shared_drive_membership_changes
View add, remove, and role-change history of members in Google Shared Drives, including who added external users and when. Filter by drive name and domain.
Instructions
Membership add/remove/role-change history across shared drives.
Answers "who added this (external) member, and when" — the other half of
triaging a shared-drive sharing finding (see drive_doc_activity).
Membership changes are low-volume, so a plain window scan of the single
shared_drive_membership_change event works even over months.
Each entry's drive is the shared drive's NAME as the audit log reports
it (the event's owner parameter — not an id, not a user address);
target_is_external classifies the affected member against the
configured internal domains. The Reports API cannot filter by drive
server-side, so drive_name is a client-side case-insensitive substring
match on that name — it narrows the listing, not the scan. An event whose
drive name is absent can neither match nor be ruled out; with
drive_name set such events are excluded from total/entries but
tallied in missing_drive_name so the drop is never silent (without
drive_name they are listed normally with drive: null).
Args:
days: How far back to scan (Reports API retains roughly 6 months).
domain: Restrict to one configured domain/tenant (default: all).
drive_name: Only list entries whose drive name contains this substring.
max_pages: Reports page cap per domain; capped=true means more existed.
max_events: Cap on listed entries (total counts all matches).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | ||
| domain | No | ||
| max_pages | No | ||
| drive_name | No | ||
| max_events | No |