display name state or classification for the drive user.

Enables: Label each drive user with display name from workspace_drive_files.lastModifyingUser.displayName; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports display name as display text for each drive user; names are mutable and are not stable identities.

Email Address

Developer identifier: workspace_drive_files.lastModifyingUser.emailAddressEmail Address. The email address of the user. It supplies the provider-reported address or location facet for the drive user, not a residency determination.

Enables: Attribute each drive user to a person or account by the exact email address in workspace_drive_files.lastModifyingUser.emailAddress; identify addresses that do not match the Google Workspace directory.
Interpretation: Google Workspace reports email address as an address on each drive user; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Kind

Developer identifier: workspace_drive_files.lastModifyingUser.kindKind. Identifies what kind of resource this is (e.g., drive#user). It distinguishes the provider-defined kind state or classification for the drive user.

Enables: Segment drive user entries in Workspace Drive Files by kind in workspace_drive_files.lastModifyingUser.kind; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports kind as a label from its own taxonomy on each drive user; preserve unknown labels rather than mapping them by assumption.

Developer identifier: workspace_drive_files.lastModifyingUser.meMe. Whether this user is the requesting user. It distinguishes the provider-defined me state or classification for the drive user.

Enables: Filter Workspace Drive Files by whether this user is the requesting user in workspace_drive_files.lastModifyingUser.me; count true, false, and missing results separately.
Interpretation: Google Workspace reports this user is the requesting user as a boolean on each drive user; a missing field is unknown, not false.

Permission ID

Developer identifier: workspace_drive_files.lastModifyingUser.permissionIdPermission ID. The user’s ID as visible in Permission resources. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

Enables: Connect each drive user in Workspace Drive Files to the referenced permission through workspace_drive_files.lastModifyingUser.permissionId; flag permission ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports permission ID as an identifier in its permission namespace; it is not a universal identity outside Google Workspace.

Photo Link

Developer identifier: workspace_drive_files.lastModifyingUser.photoLinkPhoto Link. A link to the user’s profile photo, if available. It locates the provider resource or path associated with the drive user.

Enables: Associate each drive user with the resource identified by photo link in workspace_drive_files.lastModifyingUser.photoLink; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports photo link as a resource locator for each drive user; access still depends on viewer permissions and the URL may expire or change.

MIME Type

Developer identifier: workspace_drive_files.mimeTypeMIME Type. MIME type of the file (e.g., application/vnd.google-apps.document, application/vnd.google-apps.folder). It identifies the file, document, recording, or attachment metadata associated with the workspace drive file.

Enables: Segment workspace drive file entries in Workspace Drive Files by MIME type in workspace_drive_files.mimeType; compare counts only within the same Google Workspace taxonomy.
Interpretation: Google Workspace reports MIME type as a label from its own taxonomy on each workspace drive file; preserve unknown labels rather than mapping them by assumption.

Modified By Me Time

Developer identifier: workspace_drive_files.modifiedByMeTimeModified By Me Time. Last time the file was modified by the authenticated user (RFC 3339). It anchors the workspace drive file on the provider’s reported timeline.

Enables: Order Workspace Drive Files by modified by me time in workspace_drive_files.modifiedByMeTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports modified by me time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time.

Modified Time

Developer identifier: workspace_drive_files.modifiedTimeModified Time. Last time the file was modified by anyone (RFC 3339). It anchors the workspace drive file on the provider’s reported timeline.

Enables: Order Workspace Drive Files by modified time in workspace_drive_files.modifiedTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports modified time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record.

Name

Developer identifier: workspace_drive_files.nameName. Name of the file. It gives the workspace drive file a human-readable provider label while its identifier remains the stable reference.

Enables: Label each workspace drive file with name from workspace_drive_files.name; distinguish records that share that display name but have different Google Workspace identifiers.
Interpretation: Google Workspace reports name as display text for each workspace drive file; names are mutable and are not stable identities.

Owners

Developer identifier: workspace_drive_files.ownersOwners. List of file owners. It preserves the nested context needed to interpret the parent workspace drive file.

Enables: Match every returned drive user in workspace_drive_files.owners to the parent workspace drive file; use the element’s provider identity or role to reconcile membership and attribution.
Interpretation: Google Workspace returns owners as an array of drive user entries on each workspace drive file; missing, empty, and permission-redacted arrays are not equivalent.

Parents

Developer identifier: workspace_drive_files.parentsParents. IDs of the parent folders containing this file. It preserves the nested context needed to interpret the parent workspace drive file.

Enables: Connect the parent workspace drive file to every referenced parent value in workspace_drive_files.parents; identify provider IDs that do not resolve to the expected related object.
Interpretation: Google Workspace returns parents as an array of parent value entries on each workspace drive file; missing, empty, and permission-redacted arrays are not equivalent.

Permissions

Developer identifier: workspace_drive_files.permissionsPermissions. The sharing permissions that Google Drive reports on the file: each user, group, domain, or link audience that the file is shared with, and the role it has.

Enables: Trace each workspace drive file to the users, groups, and domains in workspace_drive_files.permissions, and read each entry as a grant on the file for source permissions.
Interpretation: Google Workspace returns permissions as an array of permission entries on each workspace drive file. Drive returns the list only when the delegated user can share the file, and never for items in shared drives. A missing list is unknown sharing, not an unshared file. The entries are sharing settings, not a record of who opened the file.

Allow File Discovery

Developer identifier: workspace_drive_files.permissions.allowFileDiscoveryAllow File Discovery. Whether people in the audience of a domain or anyone permission can find the file through search, or need the link to open it.

Enables: Separate discoverable domain and anyone grants from link-only grants in workspace_drive_files.permissions.allowFileDiscovery.
Interpretation: Google Workspace reports this boolean on domain and anyone permissions only. When it is false, the grant admits only people who hold the link, and the link holders are not in the data. A missing value on a user or group permission does not mean false.

Deleted

Developer identifier: workspace_drive_files.permissions.deletedDeleted. Whether the account that the permission names was deleted.

Enables: Exclude grants to deleted accounts in workspace_drive_files.permissions.deleted when you list who the file is shared with.
Interpretation: Google Workspace reports this boolean on user and group permissions. A true value means the permission grants nothing. A missing value does not mark the grant inactive.

Domain

Developer identifier: workspace_drive_files.permissions.domainDomain. The Google Workspace domain that a domain permission shares the file with.

Enables: Read domain-wide sharing of a workspace drive file from workspace_drive_files.permissions.domain, and match it to the domain of a reader’s primary email address.
Interpretation: Google Workspace reports the domain as a DNS name. The grantee type of the same permission decides whether this field or Email Address names the grantee. A domain grant is not a list of the people in that domain.

Email Address

Developer identifier: workspace_drive_files.permissions.emailAddressEmail Address. The email address of the user or group that the permission shares the file with.

Enables: Resolve a user or group grantee in workspace_drive_files.permissions.emailAddress to a Google Workspace user or group by its email address.
Interpretation: Google Workspace reports email address on user and group permissions only. Aliases, casing, and addresses outside the directory can prevent a match. A grantee outside the directory still names a real grant. A group address names the group, not its members.

Expiration Time

Developer identifier: workspace_drive_files.permissions.expirationTimeExpiration Time. The time at which the permission stops sharing the file.

Enables: Drop expired grants in workspace_drive_files.permissions.expirationTime before the next sync removes them.
Interpretation: Google Workspace reports expiration time as a timestamp on user and group permissions that have an expiry. A missing value means that the permission has no expiry.

Permission ID

Developer identifier: workspace_drive_files.permissions.idPermission ID. Google Drive’s ID for the permission. It is also the grantee’s permission ID.

Enables: Identify each permission entry of a file by Permission ID in workspace_drive_files.permissions.id, and connect a user grantee to the Permission ID that Drive reports for that user on owners and modifying users.
Interpretation: Google Workspace reports permission ID as an opaque identifier in its Drive permission namespace. It names one grantee on one file, and the same grantee has the same ID on other files. It is the record key of the permission entry. The permissions table merges on the file and the position of the entry.

Permission Details

Developer identifier: workspace_drive_files.permissions.permissionDetailsPermission Details. Whether Google Drive reports the permission as inherited from a parent item or set directly on the file.

Enables: Separate the grants a file gets from its folders from the grants set on the file itself in workspace_drive_files.permissions.permissionDetails.
Interpretation: Google Workspace returns permission details as an array of entries on each permission. Parable has not confirmed that Drive returns them for My Drive files. A missing list does not mean that the permission is direct.

Inherited

Developer identifier: workspace_drive_files.permissions.permissionDetails.inheritedInherited. Whether the permission entry comes from a parent item.

Enables: Count inherited and direct grants on each file in workspace_drive_files.permissions.permissionDetails.inherited.
Interpretation: Google Workspace reports inherited as a boolean on each detail entry. A missing value is unknown, not false.

Inherited From

Developer identifier: workspace_drive_files.permissions.permissionDetails.inheritedFromInherited From. The ID of the folder or shared drive that the permission is inherited from.

Enables: Connect an inherited grant in workspace_drive_files.permissions.permissionDetails.inheritedFrom to the Drive item that carries it.
Interpretation: Google Workspace reports inherited from as an identifier in its Drive item namespace. A missing value does not prove that the permission is direct.

Permission Type

Developer identifier: workspace_drive_files.permissions.permissionDetails.permissionTypePermission Type. Whether the detail entry is a permission on the item or a membership of a shared drive.

Enables: Separate item permissions from shared drive memberships in workspace_drive_files.permissions.permissionDetails.permissionType.
Interpretation: Google Workspace reports permission type as a label from its Drive taxonomy. Google documents file and member, and new values can appear.

Role

Developer identifier: workspace_drive_files.permissions.permissionDetails.roleRole. The Drive role that this detail entry grants.

Enables: Compare the role of an inherited entry with the role of a direct entry for the same grantee in workspace_drive_files.permissions.permissionDetails.role.
Interpretation: Google Workspace reports role as a label from its Drive role taxonomy. The Role field of the permission itself is the role that the grantee has on the file.

Role

Developer identifier: workspace_drive_files.permissions.roleRole. The Drive role that the permission grants on the file.

Enables: Compare grants in workspace_drive_files.permissions.role on a common level: owner and organizer as owner, fileOrganizer and writer as write, commenter as comment, and reader as read.
Interpretation: Google Workspace reports role as a label from its Drive role taxonomy. Organizer and fileOrganizer apply to shared drive items. The role is a sharing setting, not a record of what the grantee did with the file.

Grantee Type

Developer identifier: workspace_drive_files.permissions.typeGrantee Type. The kind of grantee that the permission names: a user, a group, a domain, or anyone.

Enables: Decide from workspace_drive_files.permissions.type which field names the grantee: Email Address for a user or a group, Domain for a domain, and neither for anyone.
Interpretation: Google Workspace reports grantee type as a label from its Drive permission taxonomy. A value outside user, group, domain, and anyone has no mapping.

Primary Email

Developer identifier: workspace_drive_files.primaryEmailPrimary Email. Parent primary email reference copied into each workspace drive file because the child operation does not return that relationship. It identifies the related provider object that gives the workspace drive file its parent, owner, or container context.

Enables: Attribute each workspace drive file to a person or account by the exact primary email in workspace_drive_files.primaryEmail; identify addresses that do not match the Google Workspace directory.
Interpretation: Parable copies primary email from the parent record into each workspace drive file; the child Google Workspace operation does not return it.

Shared

Developer identifier: workspace_drive_files.sharedShared. Whether the file has been shared with other users. It distinguishes the provider-defined shared state or classification for the workspace drive file.

Enables: Filter Workspace Drive Files by whether the file has been shared with other users in workspace_drive_files.shared; count true, false, and missing results separately.
Interpretation: Google Workspace reports the file has been shared with other users as a boolean on each workspace drive file; a missing field is unknown, not false.

Sharing User

Developer identifier: workspace_drive_files.sharingUserSharing User. The user who shared the file with the requesting user, if applicable. It preserves the nested context needed to interpret the parent workspace drive file.

Enables: Attribute sharing user in workspace_drive_files.sharingUser to the parent workspace drive file; identify parent records where that nested sharing user object is absent.
Interpretation: Google Workspace reports sharing user as a nested object on each workspace drive file; optional children may be absent from a valid response.

Size

Developer identifier: workspace_drive_files.sizeSize. Size of the file content in bytes. Only populated for files with binary content in Drive. It supplies the size measure for the workspace drive file at the provider’s declared unit and grain.

Enables: Measure size through workspace_drive_files.size for each workspace drive file and compare only values with the same unit and record grain.
Interpretation: Google Workspace reports size as a measure on each workspace drive file; compare only records with the same unit and aggregation grain.

Team Drive ID

Developer identifier: workspace_drive_files.teamDriveIdTeam Drive ID. Deprecated. ID of the Team Drive the file resides in. Use driveId instead. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

Enables: Connect each workspace drive file in Workspace Drive Files to the referenced team drive through workspace_drive_files.teamDriveId; flag team drive ID values that do not resolve in that provider namespace.
Interpretation: Google Workspace reports team drive ID as an identifier in its team drive namespace; it is not a universal identity outside Google Workspace.

Trashed

Developer identifier: workspace_drive_files.trashedTrashed. Whether the file has been trashed, either explicitly or from a trashed parent folder. It distinguishes the provider-defined trashed state or classification for the workspace drive file.

Enables: Filter Workspace Drive Files by whether the file has been trashed, either explicitly or from a trashed parent folder in workspace_drive_files.trashed; count true, false, and missing results separately.
Interpretation: Google Workspace reports the file has been trashed, either explicitly or from a trashed parent folder as a boolean on each workspace drive file; a missing field is unknown, not false.

Trashed Time

Developer identifier: workspace_drive_files.trashedTimeTrashed Time. The time that the item was trashed (RFC 3339). Only populated for items in shared drives. It anchors the workspace drive file on the provider’s reported timeline.

Enables: Order Workspace Drive Files by trashed time in workspace_drive_files.trashedTime and isolate records inside an exact provider reporting window.
Interpretation: Google Workspace reports trashed time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time.

Web View Link

Developer identifier: workspace_drive_files.webViewLinkWeb View Link. A link for opening the file in a relevant Google editor or viewer in a browser. It locates the provider resource or path associated with the workspace drive file.

Enables: Associate each workspace drive file with the resource identified by web view link in workspace_drive_files.webViewLink; verify the link resolves to the expected Google Workspace object.
Interpretation: Google Workspace reports web view link as a resource locator for each workspace drive file; access still depends on viewer permissions and the URL may expire or change.

Error	Meaning	Solution
`403 Not Authorized to access this resource/api`	Missing delegation	Configure domain-wide delegation
`400 Invalid Input`	Wrong admin email	Use a valid super admin email
`401 Invalid Credentials`	Bad key or expired	Regenerate service account key
`429 Rate Limit Exceeded`	Too many requests	If this occurs during setup, wait briefly, then click Save & test connection again. If this occurs during syncing, Parable retries automatically for a limited time. If the sync still fails, review the connection error before retrying.

Common Issues

Chat streams fail the sync on HTTP 400

When the Google Chat API answers a Chat request with HTTP 400, the chat_spaces and chat_space_messages streams fail for that sync, and the sync reports IN-SC-006 (some streams failed). The other Google streams still complete. Parable reports the failure, so that a sync with no Chat records does not look successful. Ask your Parable representative to look at the failed sync.

A shared drive has no items in Parable

shared_drive_files reads a drive as its first manager in the shared_drive_members table whose type is user and whose account is not deleted. When the drive has no such manager, or Google refuses delegation to that manager (a user outside your domain, or a suspended user), Parable skips the drive. Make a domain user a manager of the drive, and run the sync again.

Shared drive syncs take long or hit the Drive API quota

shared_drive_file_permissions sends one request per page of 100 permissions for each item that has permissions of its own. The Drive API gives a Google Cloud project 1,000,000 quota units per minute, and 325,000 for each user it acts as, and a list request costs 100 units. Parable retries a rate-limited request automatically. If the quota is not enough, turn the stream off. Source permissions then give each item only the members of its drive, and a limited-access folder and the items in it admit nobody.

”Domain-wide delegation not configured”

Ensure the Client ID (numeric) is added to Domain-wide Delegation in Admin Console, not the service account email.

”User not found” when impersonating

The admin email used for impersonation must be a valid super admin in the Google Workspace domain.Admin SDK — Google Admin SDK documentationDomain-Wide Delegation — Delegation setup guide

​Directory

​Profile photos

​Audit & Reports

​Data streams

​Service account

​What You’ll Need

​Step 1: Create Google Cloud Project

​Step 2: Enable Required APIs

​Step 3: Create Service Account

​Step 4: Generate Service Account Key

​Step 5: Enable Domain-Wide Delegation and Note Client ID

​Step 6: Configure Domain-Wide Delegation

​Step 7: Add Required Scopes

​Step 8: Enter values in the form

​Common Issues

​Chat streams fail the sync on HTTP 400

​A shared drive has no items in Parable

​Shared drive syncs take long or hit the Drive API quota

​”Domain-wide delegation not configured”

​”User not found” when impersonating

Directory

Profile photos

Audit & Reports

Data streams

Service account

What You’ll Need

Step 1: Create Google Cloud Project

Step 2: Enable Required APIs

Step 3: Create Service Account

Step 4: Generate Service Account Key

Step 5: Enable Domain-Wide Delegation and Note Client ID

Step 6: Configure Domain-Wide Delegation

Step 7: Add Required Scopes

Step 8: Enter values in the form

Common Issues

Chat streams fail the sync on HTTP 400

A shared drive has no items in Parable

Shared drive syncs take long or hit the Drive API quota

”Domain-wide delegation not configured”

”User not found” when impersonating