{"resources":{"googleworkspace":{"id":"googleworkspace","name":"googleworkspace","fields":{"calendar":{"name":"calendar","type":"\u001bgoogleworkspace.calendar","title":"Google Workspace calendar","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"calendars":{"name":"calendars","type":"\u0019\u001bgoogleworkspace.calendar","title":"User calendars","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"chromeOsDevice":{"name":"chromeOsDevice","type":"\u001bgoogleworkspace.chromeOsDevice","title":"Chrome OS device","desc":"Examine a single Chrome OS device enrolled in the organization through the Admin SDK Directory API. Complements `googleworkspace.endpoint` with the ChromeOS-specific posture signals auditors need: `bootMode` distinguishes Verified Boot from developer mode, `autoUpdateExpiration` reports when the device stops receiving Chrome OS security updates (AUE), `osVersion` / `platformVersion` / `firmwareVersion` capture patch level, and `status` reports the enrollment lifecycle. The `id` field is the device's stable directory ID and selects the record — for example `googleworkspace.chromeOsDevices.where(bootMode != \"Verified\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"chromeOsDevices":{"name":"chromeOsDevices","type":"\u0019\u001bgoogleworkspace.chromeOsDevice","title":"Chrome OS devices enrolled in the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"connectedApp":{"name":"connectedApp","type":"\u001bgoogleworkspace.connectedApp","title":"Google Workspace third-party connected apps","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"connectedApps":{"name":"connectedApps","type":"\u0019\u001bgoogleworkspace.connectedApp","title":"Third-party OAuth connected apps","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"domain":{"name":"domain","type":"\u001bgoogleworkspace.domain","title":"Google Workspace domain","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"domains":{"name":"domains","type":"\u0019\u001bgoogleworkspace.domain","title":"Registered domains","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"endpoint":{"name":"endpoint","type":"\u001bgoogleworkspace.endpoint","title":"Managed endpoint device","desc":"Examine a single device enrolled in Google endpoint management or reported through endpoint verification — Chrome OS, Android, iOS, Windows, macOS, Linux, and Google Sync clients all surface through the same record. Fields cover platform identity (`deviceType`, `manufacturer`, `model`, `osVersion`), hardware identifiers (`serialNumber`, `imei`, `meid`, `wifiMacAddresses`), posture signals (`compromisedState`, `encryptionState`, `enabledDeveloperOptions`, `enabledUsbDebugging`), enrollment status (`managementState`, `ownerType`), and the set of users registered on the device through `users`. The `id` field is the stable Cloud Identity device id and selects the record — for example `googleworkspace.endpoints.where(deviceType == \"WINDOWS\" \u0026\u0026 encryptionState != \"ENCRYPTED\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"endpoints":{"name":"endpoints","type":"\u0019\u001bgoogleworkspace.endpoint","title":"Managed endpoints reported by Google endpoint management and endpoint verification","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"group":{"name":"group","type":"\u001bgoogleworkspace.group","title":"Google Workspace group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"groups":{"name":"groups","type":"\u0019\u001bgoogleworkspace.group","title":"Groups for collaboration and access control","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"member":{"name":"member","type":"\u001bgoogleworkspace.member","title":"Google Workspace group member","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"mobileDevice":{"name":"mobileDevice","type":"\u001bgoogleworkspace.mobileDevice","title":"Mobile device","desc":"Examine a single mobile device (Android, iOS, or Google Sync) managed by the organization through the Admin SDK Directory API. Carries the device posture signals mobile-hardening audits rely on: `deviceCompromisedStatus` (root / jailbreak), `encryptionStatus`, `devicePasswordStatus`, `developerOptionsStatus`, `adbStatus` (USB debugging), and `unknownSourcesStatus` (sideloading). `type` reports the platform, `status` the management lifecycle, and `securityPatchLevel` the patch timestamp. The `id` field is the device's stable resource ID and selects the record — for example `googleworkspace.mobileDevices.where(deviceCompromisedStatus == \"Compromised\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"mobileDevices":{"name":"mobileDevices","type":"\u0019\u001bgoogleworkspace.mobileDevice","title":"Mobile devices (Android, iOS, Google Sync) managed by the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnit":{"name":"orgUnit","type":"\u001bgoogleworkspace.orgUnit","title":"Google Workspace organizational unit","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"orgUnits":{"name":"orgUnits","type":"\u0019\u001bgoogleworkspace.orgUnit","title":"Organizational units in the account hierarchy","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"policies":{"name":"policies","type":"\u0019\u001bgoogleworkspace.policy","title":"Admin-configured policy settings resolved across the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"policy":{"name":"policy","type":"\u001bgoogleworkspace.policy","title":"Google Workspace admin policy setting","desc":"Examine a single policy setting resolved by the Cloud Identity Policy API — the admin-configured settings that govern security posture across the organization (2-step-verification enforcement, password strength and length, session length, less-secure-app access, service on/off status, and third-party app access), surfaced without navigating the Admin Console. Each row is one resolved setting for one scope: `settingType` names the setting (for example `settings/security.password` or `settings/security.session_controls`), `value` carries the setting's configured value as a dict (the schema varies per setting type), and `orgUnit` / `group` report the organizational unit or group the setting resolves to (empty when the policy applies customer-wide). `type` distinguishes admin-configured policies (`ADMIN`) from Google's system defaults (`SYSTEM`). Select by setting type — for example `googleworkspace.policies.where(settingType == \"settings/security.session_controls\")`. Requires a super-admin-impersonating service account with the `cloud-identity.policies.readonly` scope.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"report":{"name":"report","type":"\u001bgoogleworkspace.report","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"role":{"name":"role","type":"\u001bgoogleworkspace.role","title":"Google Workspace role","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"roleAssignments":{"name":"roleAssignments","type":"\u0019\u001bgoogleworkspace.role.assignment","title":"Admin role assignments to users and groups across the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"roles":{"name":"roles","type":"\u0019\u001bgoogleworkspace.role","title":"Admin roles and privileges","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"superAdmins":{"name":"superAdmins","type":"\u0019\u001bgoogleworkspace.user","title":"Users with super administrator privileges","desc":"Convenience filter over `users` for least-privilege reviews — equivalent to `users.where(isAdmin)`.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"suspendedUsers":{"name":"suspendedUsers","type":"\u0019\u001bgoogleworkspace.user","title":"Suspended user accounts","desc":"Convenience filter over `users` — equivalent to `users.where(suspended)`.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"token":{"name":"token","type":"\u001bgoogleworkspace.token","title":"Google Workspace token","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"user":{"name":"user","type":"\u001bgoogleworkspace.user","title":"Google Workspace user accounts","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001bgoogleworkspace.user","title":"All user accounts","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"usersWithout2sv":{"name":"usersWithout2sv","type":"\u0019\u001bgoogleworkspace.user","title":"Active users not enrolled in 2-step verification","desc":"Convenience filter over `users` for MFA-coverage audits — active (non-suspended, non-archived) users where `isEnrolledIn2Sv` is false.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace organization","desc":"Examine a Google Workspace customer organization: the organizational- unit hierarchy, every user account and the user's tokens / OAuth scopes, the groups (with members and security settings), the registered domains and their verification state, the admin roles and their privileges, the third-party OAuth-connected apps with aggregated scopes, the user calendars together with their ACL rules, the managed endpoints (Chrome OS, Android, iOS, Windows, macOS, Linux) reported through Google endpoint management and endpoint verification, and the admin-configured policy settings resolved across the organization through the Cloud Identity Policy API — the surface auditors use for identity hygiene, sharing reviews, 2-step-verification enforcement checks, device-compliance audits, and domain-wide security-posture review.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.calendar":{"id":"googleworkspace.calendar","name":"googleworkspace.calendar","fields":{"accessRole":{"name":"accessRole","type":"\u0007","is_mandatory":true,"title":"The effective access role for the authenticated user (freeBusyReader, reader, writer, owner)","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"acl":{"name":"acl","type":"\u0019\u001bgoogleworkspace.calendar.aclRule","title":"ACL rules for the calendar","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"aclRule":{"name":"aclRule","type":"\u001bgoogleworkspace.calendar.aclRule","title":"Google Workspace calendar ACL rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"deleted":{"name":"deleted","type":"\u0004","is_mandatory":true,"title":"Whether the calendar list entry has been removed from the list","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the calendar","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hidden":{"name":"hidden","type":"\u0004","is_mandatory":true,"title":"Whether the calendar has been hidden from the list","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Identifier of the calendar","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Geographic location of the calendar as free-form text","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether the calendar is the primary calendar for the authenticated user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"selected":{"name":"selected","type":"\u0004","is_mandatory":true,"title":"Whether the calendar content shows up in the calendar UI","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Title of the calendar","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"summaryOverride":{"name":"summaryOverride","type":"\u0007","is_mandatory":true,"title":"The summary that the authenticated user has set for this calendar","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"timeZone":{"name":"timeZone","type":"\u0007","is_mandatory":true,"title":"The time zone of the calendar","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace calendar","private":true,"min_provider_version":"11.0.17","defaults":"summary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.calendar.aclRule":{"id":"googleworkspace.calendar.aclRule","name":"googleworkspace.calendar.aclRule","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Identifier of the ACL rule","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"The role assigned to the scope. Possible values are none, freeBusyReader, reader, writer, owner","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scope":{"name":"scope","type":"\u001bgoogleworkspace.calendar.aclRule.scope","is_mandatory":true,"title":"The extent to which calendar access is granted by this ACL rule","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace calendar ACL rule","private":true,"min_provider_version":"11.0.17","defaults":"role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.calendar.aclRule.scope":{"id":"googleworkspace.calendar.aclRule.scope","name":"googleworkspace.calendar.aclRule.scope","fields":{"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The type of the scope. Possible values are default, user, group, domain","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"The email address of the user or group, or the name of a domain depending on the scope type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace calendar ACL rule scope","private":true,"min_provider_version":"11.0.17","defaults":"type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.chromeOsDevice":{"id":"googleworkspace.chromeOsDevice","name":"googleworkspace.chromeOsDevice","fields":{"annotatedAssetId":{"name":"annotatedAssetId","type":"\u0007","is_mandatory":true,"title":"Asset tag of the device set by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"annotatedLocation":{"name":"annotatedLocation","type":"\u0007","is_mandatory":true,"title":"Annotated location of the device set by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"annotatedUser":{"name":"annotatedUser","type":"\u0007","is_mandatory":true,"title":"Annotated user assigned to the device by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"autoUpdateExpiration":{"name":"autoUpdateExpiration","type":"\t","is_mandatory":true,"title":"Timestamp after which the device stops receiving Chrome OS updates and support (auto-update expiration)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"bootMode":{"name":"bootMode","type":"\u0007","is_mandatory":true,"title":"Boot mode of the device","desc":"`Verified` indicates Verified Boot is active; `Dev` indicates developer mode, which disables OS verification and is a hardening concern.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deprovisionReason":{"name":"deprovisionReason","type":"\u0007","is_mandatory":true,"title":"The reason the device was deprovisioned (empty unless deprovisioned)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceLicenseType":{"name":"deviceLicenseType","type":"\u0007","is_mandatory":true,"title":"The licensing model of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firmwareVersion":{"name":"firmwareVersion","type":"\u0007","is_mandatory":true,"title":"Firmware version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firstEnrollmentTime":{"name":"firstEnrollmentTime","type":"\t","is_mandatory":true,"title":"When the device was first enrolled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Stable directory device identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastEnrollmentTime":{"name":"lastEnrollmentTime","type":"\t","is_mandatory":true,"title":"Most recent time the device was enrolled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSync":{"name":"lastSync","type":"\t","is_mandatory":true,"title":"Most recent time the device synced device-policy settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"macAddress":{"name":"macAddress","type":"\u0007","is_mandatory":true,"title":"The MAC address of the device on the wireless network interface","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model name of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"notes":{"name":"notes","type":"\u0007","is_mandatory":true,"title":"Notes added by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitPath":{"name":"orgUnitPath","type":"\u0007","is_mandatory":true,"title":"The full path of the organizational unit the device is in","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"OS version running on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osVersionCompliance":{"name":"osVersionCompliance","type":"\u0007","is_mandatory":true,"title":"Reported compliance of the OS version against the configured policy","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"platformVersion":{"name":"platformVersion","type":"\u0007","is_mandatory":true,"title":"Platform version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the device. Possible values: ACTIVE, DEPROVISIONED, DISABLED, INACTIVE, RETURN_APPROVED, RETURN_REQUESTED, SHIPPED, UNKNOWN","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Chrome OS device","desc":"Examine a single Chrome OS device enrolled in the organization through the Admin SDK Directory API. Complements `googleworkspace.endpoint` with the ChromeOS-specific posture signals auditors need: `bootMode` distinguishes Verified Boot from developer mode, `autoUpdateExpiration` reports when the device stops receiving Chrome OS security updates (AUE), `osVersion` / `platformVersion` / `firmwareVersion` capture patch level, and `status` reports the enrollment lifecycle. The `id` field is the device's stable directory ID and selects the record — for example `googleworkspace.chromeOsDevices.where(bootMode != \"Verified\")`.","private":true,"min_provider_version":"13.1.5","defaults":"serialNumber model osVersion status","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.connectedApp":{"id":"googleworkspace.connectedApp","name":"googleworkspace.connectedApp","fields":{"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"The unique ID of the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The application's name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"Aggregated scopes across all tokens issued to the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"tokens":{"name":"tokens","type":"\u0019\u001bgoogleworkspace.token","is_mandatory":true,"title":"Returns the user-issued tokens to 3rd party applications","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"users":{"name":"users","type":"\u0019\u001bgoogleworkspace.user","is_mandatory":true,"title":"Google Workspace User that use the 3rd-party application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace third-party connected apps","private":true,"min_provider_version":"9.0.0","defaults":"name clientId","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.domain":{"id":"googleworkspace.domain","name":"googleworkspace.domain","fields":{"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"Creation time of the domain","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"domainName":{"name":"domainName","type":"\u0007","is_mandatory":true,"title":"The domain name of the customer","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isPrimary":{"name":"isPrimary","type":"\u0004","is_mandatory":true,"title":"Whether the domain is a primary domain","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"verified":{"name":"verified","type":"\u0004","is_mandatory":true,"title":"Whether the domain is verified","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace domain","private":true,"min_provider_version":"9.0.0","defaults":"domainName","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.endpoint":{"id":"googleworkspace.endpoint","name":"googleworkspace.endpoint","fields":{"androidAttributes":{"name":"androidAttributes","type":"\n","is_mandatory":true,"title":"Android-only signals (work-profile, owner-profile, unknown-sources). Null on non-Android platforms","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"antivirusEnabled":{"name":"antivirusEnabled","type":"\u0004","is_mandatory":true,"title":"Whether antivirus software is enabled (parsed from `endpointVerificationAttributes.additionalSignals.av_enabled`)","desc":"Null when the device does not report antivirus state.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"antivirusInstalled":{"name":"antivirusInstalled","type":"\u0004","is_mandatory":true,"title":"Whether antivirus software is installed (parsed from `endpointVerificationAttributes.additionalSignals.av_installed`)","desc":"Null when the device does not report antivirus state (non-Endpoint-Verification platforms, missing signal).","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"assetTag":{"name":"assetTag","type":"\u0007","is_mandatory":true,"title":"Asset tag set by the administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"basebandVersion":{"name":"basebandVersion","type":"\u0007","is_mandatory":true,"title":"Baseband version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"bootloaderVersion":{"name":"bootloaderVersion","type":"\u0007","is_mandatory":true,"title":"Bootloader version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"brand":{"name":"brand","type":"\u0007","is_mandatory":true,"title":"Device brand (for example Samsung)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"buildNumber":{"name":"buildNumber","type":"\u0007","is_mandatory":true,"title":"Build number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"compromisedState":{"name":"compromisedState","type":"\u0007","is_mandatory":true,"title":"Whether the device is compromised (currently surfaces Android root status). Possible values: COMPROMISED, UNCOMPROMISED, COMPROMISED_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"createTime":{"name":"createTime","type":"\t","is_mandatory":true,"title":"When a company-owned device was imported (empty for BYOD)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceType":{"name":"deviceType","type":"\u0007","is_mandatory":true,"title":"Platform of the device. Possible values: ANDROID, IOS, GOOGLE_SYNC, WINDOWS, MAC_OS, LINUX, CHROME_OS, DEVICE_TYPE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"enabledDeveloperOptions":{"name":"enabledDeveloperOptions","type":"\u0004","is_mandatory":true,"title":"Whether developer options are enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"enabledUsbDebugging":{"name":"enabledUsbDebugging","type":"\u0004","is_mandatory":true,"title":"Whether USB debugging is enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"encryptionState":{"name":"encryptionState","type":"\u0007","is_mandatory":true,"title":"Disk encryption state. Possible values: ENCRYPTED, NOT_ENCRYPTED, UNSUPPORTED_BY_DEVICE, ENCRYPTION_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"endpointVerificationAttributes":{"name":"endpointVerificationAttributes","type":"\n","is_mandatory":true,"title":"Endpoint Verification signals — certificate inventory, browser inventory, and additional signals (hotfixes, AV, firewall, secure boot)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hostname":{"name":"hostname","type":"\u0007","is_mandatory":true,"title":"Hostname of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Stable Cloud Identity device identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"imei":{"name":"imei","type":"\u0007","is_mandatory":true,"title":"IMEI of the device if it is a GSM device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"kernelVersion":{"name":"kernelVersion","type":"\u0007","is_mandatory":true,"title":"Kernel version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSyncTime":{"name":"lastSyncTime","type":"\t","is_mandatory":true,"title":"Most recent time the device synced with Google","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"managementState":{"name":"managementState","type":"\u0007","is_mandatory":true,"title":"Enrollment state of the device. Possible values: APPROVED, BLOCKED, PENDING, UNPROVISIONED, WIPING, WIPED, MANAGEMENT_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"Device manufacturer (for example Motorola)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"meid":{"name":"meid","type":"\u0007","is_mandatory":true,"title":"MEID of the device if it is a CDMA device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model name of the device (for example Pixel 3)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Full resource name in the format devices/{device}","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"networkOperator":{"name":"networkOperator","type":"\u0007","is_mandatory":true,"title":"Mobile or network operator of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osFirewallEnabled":{"name":"osFirewallEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the OS-native firewall is enabled (parsed from `endpointVerificationAttributes.additionalSignals.is_os_native_firewall_enabled`)","desc":"Null when the device does not report firewall state.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"OS version (for example Android 8.1.0)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"otherAccounts":{"name":"otherAccounts","type":"\u0019\u0007","is_mandatory":true,"title":"Domain names for other (non-Google) accounts on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ownerType":{"name":"ownerType","type":"\u0007","is_mandatory":true,"title":"Ownership of the device. Possible values: COMPANY, BYOD, DEVICE_OWNERSHIP_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"releaseVersion":{"name":"releaseVersion","type":"\u0007","is_mandatory":true,"title":"OS release version (for example 6.0)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"secureBootEnabled":{"name":"secureBootEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Secure Boot is enabled (parsed from `endpointVerificationAttributes.additionalSignals.is_secure_boot_enabled`)","desc":"Null when the device does not report Secure Boot state.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"securityPatchTime":{"name":"securityPatchTime","type":"\t","is_mandatory":true,"title":"OS security patch level reported by the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"unifiedDeviceId":{"name":"unifiedDeviceId","type":"\u0007","is_mandatory":true,"title":"Unified device identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"user":{"name":"user","type":"\u001bgoogleworkspace.endpoint.user","title":"Registered user of a managed endpoint","desc":"Examine a single user's binding to a device — the per-user management state, password presence, and sync history reported by Google endpoint management. One device may have multiple `googleworkspace.endpoint.user` rows on BYOD hardware.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001bgoogleworkspace.endpoint.user","title":"Users registered on the device (BYOD devices may have multiple)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"wifiMacAddresses":{"name":"wifiMacAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Wi-Fi MAC addresses of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"windowsDomainName":{"name":"windowsDomainName","type":"\u0007","is_mandatory":true,"title":"Windows domain name reported by the device (empty for non-Windows or non-domain-joined devices)","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Managed endpoint device","desc":"Examine a single device enrolled in Google endpoint management or reported through endpoint verification — Chrome OS, Android, iOS, Windows, macOS, Linux, and Google Sync clients all surface through the same record. Fields cover platform identity (`deviceType`, `manufacturer`, `model`, `osVersion`), hardware identifiers (`serialNumber`, `imei`, `meid`, `wifiMacAddresses`), posture signals (`compromisedState`, `encryptionState`, `enabledDeveloperOptions`, `enabledUsbDebugging`), enrollment status (`managementState`, `ownerType`), and the set of users registered on the device through `users`. The `id` field is the stable Cloud Identity device id and selects the record — for example `googleworkspace.endpoints.where(deviceType == \"WINDOWS\" \u0026\u0026 encryptionState != \"ENCRYPTED\")`.","private":true,"min_provider_version":"13.0.13","defaults":"deviceType model serialNumber managementState","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.endpoint.user":{"id":"googleworkspace.endpoint.user","name":"googleworkspace.endpoint.user","fields":{"compromisedState":{"name":"compromisedState","type":"\u0007","is_mandatory":true,"title":"Whether the user account on the device is compromised. Possible values: COMPROMISED, NOT_COMPROMISED, COMPROMISED_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"createTime":{"name":"createTime","type":"\t","is_mandatory":true,"title":"When the user first signed in to the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firstSyncTime":{"name":"firstSyncTime","type":"\t","is_mandatory":true,"title":"Most recent time the user registered with this service","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Full resource name in the format devices/{device}/deviceUsers/{deviceUser}","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"languageCode":{"name":"languageCode","type":"\u0007","is_mandatory":true,"title":"Default locale used on the device in IETF BCP-47 format","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSyncTime":{"name":"lastSyncTime","type":"\t","is_mandatory":true,"title":"Last time the user synced with policies","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"managementState":{"name":"managementState","type":"\u0007","is_mandatory":true,"title":"Per-user enrollment state. Possible values: APPROVED, BLOCKED, PENDING_APPROVAL, WIPING, WIPED, UNENROLLED, MANAGEMENT_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"passwordState":{"name":"passwordState","type":"\u0007","is_mandatory":true,"title":"Whether the user has a password set on the device. Possible values: PASSWORD_SET, PASSWORD_NOT_SET, PASSWORD_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userAgent":{"name":"userAgent","type":"\u0007","is_mandatory":true,"title":"User-agent reported by the device for this user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userEmail":{"name":"userEmail","type":"\u0007","is_mandatory":true,"title":"Email address of the user registered on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Registered user of a managed endpoint","desc":"Examine a single user's binding to a device — the per-user management state, password presence, and sync history reported by Google endpoint management. One device may have multiple `googleworkspace.endpoint.user` rows on BYOD hardware.","private":true,"min_provider_version":"13.0.13","defaults":"userEmail managementState","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.group":{"id":"googleworkspace.group","name":"googleworkspace.group","fields":{"adminCreated":{"name":"adminCreated","type":"\u0004","is_mandatory":true,"title":"Whether this group was created by an administrator rather than a user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"aliases":{"name":"aliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of a group's alias email addresses","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Purpose of the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"directMembersCount":{"name":"directMembersCount","type":"\u0005","is_mandatory":true,"title":"The number of users that are direct members of the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"The group's email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"groupSettings":{"name":"groupSettings","type":"\u001bgoogleworkspace.group.settingsConfig","title":"Typed group settings from the Groups Settings API","desc":"Examine sharing and moderation controls used by group-access audits — who can join, post, and view membership, whether external members and web posting are allowed, and the moderation levels.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of a group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"members":{"name":"members","type":"\u0019\u001bgoogleworkspace.member","title":"Retrieve members of the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The group's display name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"nonEditableAliases":{"name":"nonEditableAliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of the group's non-editable alias email addresses outside the primary domain","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"securitySettings":{"name":"securitySettings","type":"\n","title":"Group security settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"settings":{"name":"settings","type":"\n","title":"Group settings as a raw dict","desc":"Deprecated in favor of groupSettings, which exposes the same Groups Settings API data as typed, queryable fields.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","maturity":"deprecated"},"settingsConfig":{"name":"settingsConfig","type":"\u001bgoogleworkspace.group.settingsConfig","title":"Google Workspace group settings","desc":"Examine the sharing, membership, and moderation controls configured on a group through the Groups Settings API — the surface group-access reviews rely on. `whoCanJoin`, `whoCanPostMessage`, and `whoCanViewMembership` report the access posture; `allowExternalMembers` and `allowWebPosting` flag external exposure; the `*ModerationLevel` fields report content and spam handling. Boolean-valued API fields (returned as `\"true\"`/`\"false\"` strings by Google) are exposed as typed bools.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true}},"title":"Google Workspace group","private":true,"min_provider_version":"9.0.0","defaults":"email","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.group.settingsConfig":{"id":"googleworkspace.group.settingsConfig","name":"googleworkspace.group.settingsConfig","fields":{"allowExternalMembers":{"name":"allowExternalMembers","type":"\u0004","is_mandatory":true,"title":"Whether members external to the organization can join the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"allowWebPosting":{"name":"allowWebPosting","type":"\u0004","is_mandatory":true,"title":"Whether posting from the web is allowed","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"archiveOnly":{"name":"archiveOnly","type":"\u0004","is_mandatory":true,"title":"Whether the group is in archive-only mode (no new messages delivered)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"enableCollaborativeInbox":{"name":"enableCollaborativeInbox","type":"\u0004","is_mandatory":true,"title":"Whether the collaborative inbox is enabled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"includeInGlobalAddressList":{"name":"includeInGlobalAddressList","type":"\u0004","is_mandatory":true,"title":"Whether the group is shown in the global address list","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isArchived":{"name":"isArchived","type":"\u0004","is_mandatory":true,"title":"Whether the group's message archive is enabled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"membersCanPostAsTheGroup":{"name":"membersCanPostAsTheGroup","type":"\u0004","is_mandatory":true,"title":"Whether members can post as the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"messageModerationLevel":{"name":"messageModerationLevel","type":"\u0007","is_mandatory":true,"title":"The moderation level for incoming messages","desc":"One of MODERATE_ALL_MESSAGES, MODERATE_NON_MEMBERS, MODERATE_NEW_MEMBERS, or MODERATE_NONE.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"spamModerationLevel":{"name":"spamModerationLevel","type":"\u0007","is_mandatory":true,"title":"The moderation level for spam messages","desc":"One of ALLOW, MODERATE, SILENTLY_MODERATE, or REJECT.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanContactOwner":{"name":"whoCanContactOwner","type":"\u0007","is_mandatory":true,"title":"Who can contact the group owner","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanDiscoverGroup":{"name":"whoCanDiscoverGroup","type":"\u0007","is_mandatory":true,"title":"Who can discover the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanJoin":{"name":"whoCanJoin","type":"\u0007","is_mandatory":true,"title":"Who can join the group","desc":"One of ANYONE_CAN_JOIN, ALL_IN_DOMAIN_CAN_JOIN, INVITED_CAN_JOIN, or CAN_REQUEST_TO_JOIN.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanLeaveGroup":{"name":"whoCanLeaveGroup","type":"\u0007","is_mandatory":true,"title":"Who can leave the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanModerateContent":{"name":"whoCanModerateContent","type":"\u0007","is_mandatory":true,"title":"Who can moderate content (approve, reject, remove messages)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanModerateMembers":{"name":"whoCanModerateMembers","type":"\u0007","is_mandatory":true,"title":"Who can moderate members (approve, ban, remove)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanPostMessage":{"name":"whoCanPostMessage","type":"\u0007","is_mandatory":true,"title":"Who can post messages to the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanViewGroup":{"name":"whoCanViewGroup","type":"\u0007","is_mandatory":true,"title":"Who can view the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanViewMembership":{"name":"whoCanViewMembership","type":"\u0007","is_mandatory":true,"title":"Who can view the group's membership list","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace group settings","desc":"Examine the sharing, membership, and moderation controls configured on a group through the Groups Settings API — the surface group-access reviews rely on. `whoCanJoin`, `whoCanPostMessage`, and `whoCanViewMembership` report the access posture; `allowExternalMembers` and `allowWebPosting` flag external exposure; the `*ModerationLevel` fields report content and spam handling. Boolean-valued API fields (returned as `\"true\"`/`\"false\"` strings by Google) are exposed as typed bools.","private":true,"min_provider_version":"13.1.5","defaults":"whoCanJoin whoCanPostMessage allowExternalMembers","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.member":{"id":"googleworkspace.member","name":"googleworkspace.member","fields":{"deliverySettings":{"name":"deliverySettings","type":"\u0007","is_mandatory":true,"title":"The delivery settings for the member (ALL_MAIL, DAILY, DIGEST, DISABLED, NONE)","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"The member's email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of the group member","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"The role of the member (MEMBER, OWNER, MANAGER)","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of member","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The type of group member","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"user":{"name":"user","type":"\u001bgoogleworkspace.user","title":"Linked user account","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace group member","private":true,"min_provider_version":"9.0.0","defaults":"email","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.mobileDevice":{"id":"googleworkspace.mobileDevice","name":"googleworkspace.mobileDevice","fields":{"adbStatus":{"name":"adbStatus","type":"\u0004","is_mandatory":true,"title":"Whether USB ADB (Android Debug Bridge) access is enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"brand":{"name":"brand","type":"\u0007","is_mandatory":true,"title":"The brand of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"defaultLanguage":{"name":"defaultLanguage","type":"\u0007","is_mandatory":true,"title":"The default locale used on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"developerOptionsStatus":{"name":"developerOptionsStatus","type":"\u0004","is_mandatory":true,"title":"Whether developer options are enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceCompromisedStatus":{"name":"deviceCompromisedStatus","type":"\u0007","is_mandatory":true,"title":"Whether the device is compromised. Possible values: No (not compromised), Compromised (rooted / jailbroken), Undetected","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceId":{"name":"deviceId","type":"\u0007","is_mandatory":true,"title":"The serial number-derived device ID","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"devicePasswordStatus":{"name":"devicePasswordStatus","type":"\u0007","is_mandatory":true,"title":"The device password status. Possible values: on, off, unknown","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"emails":{"name":"emails","type":"\u0019\u0007","is_mandatory":true,"title":"The list of accounts registered on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"encryptionStatus":{"name":"encryptionStatus","type":"\u0007","is_mandatory":true,"title":"The device encryption status. Possible values: disabled, enabled, none, unsupported","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firstSync":{"name":"firstSync","type":"\t","is_mandatory":true,"title":"When the device first synced policy settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hardware":{"name":"hardware","type":"\u0007","is_mandatory":true,"title":"The hardware (model) of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Stable resource identifier of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"imei":{"name":"imei","type":"\u0007","is_mandatory":true,"title":"The IMEI number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSync":{"name":"lastSync","type":"\t","is_mandatory":true,"title":"Most recent time the device synced policy settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"managedAccountIsOnOwnerProfile":{"name":"managedAccountIsOnOwnerProfile","type":"\u0004","is_mandatory":true,"title":"Whether the managed account is on the device owner profile","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"The manufacturer of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"meid":{"name":"meid","type":"\u0007","is_mandatory":true,"title":"The MEID number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"The model name of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"names":{"name":"names","type":"\u0019\u0007","is_mandatory":true,"title":"The list of owner names registered on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"networkOperator":{"name":"networkOperator","type":"\u0007","is_mandatory":true,"title":"The mobile or network operator of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"os":{"name":"os","type":"\u0007","is_mandatory":true,"title":"The operating system of the device (for example Android 8.1.0)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"otherAccountsInfo":{"name":"otherAccountsInfo","type":"\u0019\u0007","is_mandatory":true,"title":"Domain names of other (non-Google) accounts on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"privilege":{"name":"privilege","type":"\u0007","is_mandatory":true,"title":"The privilege level of the managing app on the device (for example deviceAdministrator)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"releaseVersion":{"name":"releaseVersion","type":"\u0007","is_mandatory":true,"title":"The OS release version","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"securityPatchLevel":{"name":"securityPatchLevel","type":"\u0005","is_mandatory":true,"title":"The device security patch level (epoch milliseconds; 0 when not reported)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"The serial number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"The management status of the device","desc":"Possible values include APPROVED, PENDING_APPROVAL, BLOCKED, WIPING, WIPED, ACCOUNT_WIPING, ACCOUNT_WIPED, and UNPROVISIONED.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"supportsWorkProfile":{"name":"supportsWorkProfile","type":"\u0004","is_mandatory":true,"title":"Whether the device supports a managed work profile","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The platform of the device. Possible values: ANDROID, IOS, GOOGLE_SYNC","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"unknownSourcesStatus":{"name":"unknownSourcesStatus","type":"\u0004","is_mandatory":true,"title":"Whether installation of apps from unknown sources is enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userAgent":{"name":"userAgent","type":"\u0007","is_mandatory":true,"title":"The user-agent reported by the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"wifiMacAddress":{"name":"wifiMacAddress","type":"\u0007","is_mandatory":true,"title":"The Wi-Fi MAC address of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Mobile device","desc":"Examine a single mobile device (Android, iOS, or Google Sync) managed by the organization through the Admin SDK Directory API. Carries the device posture signals mobile-hardening audits rely on: `deviceCompromisedStatus` (root / jailbreak), `encryptionStatus`, `devicePasswordStatus`, `developerOptionsStatus`, `adbStatus` (USB debugging), and `unknownSourcesStatus` (sideloading). `type` reports the platform, `status` the management lifecycle, and `securityPatchLevel` the patch timestamp. The `id` field is the device's stable resource ID and selects the record — for example `googleworkspace.mobileDevices.where(deviceCompromisedStatus == \"Compromised\")`.","private":true,"min_provider_version":"13.1.5","defaults":"model type status deviceCompromisedStatus","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.orgUnit":{"id":"googleworkspace.orgUnit","name":"googleworkspace.orgUnit","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the organizational unit","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of the organizational unit","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The organizational unit's path name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitPath":{"name":"orgUnitPath","type":"\u0007","is_mandatory":true,"title":"The full path to the organizational unit","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"parentOrgUnitPath":{"name":"parentOrgUnitPath","type":"\u0007","is_mandatory":true,"title":"The path of the parent organizational unit","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace organizational unit","private":true,"min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.policy":{"id":"googleworkspace.policy","name":"googleworkspace.policy","fields":{"group":{"name":"group","type":"\u0007","is_mandatory":true,"title":"The group the policy resolves to (empty when not group-scoped)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name of the policy in the format policies/{policy}","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnit":{"name":"orgUnit","type":"\u0007","is_mandatory":true,"title":"The organizational unit the policy resolves to (empty when customer-wide)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"query":{"name":"query","type":"\u0007","is_mandatory":true,"title":"The CEL query that defines which entities the policy applies to","desc":"Empty for customer-wide policies. The `orgUnit` and `group` fields are decoded helpers extracted from this query.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"settingType":{"name":"settingType","type":"\u0007","is_mandatory":true,"title":"The setting type identifier (for example settings/security.session_controls)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Policy type","desc":"One of `ADMIN` (admin-configured) or `SYSTEM` (Google-managed default).","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\n","is_mandatory":true,"title":"The configured value of the setting","desc":"The shape varies per `settingType`; kept as a dict because each setting carries its own schema. For example a `settings/security.session_controls` value carries `webSessionDuration`, while a `settings/security.password` value carries `allowedStrength`, `minimumLength`, and `enforceRequirementsAtLogin`.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace admin policy setting","desc":"Examine a single policy setting resolved by the Cloud Identity Policy API — the admin-configured settings that govern security posture across the organization (2-step-verification enforcement, password strength and length, session length, less-secure-app access, service on/off status, and third-party app access), surfaced without navigating the Admin Console. Each row is one resolved setting for one scope: `settingType` names the setting (for example `settings/security.password` or `settings/security.session_controls`), `value` carries the setting's configured value as a dict (the schema varies per setting type), and `orgUnit` / `group` report the organizational unit or group the setting resolves to (empty when the policy applies customer-wide). `type` distinguishes admin-configured policies (`ADMIN`) from Google's system defaults (`SYSTEM`). Select by setting type — for example `googleworkspace.policies.where(settingType == \"settings/security.session_controls\")`. Requires a super-admin-impersonating service account with the `cloud-identity.policies.readonly` scope.","private":true,"min_provider_version":"13.1.5","defaults":"settingType type orgUnit","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report":{"id":"googleworkspace.report","fields":{"activity":{"name":"activity","type":"\u001bgoogleworkspace.report.activity","title":"Google Workspace app reports activity","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"apps":{"name":"apps","type":"\u001bgoogleworkspace.report.apps","title":"Google Workspace apps reports","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"usage":{"name":"usage","type":"\u001bgoogleworkspace.report.usage","title":"Google workspace usage report","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"users":{"name":"users","type":"\u001bgoogleworkspace.report.users","title":"Google Workspace user usage reports","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true}},"is_extension":true},"googleworkspace.report.activity":{"id":"googleworkspace.report.activity","name":"googleworkspace.report.activity","fields":{"actor":{"name":"actor","type":"\n","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"events":{"name":"events","type":"\u0019\n","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ipAddress":{"name":"ipAddress","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ownerDomain":{"name":"ownerDomain","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace app reports activity","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report.apps":{"id":"googleworkspace.report.apps","name":"googleworkspace.report.apps","fields":{"admin":{"name":"admin","type":"\u0019\u001bgoogleworkspace.report.activity","title":"Retrieves a report for the Google Workspace Admin settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"drive":{"name":"drive","type":"\u0019\u001bgoogleworkspace.report.activity","title":"Retrieves a report for the settings of the Google Workspace app Drive","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace apps reports","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report.usage":{"id":"googleworkspace.report.usage","name":"googleworkspace.report.usage","fields":{"account":{"name":"account","type":"\n","title":"Account Settings as a raw dict","desc":"Deprecated in favor of the typed isDisabled, isSuperAdmin, is2svEnrolled, is2svEnforced, passwordStrength, passwordLengthCompliance, and quota fields on this resource.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","maturity":"deprecated"},"appUsage":{"name":"appUsage","type":"\n","title":"App Usage","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customerId":{"name":"customerId","type":"\u0007","is_mandatory":true,"title":"The unique identifier of the customer's account","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"date":{"name":"date","type":"\t","is_mandatory":true,"title":"Date of the report","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"driveUsedQuotaInMb":{"name":"driveUsedQuotaInMb","type":"\u0005","is_mandatory":true,"title":"Drive storage used by the account in megabytes","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"entityId":{"name":"entityId","type":"\u0007","is_mandatory":true,"title":"Google Workspace entity ID","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"gmailUsedQuotaInMb":{"name":"gmailUsedQuotaInMb","type":"\u0005","is_mandatory":true,"title":"Gmail storage used by the account in megabytes","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"is2svEnforced":{"name":"is2svEnforced","type":"\u0004","is_mandatory":true,"title":"Whether 2-step verification is enforced for the user","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"is2svEnrolled":{"name":"is2svEnrolled","type":"\u0004","is_mandatory":true,"title":"Whether the user is enrolled in 2-step verification","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isDisabled":{"name":"isDisabled","type":"\u0004","is_mandatory":true,"title":"Whether the account is disabled","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isLessSecureAppsAccessAllowed":{"name":"isLessSecureAppsAccessAllowed","type":"\u0004","is_mandatory":true,"title":"Whether access by less secure apps is allowed for the account","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isSuperAdmin":{"name":"isSuperAdmin","type":"\u0004","is_mandatory":true,"title":"Whether the account has super administrator privileges","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"numAuthorizedApps":{"name":"numAuthorizedApps","type":"\u0005","is_mandatory":true,"title":"Number of third-party applications the user has authorized","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"numSecurityKeys":{"name":"numSecurityKeys","type":"\u0005","is_mandatory":true,"title":"Number of security keys registered by the user","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"parameters":{"name":"parameters","type":"\u0019\n","is_mandatory":true,"title":"Parameter value pairs","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"passwordLengthCompliance":{"name":"passwordLengthCompliance","type":"\u0007","is_mandatory":true,"title":"Whether the account password meets the configured length requirement (for example COMPLIANT)","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"passwordStrength":{"name":"passwordStrength","type":"\u0007","is_mandatory":true,"title":"Password strength reported for the account (for example STRONG or WEAK)","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"profileId":{"name":"profileId","type":"\u0007","is_mandatory":true,"title":"Google Workspace profile identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"security":{"name":"security","type":"\n","title":"Security Settings as a raw dict","desc":"Deprecated in favor of the typed is2svEnrolled, is2svEnforced, isLessSecureAppsAccessAllowed, numAuthorizedApps, and numSecurityKeys fields on this resource.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","maturity":"deprecated"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Entity type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"usedQuotaInMb":{"name":"usedQuotaInMb","type":"\u0005","is_mandatory":true,"title":"Total storage used by the account in megabytes","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userEmail":{"name":"userEmail","type":"\u0007","is_mandatory":true,"title":"Email of user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google workspace usage report","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report.users":{"id":"googleworkspace.report.users","name":"googleworkspace.report.users","fields":{"list":{"name":"list","type":"\u0019\u001bgoogleworkspace.report.usage","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"list_type":"\u001bgoogleworkspace.report.usage","title":"Google Workspace user usage reports","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.role":{"id":"googleworkspace.role","name":"googleworkspace.role","fields":{"assignment":{"name":"assignment","type":"\u001bgoogleworkspace.role.assignment","title":"Google Workspace admin role assignment","desc":"Examine a single assignment of an admin role to a user or group — the binding that actually grants administrative privilege, as opposed to the `googleworkspace.role` definition that only describes a privilege set. `assignedTo` is the unique ID of the assignee and `assigneeType` reports whether it is a user or a group; `user()` resolves the assignee to a typed `googleworkspace.user` when it is a user, and `role()` resolves the assigned role. `scopeType` and `orgUnitId` report whether the grant is customer-wide or scoped to an organizational unit. This is the surface for \"who holds super admin\" and least-privilege reviews — for example `googleworkspace.roleAssignments.where(assigneeType == \"user\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"assignments":{"name":"assignments","type":"\u0019\u001bgoogleworkspace.role.assignment","title":"Assignments of this role to users and groups","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"A short description of the role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"ID of the role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isSuperAdminRole":{"name":"isSuperAdminRole","type":"\u0004","is_mandatory":true,"title":"Whether the role is a super admin role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isSystemRole":{"name":"isSystemRole","type":"\u0004","is_mandatory":true,"title":"Whether this is a pre-defined system role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"privilege":{"name":"privilege","type":"\u001bgoogleworkspace.role.privilege","title":"Google Workspace role privilege","desc":"Examine a single privilege granted by a Workspace admin role. The `privilegeName` is the admin API privilege string (for example `USERS_READ` or `MANAGE_DOMAIN_SETTINGS`); `serviceId` is the obfuscated ID of the service the privilege scopes to.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"privileges":{"name":"privileges","type":"\u0019\n","is_mandatory":true,"title":"The set of privileges","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"rolePrivileges":{"name":"rolePrivileges","type":"\u0019\u001bgoogleworkspace.role.privilege","is_mandatory":true,"title":"The set of privileges as typed entries with `privilegeName` and `serviceId`","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace role","private":true,"min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.role.assignment":{"id":"googleworkspace.role.assignment","name":"googleworkspace.role.assignment","fields":{"assignedTo":{"name":"assignedTo","type":"\u0007","is_mandatory":true,"title":"The unique ID of the entity the role is assigned to (user, group, or service account)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"assigneeType":{"name":"assigneeType","type":"\u0007","is_mandatory":true,"title":"The type of the assignee","desc":"One of `user` or `group`.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"condition":{"name":"condition","type":"\u0007","is_mandatory":true,"title":"The condition associated with this role assignment (empty when unconditional)","desc":"When set, the role only takes effect when the accessed resource meets the condition — currently used to scope grants to or away from security groups.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of the role assignment","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitId":{"name":"orgUnitId","type":"\u0007","is_mandatory":true,"title":"The organizational unit ID the assignment is scoped to (empty when CUSTOMER-scoped)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"role":{"name":"role","type":"\u001bgoogleworkspace.role","title":"The assigned role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"roleId":{"name":"roleId","type":"\u0005","is_mandatory":true,"title":"The ID of the assigned role (joins to googleworkspace.role.id)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scopeType":{"name":"scopeType","type":"\u0007","is_mandatory":true,"title":"The scope at which the role is granted","desc":"One of `CUSTOMER` (customer-wide) or `ORG_UNIT` (scoped to an organizational unit).","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"user":{"name":"user","type":"\u001bgoogleworkspace.user","title":"The user the role is assigned to (null when the assignee is a group)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace admin role assignment","desc":"Examine a single assignment of an admin role to a user or group — the binding that actually grants administrative privilege, as opposed to the `googleworkspace.role` definition that only describes a privilege set. `assignedTo` is the unique ID of the assignee and `assigneeType` reports whether it is a user or a group; `user()` resolves the assignee to a typed `googleworkspace.user` when it is a user, and `role()` resolves the assigned role. `scopeType` and `orgUnitId` report whether the grant is customer-wide or scoped to an organizational unit. This is the surface for \"who holds super admin\" and least-privilege reviews — for example `googleworkspace.roleAssignments.where(assigneeType == \"user\")`.","private":true,"min_provider_version":"13.1.5","defaults":"assignedTo assigneeType scopeType","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.role.privilege":{"id":"googleworkspace.role.privilege","name":"googleworkspace.role.privilege","fields":{"privilegeName":{"name":"privilegeName","type":"\u0007","is_mandatory":true,"title":"The name of the privilege","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serviceId":{"name":"serviceId","type":"\u0007","is_mandatory":true,"title":"The obfuscated ID of the service this privilege is for","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace role privilege","desc":"Examine a single privilege granted by a Workspace admin role. The `privilegeName` is the admin API privilege string (for example `USERS_READ` or `MANAGE_DOMAIN_SETTINGS`); `serviceId` is the obfuscated ID of the service the privilege scopes to.","private":true,"min_provider_version":"13.0.14","defaults":"privilegeName serviceId","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.token":{"id":"googleworkspace.token","name":"googleworkspace.token","fields":{"anonymous":{"name":"anonymous","type":"\u0004","is_mandatory":true,"title":"Whether the application is registered with Google","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"The Client ID of the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"displayText":{"name":"displayText","type":"\u0007","is_mandatory":true,"title":"The displayable name of the application token","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"nativeApp":{"name":"nativeApp","type":"\u0004","is_mandatory":true,"title":"Whether the token is issued to an installed application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"A list of granted authorization scopes the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userKey":{"name":"userKey","type":"\u0007","is_mandatory":true,"title":"The unique ID of the user that issued the token","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace token","private":true,"min_provider_version":"9.0.0","defaults":"displayText","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user":{"id":"googleworkspace.user","name":"googleworkspace.user","fields":{"address":{"name":"address","type":"\u001bgoogleworkspace.user.address","title":"Postal address attached to a Google Workspace user","desc":"Examine a single entry from the user's address list — used for data-residency, jurisdiction, and contact-information audits. `sourceIsStructured` reports whether the address was supplied as individual fields (true) or as the free-form `formatted` string (false).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"addresses":{"name":"addresses","type":"\u0019\u001bgoogleworkspace.user.address","is_mandatory":true,"title":"Postal addresses","desc":"Relevant for data-residency and compliance audits.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"adminRoles":{"name":"adminRoles","type":"\u0019\u001bgoogleworkspace.role","title":"Admin roles assigned to the user","desc":"Resolves the user's admin role assignments to their role definitions — the effective administrative privilege the user holds, including delegated admin roles that the `isAdmin` super-admin flag does not cover.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"agreedToTerms":{"name":"agreedToTerms","type":"\u0004","is_mandatory":true,"title":"Whether the user accepted the Terms of Service agreement","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"aliases":{"name":"aliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of the user's alias email addresses","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"archived":{"name":"archived","type":"\u0004","is_mandatory":true,"title":"Whether the user is archived","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"changePasswordAtNextLogin":{"name":"changePasswordAtNextLogin","type":"\u0004","is_mandatory":true,"title":"Whether the user must change their password at the next login","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"User's account creation time","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customSchemas":{"name":"customSchemas","type":"\n","is_mandatory":true,"title":"Custom org-defined schema fields keyed by schema name","desc":"Each value is a dict of `{field_name: field_value}`. Workspace admins use this to attach org-specific attributes (e.g. cost center, badge number, clearance) — audits that care about those attributes need this surface. Kept as `dict` because the inner schema varies per organization.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customerId":{"name":"customerId","type":"\u0007","is_mandatory":true,"title":"The unique ID for the customer's Google Workspace account","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deletionTime":{"name":"deletionTime","type":"\t","is_mandatory":true,"title":"User's deletion time (empty unless the account was soft-deleted)","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"email":{"name":"email","type":"\u001bgoogleworkspace.user.email","title":"Secondary email address attached to a Google Workspace user","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"emails":{"name":"emails","type":"\u0019\u001bgoogleworkspace.user.email","is_mandatory":true,"title":"Secondary email addresses","desc":"Spoofing and account-recovery audits often start here.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"externalId":{"name":"externalId","type":"\u001bgoogleworkspace.user.externalId","title":"External identifier attached to a Google Workspace user","desc":"Examine a single entry from the user's external-ID list — the employee IDs, network IDs, account IDs, and organization-defined identifiers HR and identity-management systems hang off the workspace identity.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"externalIds":{"name":"externalIds","type":"\u0019\u001bgoogleworkspace.user.externalId","is_mandatory":true,"title":"External identifiers","desc":"Holds employee IDs, network IDs, and other HR/identity-system references.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"familyName":{"name":"familyName","type":"\u0007","is_mandatory":true,"title":"The user's last name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"fullName":{"name":"fullName","type":"\u0007","is_mandatory":true,"title":"The user's full name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"givenName":{"name":"givenName","type":"\u0007","is_mandatory":true,"title":"The user's first names","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hasRecoveryConfigured":{"name":"hasRecoveryConfigured","type":"\u0004","title":"Whether the user has a recovery email or recovery phone configured","desc":"Convenience predicate over `recoveryEmail` / `recoveryPhone` — true when either account-recovery channel is set. Recovery channels are an account- takeover surface, so audits frequently assert their presence (or absence).","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hasSshKeys":{"name":"hasSshKeys","type":"\u0004","title":"Whether the user has any SSH public keys registered","desc":"Convenience predicate over `sshPublicKeys` — true when at least one key is registered. High-signal for audits scoping which identities can SSH into GCE / POSIX-linked hosts.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hashFunction":{"name":"hashFunction","type":"\u0007","is_mandatory":true,"title":"Hash format of the password property (MD5, SHA-1, crypt)","desc":"Empty unless explicitly set during user creation. Surface to spot weak password storage on imported accounts.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID for the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"includeInGlobalAddressList":{"name":"includeInGlobalAddressList","type":"\u0004","is_mandatory":true,"title":"Whether the user's profile is visible in the Google Workspace global address list","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ipWhitelisted":{"name":"ipWhitelisted","type":"\u0004","is_mandatory":true,"title":"Whether the user's IP address is allowlisted","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isAdmin":{"name":"isAdmin","type":"\u0004","is_mandatory":true,"title":"Whether the user has super administrator privileges","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isDelegatedAdmin":{"name":"isDelegatedAdmin","type":"\u0004","is_mandatory":true,"title":"Whether the a user is a delegated administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isEnforcedIn2Sv":{"name":"isEnforcedIn2Sv","type":"\u0004","is_mandatory":true,"title":"Whether 2-step verification is enforced","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isEnrolledIn2Sv":{"name":"isEnrolledIn2Sv","type":"\u0004","is_mandatory":true,"title":"Whether the user is enrolled in 2-step verification","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isGuestUser":{"name":"isGuestUser","type":"\u0004","is_mandatory":true,"title":"Whether the user is a guest user","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isMailboxSetup":{"name":"isMailboxSetup","type":"\u0004","is_mandatory":true,"title":"Whether the user's Google mailbox is created","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastLoginTime":{"name":"lastLoginTime","type":"\t","is_mandatory":true,"title":"User's last login time","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"nonEditableAliases":{"name":"nonEditableAliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of the user's non-editable alias email addresses","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitPath":{"name":"orgUnitPath","type":"\u0007","is_mandatory":true,"title":"The full path of the parent organization associated with the user","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"organization":{"name":"organization","type":"\u001bgoogleworkspace.user.organization","title":"Organization a Google Workspace user belongs to","desc":"Examine a single entry from the user's organization list — the employer, department, title, location, cost center, and full-time-equivalent fraction reported against the workspace identity. The `primary` entry is the one that drives the user's display in the directory.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"organizations":{"name":"organizations","type":"\u0019\u001bgoogleworkspace.user.organization","is_mandatory":true,"title":"Organizations the user belongs to","desc":"Maps the workspace identity to its employer or division.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"phone":{"name":"phone","type":"\u001bgoogleworkspace.user.phone","title":"Phone number attached to a Google Workspace user","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"phones":{"name":"phones","type":"\u0019\u001bgoogleworkspace.user.phone","is_mandatory":true,"title":"Phone numbers","desc":"Includes MFA/recovery fallback numbers and on-call contacts.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"posixAccount":{"name":"posixAccount","type":"\u001bgoogleworkspace.user.posixAccount","title":"POSIX account linked to a Google Workspace user","desc":"Examine a single entry from the user's POSIX-account list — the Linux / UNIX-style username, uid, gid, home directory, and shell associated with the workspace identity. Used by Linux SSO integrations (sssd, ldap) and any audit that ties Google identities to OS-level accounts.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"posixAccounts":{"name":"posixAccounts","type":"\u0019\u001bgoogleworkspace.user.posixAccount","is_mandatory":true,"title":"POSIX accounts linked to the user","desc":"Ties the workspace identity to Linux/UNIX system accounts via username, uid, gid, home directory, and shell.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primaryEmail":{"name":"primaryEmail","type":"\u0007","is_mandatory":true,"title":"The user's primary email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"recoveryEmail":{"name":"recoveryEmail","type":"\u0007","is_mandatory":true,"title":"Recovery email of the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"recoveryPhone":{"name":"recoveryPhone","type":"\u0007","is_mandatory":true,"title":"Recovery phone of the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"sshPublicKey":{"name":"sshPublicKey","type":"\u001bgoogleworkspace.user.sshPublicKey","title":"SSH public key registered against a Google Workspace user","desc":"Examine a single SSH public key — high-signal for audits asking which workspace identities can SSH into GCE / POSIX-linked hosts. `key` is the raw public key blob (OpenSSH or RFC 4716 format). `expirationTimeUsec` is the key's expiration timestamp in microseconds since the Unix epoch (empty for non-expiring keys). `fingerprint` is Google's SHA-256 fingerprint of the key.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"sshPublicKeys":{"name":"sshPublicKeys","type":"\u0019\u001bgoogleworkspace.user.sshPublicKey","is_mandatory":true,"title":"SSH public keys configured on the user","desc":"High-signal for audits that ask which workspace identities can SSH into GCE/POSIX-linked hosts.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"suspended":{"name":"suspended","type":"\u0004","is_mandatory":true,"title":"Whether the user is suspended","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"suspensionReason":{"name":"suspensionReason","type":"\u0007","is_mandatory":true,"title":"The reason a user account is suspended","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"thumbnailPhotoUrl":{"name":"thumbnailPhotoUrl","type":"\u0007","is_mandatory":true,"title":"URL of user's profile photo","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"tokens":{"name":"tokens","type":"\u0019\u001bgoogleworkspace.token","title":"Returns the user-issued tokens to 3rd party applications","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"usageReport":{"name":"usageReport","type":"\u001bgoogleworkspace.report.usage","title":"Retrieves latest report for the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace user accounts","private":true,"min_provider_version":"9.0.0","defaults":"primaryEmail","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.address":{"id":"googleworkspace.user.address","name":"googleworkspace.user.address","fields":{"country":{"name":"country","type":"\u0007","is_mandatory":true,"title":"Country name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"countryCode":{"name":"countryCode","type":"\u0007","is_mandatory":true,"title":"ISO 3166 country code","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"extendedAddress":{"name":"extendedAddress","type":"\u0007","is_mandatory":true,"title":"Extended address line (apartment, suite, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"formatted":{"name":"formatted","type":"\u0007","is_mandatory":true,"title":"Formatted single-line address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"locality":{"name":"locality","type":"\u0007","is_mandatory":true,"title":"City or locality","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"poBox":{"name":"poBox","type":"\u0007","is_mandatory":true,"title":"PO box","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"postalCode":{"name":"postalCode","type":"\u0007","is_mandatory":true,"title":"Postal or ZIP code","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"State, province, or region","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"sourceIsStructured":{"name":"sourceIsStructured","type":"\u0004","is_mandatory":true,"title":"Whether the address was supplied as structured fields (true) or only as `formatted` (false)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"streetAddress":{"name":"streetAddress","type":"\u0007","is_mandatory":true,"title":"Street address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Address type (work, home, other, custom)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Postal address attached to a Google Workspace user","desc":"Examine a single entry from the user's address list — used for data-residency, jurisdiction, and contact-information audits. `sourceIsStructured` reports whether the address was supplied as individual fields (true) or as the free-form `formatted` string (false).","private":true,"min_provider_version":"13.0.14","defaults":"formatted type primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.email":{"id":"googleworkspace.user.email","name":"googleworkspace.user.email","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary email","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Email type","desc":"One of `work`, `home`, `other`, or `custom`. When `custom`, `customType` carries the label.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Secondary email address attached to a Google Workspace user","private":true,"min_provider_version":"13.0.14","defaults":"address type primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.externalId":{"id":"googleworkspace.user.externalId","name":"googleworkspace.user.externalId","fields":{"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"External ID type","desc":"One of `account`, `customer`, `login_id`, `network`, `organization`, or `custom`. When `custom`, `customType` carries the label.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"External ID value","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"External identifier attached to a Google Workspace user","desc":"Examine a single entry from the user's external-ID list — the employee IDs, network IDs, account IDs, and organization-defined identifiers HR and identity-management systems hang off the workspace identity.","private":true,"min_provider_version":"13.0.14","defaults":"value type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.organization":{"id":"googleworkspace.user.organization","name":"googleworkspace.user.organization","fields":{"costCenter":{"name":"costCenter","type":"\u0007","is_mandatory":true,"title":"Cost-center identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"department":{"name":"department","type":"\u0007","is_mandatory":true,"title":"Department within the organization","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"domain":{"name":"domain","type":"\u0007","is_mandatory":true,"title":"Email domain associated with the organization","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"fullTimeEquivalent":{"name":"fullTimeEquivalent","type":"\u0005","is_mandatory":true,"title":"Full-time-equivalent fraction in basis points (e.g. 10000 = 100% FTE)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Office or branch location","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Organization name (typically the employer)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary organization","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"symbol":{"name":"symbol","type":"\u0007","is_mandatory":true,"title":"Stock or organization-defined symbol","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Job title","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Organization type","desc":"One of `work`, `school`, `domain_only`, `unknown`, or `custom`. When `custom`, `customType` carries the label.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Organization a Google Workspace user belongs to","desc":"Examine a single entry from the user's organization list — the employer, department, title, location, cost center, and full-time-equivalent fraction reported against the workspace identity. The `primary` entry is the one that drives the user's display in the directory.","private":true,"min_provider_version":"13.0.14","defaults":"name title department primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.phone":{"id":"googleworkspace.user.phone","name":"googleworkspace.user.phone","fields":{"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary phone","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Phone type (work, home, mobile, main, pager, callback, fax variants, custom)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Phone number (free-form; consumers should not assume E.164)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Phone number attached to a Google Workspace user","private":true,"min_provider_version":"13.0.14","defaults":"value type primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.posixAccount":{"id":"googleworkspace.user.posixAccount","name":"googleworkspace.user.posixAccount","fields":{"accountId":{"name":"accountId","type":"\u0007","is_mandatory":true,"title":"Account identifier within the system","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"gid":{"name":"gid","type":"\u0005","is_mandatory":true,"title":"POSIX group id","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"homeDirectory":{"name":"homeDirectory","type":"\u0007","is_mandatory":true,"title":"Home directory path","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"operatingSystemType":{"name":"operatingSystemType","type":"\u0007","is_mandatory":true,"title":"Operating-system type of the account (LINUX, WINDOWS, UNSPECIFIED)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary POSIX account","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"shell":{"name":"shell","type":"\u0007","is_mandatory":true,"title":"Login shell","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"systemId":{"name":"systemId","type":"\u0007","is_mandatory":true,"title":"System identifier the POSIX account is scoped to","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"POSIX user id","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"POSIX username","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"POSIX account linked to a Google Workspace user","desc":"Examine a single entry from the user's POSIX-account list — the Linux / UNIX-style username, uid, gid, home directory, and shell associated with the workspace identity. Used by Linux SSO integrations (sssd, ldap) and any audit that ties Google identities to OS-level accounts.","private":true,"min_provider_version":"13.0.14","defaults":"username uid systemId primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.sshPublicKey":{"id":"googleworkspace.user.sshPublicKey","name":"googleworkspace.user.sshPublicKey","fields":{"expirationTimeUsec":{"name":"expirationTimeUsec","type":"\u0007","is_mandatory":true,"title":"Expiration timestamp in microseconds since the Unix epoch (empty for non-expiring keys)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"fingerprint":{"name":"fingerprint","type":"\u0007","is_mandatory":true,"title":"SHA-256 fingerprint of the key","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Public key material","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"SSH public key registered against a Google Workspace user","desc":"Examine a single SSH public key — high-signal for audits asking which workspace identities can SSH into GCE / POSIX-linked hosts. `key` is the raw public key blob (OpenSSH or RFC 4716 format). `expirationTimeUsec` is the key's expiration timestamp in microseconds since the Unix epoch (empty for non-expiring keys). `fingerprint` is Google's SHA-256 fingerprint of the key.","private":true,"min_provider_version":"13.0.14","defaults":"fingerprint expirationTimeUsec","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}}}