{"resources":{"googleworkspace":{"id":"googleworkspace","name":"googleworkspace","fields":{"calendar":{"name":"calendar","type":"\u001bgoogleworkspace.calendar","title":"Google Workspace calendar","desc":"Calendar in the organization's Calendar service, covering its visibility settings, time zone, location, and the effective access role the authenticated user holds on it. The acl field lists the sharing rules that govern who can read or write the calendar, which is where over-broad or public calendar sharing shows up.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"calendars":{"name":"calendars","type":"\u0019\u001bgoogleworkspace.calendar","title":"User calendars","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"chromeOsDevice":{"name":"chromeOsDevice","type":"\u001bgoogleworkspace.chromeOsDevice","title":"Chrome OS device","desc":"Single Chrome OS device enrolled in the organization, retrieved from the Admin SDK Directory API. Complements `googleworkspace.endpoint` with the ChromeOS-specific posture signals auditors need: `bootMode` distinguishes Verified Boot from developer mode, `autoUpdateExpiration` reports when the device stops receiving Chrome OS security updates (AUE), `osVersion`, `platformVersion`, and `firmwareVersion` capture patch level, and `status` reports the enrollment lifecycle. The `id` field is the device's stable directory ID and selects the record, for example `googleworkspace.chromeOsDevices.where(bootMode != \"Verified\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"chromeOsDevices":{"name":"chromeOsDevices","type":"\u0019\u001bgoogleworkspace.chromeOsDevice","title":"Chrome OS devices enrolled in the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"connectedApp":{"name":"connectedApp","type":"\u001bgoogleworkspace.connectedApp","title":"Google Workspace third-party connected app","desc":"A third-party OAuth application that users in the domain have granted access to, aggregated from the tokens they issued. Connected apps are central to OAuth-access reviews: each one shows the authorization scopes it holds across the organization through scopes, which users granted it through users, and the individual grants through tokens. Use it to spot over-privileged or unsanctioned applications with access to Workspace data. Apps are grouped by clientId, the OAuth client identifier shared by all of a given application's tokens.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"connectedApps":{"name":"connectedApps","type":"\u0019\u001bgoogleworkspace.connectedApp","title":"Third-party OAuth connected apps","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"domain":{"name":"domain","type":"\u001bgoogleworkspace.domain","title":"Google Workspace domain","desc":"Domain name registered to a Google Workspace customer, including whether it is the account's primary domain and whether ownership has been verified. Unverified domains cannot reliably send or receive mail for the organization and often indicate incomplete or abandoned setup, so reviewing verified and isPrimary across the account confirms that only intended, verified domains are attached to the tenant.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"domains":{"name":"domains","type":"\u0019\u001bgoogleworkspace.domain","title":"Registered domains","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"endpoint":{"name":"endpoint","type":"\u001bgoogleworkspace.endpoint","title":"Managed endpoint device","desc":"Device enrolled in Google endpoint management or reported through endpoint verification. Chrome OS, Android, iOS, Windows, macOS, Linux, and Google Sync clients all surface through the same record. Fields cover platform identity (`deviceType`, `manufacturer`, `model`, `osVersion`), hardware identifiers (`serialNumber`, `imei`, `meid`, `wifiMacAddresses`), posture signals (`compromisedState`, `encryptionState`, `enabledDeveloperOptions`, `enabledUsbDebugging`), enrollment status (`managementState`, `ownerType`), and the set of users registered on the device through `users`. The `id` field is the stable Cloud Identity device id and selects the record, for example `googleworkspace.endpoints.where(deviceType == \"WINDOWS\" \u0026\u0026 encryptionState != \"ENCRYPTED\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"endpoints":{"name":"endpoints","type":"\u0019\u001bgoogleworkspace.endpoint","title":"Managed endpoints reported by Google endpoint management and endpoint verification","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"group":{"name":"group","type":"\u001bgoogleworkspace.group","title":"Google Workspace group","desc":"Distribution list or membership group in a Google Workspace account, used for email delivery, shared-resource access, and permission grants. Group membership reviews rely on directMembersCount and the members collection to enumerate who belongs; aliases and nonEditableAliases reveal alternate addresses; adminCreated distinguishes administrator-managed groups from user-created ones. Sharing and moderation posture (who can join, post, and view membership, whether external members are allowed) lives in groupSettings.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"groups":{"name":"groups","type":"\u0019\u001bgoogleworkspace.group","title":"Groups for collaboration and access control","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"member":{"name":"member","type":"\u001bgoogleworkspace.member","title":"Google Workspace group member","desc":"Membership record linking an account to a Google Workspace group, carrying the member's email, role (MEMBER, MANAGER, or OWNER), and type (USER, GROUP, EXTERNAL, or CUSTOMER). Use it to audit group composition, ownership, and the presence of external or non-user members.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"mobileDevice":{"name":"mobileDevice","type":"\u001bgoogleworkspace.mobileDevice","title":"Mobile device","desc":"Single mobile device (Android, iOS, or Google Sync) managed by the organization through the Admin SDK Directory API. Carries the device posture signals mobile-hardening audits rely on: `deviceCompromisedStatus` (root / jailbreak), `encryptionStatus`, `devicePasswordStatus`, `developerOptionsStatus`, `adbStatus` (USB debugging), and `unknownSourcesStatus` (sideloading). `type` reports the platform, `status` the management lifecycle, and `securityPatchLevel` the patch timestamp. The `id` field is the device's stable resource ID and selects the record, for example `googleworkspace.mobileDevices.where(deviceCompromisedStatus == \"Compromised\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"mobileDevices":{"name":"mobileDevices","type":"\u0019\u001bgoogleworkspace.mobileDevice","title":"Mobile devices (Android, iOS, Google Sync) managed by the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnit":{"name":"orgUnit","type":"\u001bgoogleworkspace.orgUnit","title":"Google Workspace organizational unit","desc":"Organizational unit in the directory hierarchy, the boundary at which service settings and administrative policies are applied to the users it contains. Auditing org units matters because a setting inherited or overridden at an org unit governs every account beneath it. Units are identified by their path: `orgUnitPath` gives the full path from the root (for example `/Sales/West`), while `parentOrgUnitPath` locates the unit within the hierarchy.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"orgUnits":{"name":"orgUnits","type":"\u0019\u001bgoogleworkspace.orgUnit","title":"Organizational units in the account hierarchy","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"policies":{"name":"policies","type":"\u0019\u001bgoogleworkspace.policy","title":"Admin-configured policy settings resolved across the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"policy":{"name":"policy","type":"\u001bgoogleworkspace.policy","title":"Google Workspace admin policy setting","desc":"Single policy setting resolved by the Cloud Identity Policy API, one of the admin-configured settings that govern security posture across the organization (2-step-verification enforcement, password strength and length, session length, less-secure-app access, service on/off status, and third-party app access), surfaced without navigating the Admin Console. Each row is one resolved setting for one scope. `settingType` names the setting (for example `settings/security.password` or `settings/security.session_controls`), `value` carries the setting's configured value as a dict (the schema varies per setting type), and `orgUnit` / `group` report the organizational unit or group the setting resolves to (empty when the policy applies customer-wide). `type` distinguishes admin-configured policies (`ADMIN`) from Google's system defaults (`SYSTEM`). Select by setting type, for example `googleworkspace.policies.where(settingType == \"settings/security.session_controls\")`. Requires a super-admin-impersonating service account with the `cloud-identity.policies.readonly` scope.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"report":{"name":"report","type":"\u001bgoogleworkspace.report","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"role":{"name":"role","type":"\u001bgoogleworkspace.role","title":"Google Workspace admin role","desc":"Definition of an administrative role in a Google Workspace account, describing the set of privileges the role grants rather than who holds it. `isSystemRole` marks the built-in roles Google provides and `isSuperAdminRole` flags the role that carries full account control, so this is the surface for reviewing which roles confer elevated administrative access. Privileges are available both as a raw `privileges` dict list and as typed `rolePrivileges` entries, and the grants that bind a role to a user or group are exposed through `assignments`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"roleAssignments":{"name":"roleAssignments","type":"\u0019\u001bgoogleworkspace.role.assignment","title":"Admin role assignments to users and groups across the organization","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"roles":{"name":"roles","type":"\u0019\u001bgoogleworkspace.role","title":"Admin roles and privileges","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"superAdmins":{"name":"superAdmins","type":"\u0019\u001bgoogleworkspace.user","title":"Users with super administrator privileges","desc":"Convenience filter over `users` for least-privilege reviews — equivalent to `users.where(isAdmin)`.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"suspendedUsers":{"name":"suspendedUsers","type":"\u0019\u001bgoogleworkspace.user","title":"Suspended user accounts","desc":"Convenience filter over `users` — equivalent to `users.where(suspended)`.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"token":{"name":"token","type":"\u001bgoogleworkspace.token","title":"OAuth token granted by a user to a third-party application","desc":"A single OAuth authorization that a user has issued to a third-party application through their Google Workspace account. Reviewing tokens surfaces which external applications can act on a user's behalf and what data they can reach, since the granted scopes define the access. The clientId and displayText identify the application, and scopes lists the permissions the user consented to.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"user":{"name":"user","type":"\u001bgoogleworkspace.user","title":"Google Workspace user accounts","desc":"User accounts in the Google Workspace directory, exposing identity attributes, suspension and archival state, administrator flags, 2-step verification enrollment, account-recovery channels, linked POSIX and SSH credentials, and org-defined custom schema fields. A central surface for account-security audits: admin privilege, MFA enrollment, dormant or suspended accounts, and recovery-channel configuration.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001bgoogleworkspace.user","title":"All user accounts","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"usersWithout2sv":{"name":"usersWithout2sv","type":"\u0019\u001bgoogleworkspace.user","title":"Active users not enrolled in 2-step verification","desc":"Convenience filter over `users` for MFA-coverage audits — active (non-suspended, non-archived) users where `isEnrolledIn2Sv` is false.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace organization","desc":"Root of a Google Workspace customer organization: the organizational- unit hierarchy, every user account with its tokens and OAuth scopes, the groups (with members and security settings), the registered domains and their verification state, the admin roles and their privileges, the third-party OAuth-connected apps with aggregated scopes, the user calendars together with their ACL rules, the managed endpoints (Chrome OS, Android, iOS, Windows, macOS, Linux) reported through Google endpoint management and endpoint verification, and the admin-configured policy settings resolved across the organization through the Cloud Identity Policy API. This is the surface auditors use for identity hygiene, sharing reviews, 2-step-verification enforcement checks, device-compliance audits, and domain-wide security-posture review.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.calendar":{"id":"googleworkspace.calendar","name":"googleworkspace.calendar","fields":{"accessRole":{"name":"accessRole","type":"\u0007","is_mandatory":true,"title":"The effective access role for the authenticated user (freeBusyReader, reader, writer, owner)","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"acl":{"name":"acl","type":"\u0019\u001bgoogleworkspace.calendar.aclRule","title":"ACL rules for the calendar","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"aclRule":{"name":"aclRule","type":"\u001bgoogleworkspace.calendar.aclRule","title":"Google Workspace calendar ACL rule","desc":"Access-control entry on a calendar that pairs a principal with the level of access it grants. Reviewing these rules surfaces calendars shared with an entire domain or made public, and principals that hold writer or owner access they should not have. The role field carries the granted access level and scope identifies who it applies to.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"deleted":{"name":"deleted","type":"\u0004","is_mandatory":true,"title":"Whether the calendar list entry has been removed from the list","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the calendar","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hidden":{"name":"hidden","type":"\u0004","is_mandatory":true,"title":"Whether the calendar has been hidden from the list","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Identifier of the calendar","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Geographic location of the calendar as free-form text","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether the calendar is the primary calendar for the authenticated user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"selected":{"name":"selected","type":"\u0004","is_mandatory":true,"title":"Whether the calendar content shows up in the calendar UI","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Title of the calendar","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"summaryOverride":{"name":"summaryOverride","type":"\u0007","is_mandatory":true,"title":"The summary that the authenticated user has set for this calendar","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"timeZone":{"name":"timeZone","type":"\u0007","is_mandatory":true,"title":"The time zone of the calendar","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace calendar","desc":"Calendar in the organization's Calendar service, covering its visibility settings, time zone, location, and the effective access role the authenticated user holds on it. The acl field lists the sharing rules that govern who can read or write the calendar, which is where over-broad or public calendar sharing shows up.","private":true,"min_provider_version":"11.0.17","defaults":"summary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.calendar.aclRule":{"id":"googleworkspace.calendar.aclRule","name":"googleworkspace.calendar.aclRule","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Identifier of the ACL rule","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"The role assigned to the scope. Possible values are none, freeBusyReader, reader, writer, owner","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scope":{"name":"scope","type":"\u001bgoogleworkspace.calendar.aclRule.scope","is_mandatory":true,"title":"The extent to which calendar access is granted by this ACL rule","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace calendar ACL rule","desc":"Access-control entry on a calendar that pairs a principal with the level of access it grants. Reviewing these rules surfaces calendars shared with an entire domain or made public, and principals that hold writer or owner access they should not have. The role field carries the granted access level and scope identifies who it applies to.","private":true,"min_provider_version":"11.0.17","defaults":"role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.calendar.aclRule.scope":{"id":"googleworkspace.calendar.aclRule.scope","name":"googleworkspace.calendar.aclRule.scope","fields":{"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The type of the scope. Possible values are default, user, group, domain","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"The email address of the user or group, or the name of a domain depending on the scope type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace calendar ACL rule scope","private":true,"min_provider_version":"11.0.17","defaults":"type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.chromeOsDevice":{"id":"googleworkspace.chromeOsDevice","name":"googleworkspace.chromeOsDevice","fields":{"annotatedAssetId":{"name":"annotatedAssetId","type":"\u0007","is_mandatory":true,"title":"Asset tag of the device set by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"annotatedLocation":{"name":"annotatedLocation","type":"\u0007","is_mandatory":true,"title":"Annotated location of the device set by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"annotatedUser":{"name":"annotatedUser","type":"\u0007","is_mandatory":true,"title":"Annotated user assigned to the device by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"autoUpdateExpiration":{"name":"autoUpdateExpiration","type":"\t","is_mandatory":true,"title":"Timestamp after which the device stops receiving Chrome OS updates and support (auto-update expiration)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"bootMode":{"name":"bootMode","type":"\u0007","is_mandatory":true,"title":"Boot mode of the device","desc":"`Verified` indicates Verified Boot is active; `Dev` indicates developer mode, which disables OS verification and is a hardening concern.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deprovisionReason":{"name":"deprovisionReason","type":"\u0007","is_mandatory":true,"title":"The reason the device was deprovisioned (empty unless deprovisioned)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceLicenseType":{"name":"deviceLicenseType","type":"\u0007","is_mandatory":true,"title":"Device license type","desc":"One of deviceLicenseTypeUnspecified, enterprise, enterpriseUpgrade, educationUpgrade, education, kioskUpgrade, enterpriseUpgradePerpetual, enterpriseUpgradeFixedTerm, educationUpgradePerpetual, or educationUpgradeFixedTerm.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firmwareVersion":{"name":"firmwareVersion","type":"\u0007","is_mandatory":true,"title":"Firmware version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firstEnrollmentTime":{"name":"firstEnrollmentTime","type":"\t","is_mandatory":true,"title":"When the device was first enrolled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Stable directory device identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastEnrollmentTime":{"name":"lastEnrollmentTime","type":"\t","is_mandatory":true,"title":"Most recent time the device was enrolled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSync":{"name":"lastSync","type":"\t","is_mandatory":true,"title":"Most recent time the device synced device-policy settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"macAddress":{"name":"macAddress","type":"\u0007","is_mandatory":true,"title":"The MAC address of the device on the wireless network interface","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model name of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"notes":{"name":"notes","type":"\u0007","is_mandatory":true,"title":"Notes added by an administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitPath":{"name":"orgUnitPath","type":"\u0007","is_mandatory":true,"title":"The full path of the organizational unit the device is in","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"OS version running on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osVersionCompliance":{"name":"osVersionCompliance","type":"\u0007","is_mandatory":true,"title":"Device policy compliance status of the OS version","desc":"One of complianceUnspecified, compliant, pending, or notCompliant.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"platformVersion":{"name":"platformVersion","type":"\u0007","is_mandatory":true,"title":"Platform version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the device. Possible values: ACTIVE, DEPROVISIONED, DISABLED, INACTIVE, RETURN_APPROVED, RETURN_REQUESTED, SHIPPED, UNKNOWN","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Chrome OS device","desc":"Single Chrome OS device enrolled in the organization, retrieved from the Admin SDK Directory API. Complements `googleworkspace.endpoint` with the ChromeOS-specific posture signals auditors need: `bootMode` distinguishes Verified Boot from developer mode, `autoUpdateExpiration` reports when the device stops receiving Chrome OS security updates (AUE), `osVersion`, `platformVersion`, and `firmwareVersion` capture patch level, and `status` reports the enrollment lifecycle. The `id` field is the device's stable directory ID and selects the record, for example `googleworkspace.chromeOsDevices.where(bootMode != \"Verified\")`.","private":true,"min_provider_version":"13.1.5","defaults":"serialNumber model osVersion status","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.connectedApp":{"id":"googleworkspace.connectedApp","name":"googleworkspace.connectedApp","fields":{"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"The unique ID of the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The application's name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"Aggregated scopes across all tokens issued to the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"tokens":{"name":"tokens","type":"\u0019\u001bgoogleworkspace.token","is_mandatory":true,"title":"Returns the user-issued tokens to 3rd party applications","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"users":{"name":"users","type":"\u0019\u001bgoogleworkspace.user","is_mandatory":true,"title":"Google Workspace User that use the 3rd-party application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace third-party connected app","desc":"A third-party OAuth application that users in the domain have granted access to, aggregated from the tokens they issued. Connected apps are central to OAuth-access reviews: each one shows the authorization scopes it holds across the organization through scopes, which users granted it through users, and the individual grants through tokens. Use it to spot over-privileged or unsanctioned applications with access to Workspace data. Apps are grouped by clientId, the OAuth client identifier shared by all of a given application's tokens.","private":true,"min_provider_version":"9.0.0","defaults":"name clientId","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.domain":{"id":"googleworkspace.domain","name":"googleworkspace.domain","fields":{"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"Creation time of the domain","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"domainName":{"name":"domainName","type":"\u0007","is_mandatory":true,"title":"The domain name of the customer","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isPrimary":{"name":"isPrimary","type":"\u0004","is_mandatory":true,"title":"Whether the domain is a primary domain","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"verified":{"name":"verified","type":"\u0004","is_mandatory":true,"title":"Whether the domain is verified","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace domain","desc":"Domain name registered to a Google Workspace customer, including whether it is the account's primary domain and whether ownership has been verified. Unverified domains cannot reliably send or receive mail for the organization and often indicate incomplete or abandoned setup, so reviewing verified and isPrimary across the account confirms that only intended, verified domains are attached to the tenant.","private":true,"min_provider_version":"9.0.0","defaults":"domainName","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.endpoint":{"id":"googleworkspace.endpoint","name":"googleworkspace.endpoint","fields":{"androidAttributes":{"name":"androidAttributes","type":"\n","is_mandatory":true,"title":"Android-only device signals","desc":"Null on non-Android platforms. Keys: `ctsProfileMatch` (device passes Android CTS compliance), `enabledUnknownSources` (installs from unknown sources allowed), `hasPotentiallyHarmfulApps`, `ownerProfileAccount` (on an owner/primary profile), `ownershipPrivilege` (one of OWNERSHIP_PRIVILEGE_UNSPECIFIED, DEVICE_ADMINISTRATOR, PROFILE_OWNER, DEVICE_OWNER), `supportsWorkProfile`, `verifiedBoot` (Android verified boot status is GREEN), and `verifyAppsEnabled` (Google Play Protect Verify Apps is enabled).","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"antivirusEnabled":{"name":"antivirusEnabled","type":"\u0004","is_mandatory":true,"title":"Whether antivirus software is enabled (parsed from `endpointVerificationAttributes.additionalSignals.av_enabled`)","desc":"Null when the device does not report antivirus state.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"antivirusInstalled":{"name":"antivirusInstalled","type":"\u0004","is_mandatory":true,"title":"Whether antivirus software is installed (parsed from `endpointVerificationAttributes.additionalSignals.av_installed`)","desc":"Null when the device does not report antivirus state (non-Endpoint-Verification platforms, missing signal).","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"assetTag":{"name":"assetTag","type":"\u0007","is_mandatory":true,"title":"Asset tag set by the administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"basebandVersion":{"name":"basebandVersion","type":"\u0007","is_mandatory":true,"title":"Baseband version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"bootloaderVersion":{"name":"bootloaderVersion","type":"\u0007","is_mandatory":true,"title":"Bootloader version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"brand":{"name":"brand","type":"\u0007","is_mandatory":true,"title":"Device brand (for example Samsung)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"buildNumber":{"name":"buildNumber","type":"\u0007","is_mandatory":true,"title":"Build number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"compromisedState":{"name":"compromisedState","type":"\u0007","is_mandatory":true,"title":"Whether the device is compromised (currently surfaces Android root status). Possible values: COMPROMISED, UNCOMPROMISED, COMPROMISED_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"createTime":{"name":"createTime","type":"\t","is_mandatory":true,"title":"When a company-owned device was imported (empty for BYOD)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceType":{"name":"deviceType","type":"\u0007","is_mandatory":true,"title":"Platform of the device. Possible values: ANDROID, IOS, GOOGLE_SYNC, WINDOWS, MAC_OS, LINUX, CHROME_OS, DEVICE_TYPE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"enabledDeveloperOptions":{"name":"enabledDeveloperOptions","type":"\u0004","is_mandatory":true,"title":"Whether developer options are enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"enabledUsbDebugging":{"name":"enabledUsbDebugging","type":"\u0004","is_mandatory":true,"title":"Whether USB debugging is enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"encryptionState":{"name":"encryptionState","type":"\u0007","is_mandatory":true,"title":"Disk encryption state. Possible values: ENCRYPTED, NOT_ENCRYPTED, UNSUPPORTED_BY_DEVICE, ENCRYPTION_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"endpointVerificationAttributes":{"name":"endpointVerificationAttributes","type":"\n","is_mandatory":true,"title":"Endpoint Verification signals","desc":"Keys: `additionalSignals` (device signals including hotfixes, av_installed, av_enabled, windows_domain_name, is_os_native_firewall_enabled, and is_secure_boot_enabled), `browserAttributes` (per-browser-profile inventory), and `certificateAttributes` (certificate inventory). The `antivirusInstalled`, `antivirusEnabled`, `osFirewallEnabled`, `secureBootEnabled`, and `windowsDomainName` fields decode individual values out of `additionalSignals`.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hostname":{"name":"hostname","type":"\u0007","is_mandatory":true,"title":"Hostname of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Stable Cloud Identity device identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"imei":{"name":"imei","type":"\u0007","is_mandatory":true,"title":"IMEI of the device if it is a GSM device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"kernelVersion":{"name":"kernelVersion","type":"\u0007","is_mandatory":true,"title":"Kernel version of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSyncTime":{"name":"lastSyncTime","type":"\t","is_mandatory":true,"title":"Most recent time the device synced with Google","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"managementState":{"name":"managementState","type":"\u0007","is_mandatory":true,"title":"Enrollment state of the device. Possible values: APPROVED, BLOCKED, PENDING, UNPROVISIONED, WIPING, WIPED, MANAGEMENT_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"Device manufacturer (for example Motorola)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"meid":{"name":"meid","type":"\u0007","is_mandatory":true,"title":"MEID of the device if it is a CDMA device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model name of the device (for example Pixel 3)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Full resource name in the format devices/{device}","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"networkOperator":{"name":"networkOperator","type":"\u0007","is_mandatory":true,"title":"Mobile or network operator of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osFirewallEnabled":{"name":"osFirewallEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the OS-native firewall is enabled (parsed from `endpointVerificationAttributes.additionalSignals.is_os_native_firewall_enabled`)","desc":"Null when the device does not report firewall state.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"OS version (for example Android 8.1.0)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"otherAccounts":{"name":"otherAccounts","type":"\u0019\u0007","is_mandatory":true,"title":"Domain names for other (non-Google) accounts on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ownerType":{"name":"ownerType","type":"\u0007","is_mandatory":true,"title":"Ownership of the device. Possible values: COMPANY, BYOD, DEVICE_OWNERSHIP_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"releaseVersion":{"name":"releaseVersion","type":"\u0007","is_mandatory":true,"title":"OS release version (for example 6.0)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"secureBootEnabled":{"name":"secureBootEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Secure Boot is enabled (parsed from `endpointVerificationAttributes.additionalSignals.is_secure_boot_enabled`)","desc":"Null when the device does not report Secure Boot state.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"securityPatchTime":{"name":"securityPatchTime","type":"\t","is_mandatory":true,"title":"OS security patch level reported by the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"unifiedDeviceId":{"name":"unifiedDeviceId","type":"\u0007","is_mandatory":true,"title":"Unified device identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"user":{"name":"user","type":"\u001bgoogleworkspace.endpoint.user","title":"Registered user of a managed endpoint","desc":"User's binding to a device: the per-user management state, password presence, and sync history reported by Google endpoint management. One device may have multiple `googleworkspace.endpoint.user` rows on BYOD hardware.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001bgoogleworkspace.endpoint.user","title":"Users registered on the device (BYOD devices may have multiple)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"wifiMacAddresses":{"name":"wifiMacAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Wi-Fi MAC addresses of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"windowsDomainName":{"name":"windowsDomainName","type":"\u0007","is_mandatory":true,"title":"Windows domain name reported by the device (empty for non-Windows or non-domain-joined devices)","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Managed endpoint device","desc":"Device enrolled in Google endpoint management or reported through endpoint verification. Chrome OS, Android, iOS, Windows, macOS, Linux, and Google Sync clients all surface through the same record. Fields cover platform identity (`deviceType`, `manufacturer`, `model`, `osVersion`), hardware identifiers (`serialNumber`, `imei`, `meid`, `wifiMacAddresses`), posture signals (`compromisedState`, `encryptionState`, `enabledDeveloperOptions`, `enabledUsbDebugging`), enrollment status (`managementState`, `ownerType`), and the set of users registered on the device through `users`. The `id` field is the stable Cloud Identity device id and selects the record, for example `googleworkspace.endpoints.where(deviceType == \"WINDOWS\" \u0026\u0026 encryptionState != \"ENCRYPTED\")`.","private":true,"min_provider_version":"13.0.13","defaults":"deviceType model serialNumber managementState","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.endpoint.user":{"id":"googleworkspace.endpoint.user","name":"googleworkspace.endpoint.user","fields":{"compromisedState":{"name":"compromisedState","type":"\u0007","is_mandatory":true,"title":"Whether the user account on the device is compromised. Possible values: COMPROMISED, NOT_COMPROMISED, COMPROMISED_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"createTime":{"name":"createTime","type":"\t","is_mandatory":true,"title":"When the user first signed in to the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firstSyncTime":{"name":"firstSyncTime","type":"\t","is_mandatory":true,"title":"Most recent time the user registered with this service","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Full resource name in the format devices/{device}/deviceUsers/{deviceUser}","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"languageCode":{"name":"languageCode","type":"\u0007","is_mandatory":true,"title":"Default locale used on the device in IETF BCP-47 format","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSyncTime":{"name":"lastSyncTime","type":"\t","is_mandatory":true,"title":"Last time the user synced with policies","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"managementState":{"name":"managementState","type":"\u0007","is_mandatory":true,"title":"Per-user enrollment state. Possible values: APPROVED, BLOCKED, PENDING_APPROVAL, WIPING, WIPED, UNENROLLED, MANAGEMENT_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"passwordState":{"name":"passwordState","type":"\u0007","is_mandatory":true,"title":"Whether the user has a password set on the device. Possible values: PASSWORD_SET, PASSWORD_NOT_SET, PASSWORD_STATE_UNSPECIFIED","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userAgent":{"name":"userAgent","type":"\u0007","is_mandatory":true,"title":"User-agent reported by the device for this user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userEmail":{"name":"userEmail","type":"\u0007","is_mandatory":true,"title":"Email address of the user registered on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Registered user of a managed endpoint","desc":"User's binding to a device: the per-user management state, password presence, and sync history reported by Google endpoint management. One device may have multiple `googleworkspace.endpoint.user` rows on BYOD hardware.","private":true,"min_provider_version":"13.0.13","defaults":"userEmail managementState","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.group":{"id":"googleworkspace.group","name":"googleworkspace.group","fields":{"adminCreated":{"name":"adminCreated","type":"\u0004","is_mandatory":true,"title":"Whether this group was created by an administrator rather than a user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"aliases":{"name":"aliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of a group's alias email addresses","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Purpose of the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"directMembersCount":{"name":"directMembersCount","type":"\u0005","is_mandatory":true,"title":"The number of users that are direct members of the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"The group's email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"groupSettings":{"name":"groupSettings","type":"\u001bgoogleworkspace.group.settingsConfig","title":"Typed group settings from the Groups Settings API","desc":"Sharing and moderation controls used by group-access audits: who can join, post, and view membership, whether external members and web posting are allowed, and the moderation levels.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of a group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"members":{"name":"members","type":"\u0019\u001bgoogleworkspace.member","title":"Retrieve members of the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The group's display name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"nonEditableAliases":{"name":"nonEditableAliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of the group's non-editable alias email addresses outside the primary domain","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"securitySettings":{"name":"securitySettings","type":"\n","title":"Group security settings","desc":"Membership restrictions from the Cloud Identity Groups API. The `memberRestriction` key holds a `query` (a CEL expression limiting which member types may belong, for example `member.type == 1 || member.type == 3` for users or groups only) and an `evaluation` object reporting the restriction's current state. The `name` key is the resource path `groups/{group_id}/securitySettings`.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"settings":{"name":"settings","type":"\n","title":"Group settings as a raw dict","desc":"Deprecated in favor of groupSettings, which exposes the same Groups Settings API data as typed, queryable fields.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","maturity":"deprecated"},"settingsConfig":{"name":"settingsConfig","type":"\u001bgoogleworkspace.group.settingsConfig","title":"Google Workspace group settings","desc":"Sharing, membership, and moderation controls configured on a group through the Groups Settings API, the surface group-access reviews rely on. `whoCanJoin`, `whoCanPostMessage`, and `whoCanViewMembership` report the access posture; `allowExternalMembers` and `allowWebPosting` flag external exposure; the `*ModerationLevel` fields report content and spam handling. Boolean-valued API fields (returned as `\"true\"`/`\"false\"` strings by Google) are exposed as booleans.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true}},"title":"Google Workspace group","desc":"Distribution list or membership group in a Google Workspace account, used for email delivery, shared-resource access, and permission grants. Group membership reviews rely on directMembersCount and the members collection to enumerate who belongs; aliases and nonEditableAliases reveal alternate addresses; adminCreated distinguishes administrator-managed groups from user-created ones. Sharing and moderation posture (who can join, post, and view membership, whether external members are allowed) lives in groupSettings.","private":true,"min_provider_version":"9.0.0","defaults":"email","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.group.settingsConfig":{"id":"googleworkspace.group.settingsConfig","name":"googleworkspace.group.settingsConfig","fields":{"allowExternalMembers":{"name":"allowExternalMembers","type":"\u0004","is_mandatory":true,"title":"Whether members external to the organization can join the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"allowWebPosting":{"name":"allowWebPosting","type":"\u0004","is_mandatory":true,"title":"Whether posting from the web is allowed","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"archiveOnly":{"name":"archiveOnly","type":"\u0004","is_mandatory":true,"title":"Whether the group is in archive-only mode (no new messages delivered)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"enableCollaborativeInbox":{"name":"enableCollaborativeInbox","type":"\u0004","is_mandatory":true,"title":"Whether the collaborative inbox is enabled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"includeInGlobalAddressList":{"name":"includeInGlobalAddressList","type":"\u0004","is_mandatory":true,"title":"Whether the group is shown in the global address list","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isArchived":{"name":"isArchived","type":"\u0004","is_mandatory":true,"title":"Whether the group's message archive is enabled","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"membersCanPostAsTheGroup":{"name":"membersCanPostAsTheGroup","type":"\u0004","is_mandatory":true,"title":"Whether members can post as the group","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"messageModerationLevel":{"name":"messageModerationLevel","type":"\u0007","is_mandatory":true,"title":"The moderation level for incoming messages","desc":"One of MODERATE_ALL_MESSAGES, MODERATE_NON_MEMBERS, MODERATE_NEW_MEMBERS, or MODERATE_NONE.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"spamModerationLevel":{"name":"spamModerationLevel","type":"\u0007","is_mandatory":true,"title":"The moderation level for spam messages","desc":"One of ALLOW, MODERATE, SILENTLY_MODERATE, or REJECT.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanContactOwner":{"name":"whoCanContactOwner","type":"\u0007","is_mandatory":true,"title":"Who can contact the group owner","desc":"One of ALL_IN_DOMAIN_CAN_CONTACT, ALL_MANAGERS_CAN_CONTACT, ALL_MEMBERS_CAN_CONTACT, ALL_OWNERS_CAN_CONTACT, or ANYONE_CAN_CONTACT.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanDiscoverGroup":{"name":"whoCanDiscoverGroup","type":"\u0007","is_mandatory":true,"title":"Who can discover the group","desc":"One of ANYONE_CAN_DISCOVER, ALL_IN_DOMAIN_CAN_DISCOVER, or ALL_MEMBERS_CAN_DISCOVER.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanJoin":{"name":"whoCanJoin","type":"\u0007","is_mandatory":true,"title":"Who can join the group","desc":"One of ANYONE_CAN_JOIN, ALL_IN_DOMAIN_CAN_JOIN, INVITED_CAN_JOIN, or CAN_REQUEST_TO_JOIN.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanLeaveGroup":{"name":"whoCanLeaveGroup","type":"\u0007","is_mandatory":true,"title":"Who can leave the group","desc":"One of ALL_MANAGERS_CAN_LEAVE, ALL_MEMBERS_CAN_LEAVE, or NONE_CAN_LEAVE.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanModerateContent":{"name":"whoCanModerateContent","type":"\u0007","is_mandatory":true,"title":"Who can moderate content (approve, reject, remove messages)","desc":"One of ALL_MEMBERS, OWNERS_AND_MANAGERS, OWNERS_ONLY, or NONE.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanModerateMembers":{"name":"whoCanModerateMembers","type":"\u0007","is_mandatory":true,"title":"Who can moderate members (approve, ban, remove)","desc":"One of ALL_MEMBERS, OWNERS_AND_MANAGERS, OWNERS_ONLY, or NONE.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanPostMessage":{"name":"whoCanPostMessage","type":"\u0007","is_mandatory":true,"title":"Who can post messages to the group","desc":"One of NONE_CAN_POST, ALL_MANAGERS_CAN_POST, ALL_MEMBERS_CAN_POST, ALL_OWNERS_CAN_POST, ALL_IN_DOMAIN_CAN_POST, or ANYONE_CAN_POST.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanViewGroup":{"name":"whoCanViewGroup","type":"\u0007","is_mandatory":true,"title":"Who can view the group's messages","desc":"One of ANYONE_CAN_VIEW, ALL_IN_DOMAIN_CAN_VIEW, ALL_MEMBERS_CAN_VIEW, or ALL_MANAGERS_CAN_VIEW.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"whoCanViewMembership":{"name":"whoCanViewMembership","type":"\u0007","is_mandatory":true,"title":"Who can view the group's membership list","desc":"One of ALL_IN_DOMAIN_CAN_VIEW, ALL_MEMBERS_CAN_VIEW, or ALL_MANAGERS_CAN_VIEW.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace group settings","desc":"Sharing, membership, and moderation controls configured on a group through the Groups Settings API, the surface group-access reviews rely on. `whoCanJoin`, `whoCanPostMessage`, and `whoCanViewMembership` report the access posture; `allowExternalMembers` and `allowWebPosting` flag external exposure; the `*ModerationLevel` fields report content and spam handling. Boolean-valued API fields (returned as `\"true\"`/`\"false\"` strings by Google) are exposed as booleans.","private":true,"min_provider_version":"13.1.5","defaults":"whoCanJoin whoCanPostMessage allowExternalMembers","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.member":{"id":"googleworkspace.member","name":"googleworkspace.member","fields":{"deliverySettings":{"name":"deliverySettings","type":"\u0007","is_mandatory":true,"title":"The delivery settings for the member (ALL_MAIL, DAILY, DIGEST, DISABLED, NONE)","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"The member's email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of the group member","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"The role of the member (MEMBER, OWNER, MANAGER)","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of member","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Membership type","desc":"One of USER, GROUP, EXTERNAL, or CUSTOMER. Only members whose type is USER resolve to a directory user account through the user field.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"user":{"name":"user","type":"\u001bgoogleworkspace.user","title":"Linked user account","desc":"The directory user account backing this membership. Resolves only when type is USER, and is null for GROUP, EXTERNAL, and CUSTOMER memberships.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace group member","desc":"Membership record linking an account to a Google Workspace group, carrying the member's email, role (MEMBER, MANAGER, or OWNER), and type (USER, GROUP, EXTERNAL, or CUSTOMER). Use it to audit group composition, ownership, and the presence of external or non-user members.","private":true,"min_provider_version":"9.0.0","defaults":"email","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.mobileDevice":{"id":"googleworkspace.mobileDevice","name":"googleworkspace.mobileDevice","fields":{"adbStatus":{"name":"adbStatus","type":"\u0004","is_mandatory":true,"title":"Whether USB ADB (Android Debug Bridge) access is enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"brand":{"name":"brand","type":"\u0007","is_mandatory":true,"title":"The brand of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"defaultLanguage":{"name":"defaultLanguage","type":"\u0007","is_mandatory":true,"title":"The default locale used on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"developerOptionsStatus":{"name":"developerOptionsStatus","type":"\u0004","is_mandatory":true,"title":"Whether developer options are enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceCompromisedStatus":{"name":"deviceCompromisedStatus","type":"\u0007","is_mandatory":true,"title":"Whether the device is compromised. Possible values: No (not compromised), Compromised (rooted / jailbroken), Undetected","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceId":{"name":"deviceId","type":"\u0007","is_mandatory":true,"title":"The serial number-derived device ID","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"devicePasswordStatus":{"name":"devicePasswordStatus","type":"\u0007","is_mandatory":true,"title":"The device password status. Possible values: on, off, unknown","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"emails":{"name":"emails","type":"\u0019\u0007","is_mandatory":true,"title":"The list of accounts registered on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"encryptionStatus":{"name":"encryptionStatus","type":"\u0007","is_mandatory":true,"title":"The device encryption status. Possible values: disabled, enabled, none, unsupported","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"firstSync":{"name":"firstSync","type":"\t","is_mandatory":true,"title":"When the device first synced policy settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hardware":{"name":"hardware","type":"\u0007","is_mandatory":true,"title":"The hardware (model) of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Stable resource identifier of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"imei":{"name":"imei","type":"\u0007","is_mandatory":true,"title":"The IMEI number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastSync":{"name":"lastSync","type":"\t","is_mandatory":true,"title":"Most recent time the device synced policy settings","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"managedAccountIsOnOwnerProfile":{"name":"managedAccountIsOnOwnerProfile","type":"\u0004","is_mandatory":true,"title":"Whether the managed account is on the device owner profile","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"The manufacturer of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"meid":{"name":"meid","type":"\u0007","is_mandatory":true,"title":"The MEID number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"The model name of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"names":{"name":"names","type":"\u0019\u0007","is_mandatory":true,"title":"The list of owner names registered on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"networkOperator":{"name":"networkOperator","type":"\u0007","is_mandatory":true,"title":"The mobile or network operator of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"os":{"name":"os","type":"\u0007","is_mandatory":true,"title":"The operating system of the device (for example Android 8.1.0)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"otherAccountsInfo":{"name":"otherAccountsInfo","type":"\u0019\u0007","is_mandatory":true,"title":"Domain names of other (non-Google) accounts on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"privilege":{"name":"privilege","type":"\u0007","is_mandatory":true,"title":"The privilege level of the managing app on the device (for example deviceAdministrator)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"releaseVersion":{"name":"releaseVersion","type":"\u0007","is_mandatory":true,"title":"The OS release version","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"securityPatchLevel":{"name":"securityPatchLevel","type":"\u0005","is_mandatory":true,"title":"The device security patch level (epoch milliseconds; 0 when not reported)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"The serial number of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"The management status of the device","desc":"Possible values include APPROVED, PENDING_APPROVAL, BLOCKED, WIPING, WIPED, ACCOUNT_WIPING, ACCOUNT_WIPED, and UNPROVISIONED.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"supportsWorkProfile":{"name":"supportsWorkProfile","type":"\u0004","is_mandatory":true,"title":"Whether the device supports a managed work profile","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The platform of the device. Possible values: ANDROID, IOS, GOOGLE_SYNC","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"unknownSourcesStatus":{"name":"unknownSourcesStatus","type":"\u0004","is_mandatory":true,"title":"Whether installation of apps from unknown sources is enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userAgent":{"name":"userAgent","type":"\u0007","is_mandatory":true,"title":"The user-agent reported by the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"wifiMacAddress":{"name":"wifiMacAddress","type":"\u0007","is_mandatory":true,"title":"The Wi-Fi MAC address of the device","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Mobile device","desc":"Single mobile device (Android, iOS, or Google Sync) managed by the organization through the Admin SDK Directory API. Carries the device posture signals mobile-hardening audits rely on: `deviceCompromisedStatus` (root / jailbreak), `encryptionStatus`, `devicePasswordStatus`, `developerOptionsStatus`, `adbStatus` (USB debugging), and `unknownSourcesStatus` (sideloading). `type` reports the platform, `status` the management lifecycle, and `securityPatchLevel` the patch timestamp. The `id` field is the device's stable resource ID and selects the record, for example `googleworkspace.mobileDevices.where(deviceCompromisedStatus == \"Compromised\")`.","private":true,"min_provider_version":"13.1.5","defaults":"model type status deviceCompromisedStatus","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.orgUnit":{"id":"googleworkspace.orgUnit","name":"googleworkspace.orgUnit","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the organizational unit","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of the organizational unit","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The organizational unit's path name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitPath":{"name":"orgUnitPath","type":"\u0007","is_mandatory":true,"title":"The full path to the organizational unit","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"parentOrgUnitPath":{"name":"parentOrgUnitPath","type":"\u0007","is_mandatory":true,"title":"The path of the parent organizational unit","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace organizational unit","desc":"Organizational unit in the directory hierarchy, the boundary at which service settings and administrative policies are applied to the users it contains. Auditing org units matters because a setting inherited or overridden at an org unit governs every account beneath it. Units are identified by their path: `orgUnitPath` gives the full path from the root (for example `/Sales/West`), while `parentOrgUnitPath` locates the unit within the hierarchy.","private":true,"min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.policy":{"id":"googleworkspace.policy","name":"googleworkspace.policy","fields":{"group":{"name":"group","type":"\u0007","is_mandatory":true,"title":"The group the policy resolves to (empty when not group-scoped)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name of the policy in the format policies/{policy}","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnit":{"name":"orgUnit","type":"\u0007","is_mandatory":true,"title":"The organizational unit the policy resolves to (empty when customer-wide)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"query":{"name":"query","type":"\u0007","is_mandatory":true,"title":"The CEL query that defines which entities the policy applies to","desc":"Empty for customer-wide policies. The `orgUnit` and `group` fields report the resolved scope separately from this CEL expression.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"settingType":{"name":"settingType","type":"\u0007","is_mandatory":true,"title":"The setting type identifier (for example settings/security.session_controls)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Policy type","desc":"One of `ADMIN` (admin-configured) or `SYSTEM` (Google-managed default).","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\n","is_mandatory":true,"title":"The configured value of the setting","desc":"The shape varies per `settingType`; kept as a dict because each setting carries its own schema. For example a `settings/security.session_controls` value carries `webSessionDuration`, while a `settings/security.password` value carries `allowedStrength`, `minimumLength`, and `enforceRequirementsAtLogin`.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace admin policy setting","desc":"Single policy setting resolved by the Cloud Identity Policy API, one of the admin-configured settings that govern security posture across the organization (2-step-verification enforcement, password strength and length, session length, less-secure-app access, service on/off status, and third-party app access), surfaced without navigating the Admin Console. Each row is one resolved setting for one scope. `settingType` names the setting (for example `settings/security.password` or `settings/security.session_controls`), `value` carries the setting's configured value as a dict (the schema varies per setting type), and `orgUnit` / `group` report the organizational unit or group the setting resolves to (empty when the policy applies customer-wide). `type` distinguishes admin-configured policies (`ADMIN`) from Google's system defaults (`SYSTEM`). Select by setting type, for example `googleworkspace.policies.where(settingType == \"settings/security.session_controls\")`. Requires a super-admin-impersonating service account with the `cloud-identity.policies.readonly` scope.","private":true,"min_provider_version":"13.1.5","defaults":"settingType type orgUnit","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report":{"id":"googleworkspace.report","fields":{"activity":{"name":"activity","type":"\u001bgoogleworkspace.report.activity","title":"Google Workspace app reports activity","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"apps":{"name":"apps","type":"\u001bgoogleworkspace.report.apps","title":"Google Workspace apps reports","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"usage":{"name":"usage","type":"\u001bgoogleworkspace.report.usage","title":"Google workspace usage report","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"users":{"name":"users","type":"\u001bgoogleworkspace.report.users","title":"Google Workspace user usage reports","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true}},"is_extension":true},"googleworkspace.report.activity":{"id":"googleworkspace.report.activity","name":"googleworkspace.report.activity","fields":{"actor":{"name":"actor","type":"\n","is_mandatory":true,"title":"Actor who performed the activity","desc":"Keys: `callerType` (type of actor, for example USER, APPLICATION, or KEY), `email` (primary email of the actor, absent when none is associated), `profileId` (unique Google Workspace profile ID of the actor), `key` (present only when `callerType` is KEY, the OAuth consumer key or robot account identifier), `applicationInfo` (details of the application when an app performed the action), and `agentAttributionInfo` (present when an AI agent was the actor, carrying `agentId`, `agentName`, `agentType`, and an `agentOwner` object whose `email` names the account answerable for the agent). See `isAgenticAction` for the hoisted agent flag.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceId":{"name":"deviceId","type":"\u0007","is_mandatory":true,"title":"Identifier of the device the actor used","desc":"Empty for activities the API does not attribute to a device. This is a Reports API device identifier and does not necessarily match the Cloud Identity device id on `googleworkspace.endpoint`.","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceOsVersion":{"name":"deviceOsVersion","type":"\u0007","is_mandatory":true,"title":"Operating system version reported by the actor's device","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deviceType":{"name":"deviceType","type":"\u0007","is_mandatory":true,"title":"Type of device the actor used","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"events":{"name":"events","type":"\u0019\n","is_mandatory":true,"title":"Events recorded within the activity","desc":"Each entry has `name` (the specific event name, for example CREATE_USER), `type` (the Google Workspace service or feature category the event belongs to), `parameters` (a list of name/value pairs describing the event), `resourceIds` (resource IDs associated with the event), and `status` (event status, absent for events that do not report one).","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ipAddress":{"name":"ipAddress","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isAgenticAction":{"name":"isAgenticAction","type":"\u0004","is_mandatory":true,"title":"Whether an AI agent performed the activity","desc":"True when the action was taken by an agent rather than directly by the named user, which separates agent-driven changes from human ones when reviewing an audit trail. The agent's identity and the account answerable for it are in the `actor` dict under `agentAttributionInfo`.","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ownerDomain":{"name":"ownerDomain","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace app reports activity","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report.apps":{"id":"googleworkspace.report.apps","name":"googleworkspace.report.apps","fields":{"admin":{"name":"admin","type":"\u0019\u001bgoogleworkspace.report.activity","title":"Admin console audit activity events for the customer","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"drive":{"name":"drive","type":"\u0019\u001bgoogleworkspace.report.activity","title":"Drive audit activity events for the customer","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace apps reports","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report.usage":{"id":"googleworkspace.report.usage","name":"googleworkspace.report.usage","fields":{"account":{"name":"account","type":"\n","title":"Account Settings as a raw dict","desc":"Deprecated in favor of the typed isDisabled, isSuperAdmin, is2svEnrolled, is2svEnforced, passwordStrength, passwordLengthCompliance, and quota fields on this resource.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","maturity":"deprecated"},"appUsage":{"name":"appUsage","type":"\n","title":"Per-application usage counters for the account","desc":"Keys include `gmailUsedQuotaInMb`, `driveUsedQuotaInMb`, `gPlusPhotosUsedQuotaInMb`, and `usedQuotaInMb` for storage; `numEmailSent`, `numEmailsReceived`, and `numEmailsExchanged` for Gmail volume; `numOwnedItemsEdited` and `numOwnedItemsViewed` for Docs activity; and the timestamps `lastImapTime`, `lastWebmailTime`, and `driveLastActiveUsageTime`.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customerId":{"name":"customerId","type":"\u0007","is_mandatory":true,"title":"The unique identifier of the customer's account","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"date":{"name":"date","type":"\t","is_mandatory":true,"title":"Date of the report","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"driveUsedQuotaInMb":{"name":"driveUsedQuotaInMb","type":"\u0005","is_mandatory":true,"title":"Drive storage used by the account in megabytes","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"entityId":{"name":"entityId","type":"\u0007","is_mandatory":true,"title":"Google Workspace entity ID","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"gmailUsedQuotaInMb":{"name":"gmailUsedQuotaInMb","type":"\u0005","is_mandatory":true,"title":"Gmail storage used by the account in megabytes","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"is2svEnforced":{"name":"is2svEnforced","type":"\u0004","is_mandatory":true,"title":"Whether 2-step verification is enforced for the user","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"is2svEnrolled":{"name":"is2svEnrolled","type":"\u0004","is_mandatory":true,"title":"Whether the user is enrolled in 2-step verification","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isDisabled":{"name":"isDisabled","type":"\u0004","is_mandatory":true,"title":"Whether the account is disabled","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isLessSecureAppsAccessAllowed":{"name":"isLessSecureAppsAccessAllowed","type":"\u0004","is_mandatory":true,"title":"Whether access by less secure apps is allowed for the account","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isSuperAdmin":{"name":"isSuperAdmin","type":"\u0004","is_mandatory":true,"title":"Whether the account has super administrator privileges","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"numAuthorizedApps":{"name":"numAuthorizedApps","type":"\u0005","is_mandatory":true,"title":"Number of third-party applications the user has authorized","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"numSecurityKeys":{"name":"numSecurityKeys","type":"\u0005","is_mandatory":true,"title":"Number of security keys registered by the user","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"parameters":{"name":"parameters","type":"\u0019\n","is_mandatory":true,"title":"Raw usage metric parameters","desc":"Each entry has `name` (the metric name, for example accounts:is_disabled or gmail:num_emails_sent) and one of `boolValue`, `intValue`, `stringValue`, or `datetimeValue` carrying the reading. The common security and quota metrics are also promoted to the typed fields on this resource (isDisabled, is2svEnrolled, usedQuotaInMb, and so on).","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"passwordLengthCompliance":{"name":"passwordLengthCompliance","type":"\u0007","is_mandatory":true,"title":"Whether the account password meets the configured length requirement (for example COMPLIANT)","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"passwordStrength":{"name":"passwordStrength","type":"\u0007","is_mandatory":true,"title":"Password strength reported for the account (for example STRONG or WEAK)","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"profileId":{"name":"profileId","type":"\u0007","is_mandatory":true,"title":"Google Workspace profile identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"security":{"name":"security","type":"\n","title":"Security Settings as a raw dict","desc":"Deprecated in favor of the typed is2svEnrolled, is2svEnforced, isLessSecureAppsAccessAllowed, numAuthorizedApps, and numSecurityKeys fields on this resource.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","maturity":"deprecated"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Entity type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"usedQuotaInMb":{"name":"usedQuotaInMb","type":"\u0005","is_mandatory":true,"title":"Total storage used by the account in megabytes","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userEmail":{"name":"userEmail","type":"\u0007","is_mandatory":true,"title":"Email of user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google workspace usage report","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.report.users":{"id":"googleworkspace.report.users","name":"googleworkspace.report.users","fields":{"list":{"name":"list","type":"\u0019\u001bgoogleworkspace.report.usage","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"list_type":"\u001bgoogleworkspace.report.usage","title":"Google Workspace user usage reports","private":true,"min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.role":{"id":"googleworkspace.role","name":"googleworkspace.role","fields":{"assignment":{"name":"assignment","type":"\u001bgoogleworkspace.role.assignment","title":"Google Workspace admin role assignment","desc":"Single assignment of an admin role to a user or group, the binding that actually grants administrative privilege, as opposed to the `googleworkspace.role` definition that only describes a privilege set. `assignedTo` is the unique ID of the assignee and `assigneeType` reports whether it is a user or a group; `user` resolves the assignee to a `googleworkspace.user` when it is a user, and `role` resolves the assigned role. `scopeType` and `orgUnitId` report whether the grant is customer-wide or scoped to an organizational unit. This is the surface for \"who holds super admin\" and least-privilege reviews, for example `googleworkspace.roleAssignments.where(assigneeType == \"user\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"assignments":{"name":"assignments","type":"\u0019\u001bgoogleworkspace.role.assignment","title":"Assignments of this role to users and groups","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"A short description of the role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"ID of the role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isSuperAdminRole":{"name":"isSuperAdminRole","type":"\u0004","is_mandatory":true,"title":"Whether the role is a super admin role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isSystemRole":{"name":"isSystemRole","type":"\u0004","is_mandatory":true,"title":"Whether this is a pre-defined system role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"privilege":{"name":"privilege","type":"\u001bgoogleworkspace.role.privilege","title":"Google Workspace role privilege","desc":"Single privilege granted by a Workspace admin role. The `privilegeName` is the admin API privilege string (for example `USERS_READ` or `MANAGE_DOMAIN_SETTINGS`); `serviceId` is the obfuscated ID of the service the privilege scopes to.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"privileges":{"name":"privileges","type":"\u0019\n","is_mandatory":true,"title":"Privileges granted by the role","desc":"Each entry is a dict with `privilegeName` (the admin API privilege string, for example `USERS_READ`) and `serviceId` (the obfuscated ID of the service the privilege scopes to). See `rolePrivileges` for the same data as typed entries.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"rolePrivileges":{"name":"rolePrivileges","type":"\u0019\u001bgoogleworkspace.role.privilege","is_mandatory":true,"title":"The set of privileges as typed entries with `privilegeName` and `serviceId`","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace admin role","desc":"Definition of an administrative role in a Google Workspace account, describing the set of privileges the role grants rather than who holds it. `isSystemRole` marks the built-in roles Google provides and `isSuperAdminRole` flags the role that carries full account control, so this is the surface for reviewing which roles confer elevated administrative access. Privileges are available both as a raw `privileges` dict list and as typed `rolePrivileges` entries, and the grants that bind a role to a user or group are exposed through `assignments`.","private":true,"min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.role.assignment":{"id":"googleworkspace.role.assignment","name":"googleworkspace.role.assignment","fields":{"assignedTo":{"name":"assignedTo","type":"\u0007","is_mandatory":true,"title":"The unique ID of the entity the role is assigned to (user, group, or service account)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"assigneeType":{"name":"assigneeType","type":"\u0007","is_mandatory":true,"title":"The type of the assignee","desc":"One of `user` or `group`.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"condition":{"name":"condition","type":"\u0007","is_mandatory":true,"title":"The condition associated with this role assignment (empty when unconditional)","desc":"When set, the role only takes effect when the accessed resource meets the condition — currently used to scope grants to or away from security groups.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID of the role assignment","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitId":{"name":"orgUnitId","type":"\u0007","is_mandatory":true,"title":"The organizational unit ID the assignment is scoped to (empty when CUSTOMER-scoped)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"role":{"name":"role","type":"\u001bgoogleworkspace.role","title":"The assigned role","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"roleId":{"name":"roleId","type":"\u0005","is_mandatory":true,"title":"The ID of the assigned role (joins to googleworkspace.role.id)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scopeType":{"name":"scopeType","type":"\u0007","is_mandatory":true,"title":"The scope at which the role is granted","desc":"One of `CUSTOMER` (customer-wide) or `ORG_UNIT` (scoped to an organizational unit).","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"user":{"name":"user","type":"\u001bgoogleworkspace.user","title":"The user the role is assigned to (null when the assignee is a group)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace admin role assignment","desc":"Single assignment of an admin role to a user or group, the binding that actually grants administrative privilege, as opposed to the `googleworkspace.role` definition that only describes a privilege set. `assignedTo` is the unique ID of the assignee and `assigneeType` reports whether it is a user or a group; `user` resolves the assignee to a `googleworkspace.user` when it is a user, and `role` resolves the assigned role. `scopeType` and `orgUnitId` report whether the grant is customer-wide or scoped to an organizational unit. This is the surface for \"who holds super admin\" and least-privilege reviews, for example `googleworkspace.roleAssignments.where(assigneeType == \"user\")`.","private":true,"min_provider_version":"13.1.5","defaults":"assignedTo assigneeType scopeType","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.role.privilege":{"id":"googleworkspace.role.privilege","name":"googleworkspace.role.privilege","fields":{"privilegeName":{"name":"privilegeName","type":"\u0007","is_mandatory":true,"title":"The name of the privilege","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"serviceId":{"name":"serviceId","type":"\u0007","is_mandatory":true,"title":"The obfuscated ID of the service this privilege is for","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace role privilege","desc":"Single privilege granted by a Workspace admin role. The `privilegeName` is the admin API privilege string (for example `USERS_READ` or `MANAGE_DOMAIN_SETTINGS`); `serviceId` is the obfuscated ID of the service the privilege scopes to.","private":true,"min_provider_version":"13.0.14","defaults":"privilegeName serviceId","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.token":{"id":"googleworkspace.token","name":"googleworkspace.token","fields":{"anonymous":{"name":"anonymous","type":"\u0004","is_mandatory":true,"title":"Whether the application has an anonymous Client ID (true when the application is not registered with Google)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"The Client ID of the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"displayText":{"name":"displayText","type":"\u0007","is_mandatory":true,"title":"The displayable name of the application token","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"nativeApp":{"name":"nativeApp","type":"\u0004","is_mandatory":true,"title":"Whether the token is issued to an installed application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"Authorization scopes the user granted to the application","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"userKey":{"name":"userKey","type":"\u0007","is_mandatory":true,"title":"The unique ID of the user that issued the token","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"OAuth token granted by a user to a third-party application","desc":"A single OAuth authorization that a user has issued to a third-party application through their Google Workspace account. Reviewing tokens surfaces which external applications can act on a user's behalf and what data they can reach, since the granted scopes define the access. The clientId and displayText identify the application, and scopes lists the permissions the user consented to.","private":true,"min_provider_version":"9.0.0","defaults":"displayText","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user":{"id":"googleworkspace.user","name":"googleworkspace.user","fields":{"address":{"name":"address","type":"\u001bgoogleworkspace.user.address","title":"Postal address attached to a Google Workspace user","desc":"Single postal address on the workspace identity, used for data-residency, jurisdiction, and contact-information audits. `sourceIsStructured` reports whether the address was supplied as individual fields (true) or as the free-form `formatted` string (false).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"addresses":{"name":"addresses","type":"\u0019\u001bgoogleworkspace.user.address","is_mandatory":true,"title":"Postal addresses","desc":"Relevant for data-residency and compliance audits.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"adminRoles":{"name":"adminRoles","type":"\u0019\u001bgoogleworkspace.role","title":"Admin roles assigned to the user","desc":"Resolves the user's admin role assignments to their role definitions: the effective administrative privilege the user holds, including delegated admin roles that the `isAdmin` super-admin flag does not cover.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"agreedToTerms":{"name":"agreedToTerms","type":"\u0004","is_mandatory":true,"title":"Whether the user accepted the Terms of Service agreement","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"aliases":{"name":"aliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of the user's alias email addresses","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"archived":{"name":"archived","type":"\u0004","is_mandatory":true,"title":"Whether the user is archived","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"changePasswordAtNextLogin":{"name":"changePasswordAtNextLogin","type":"\u0004","is_mandatory":true,"title":"Whether the user must change their password at the next login","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"User's account creation time","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customSchemas":{"name":"customSchemas","type":"\n","is_mandatory":true,"title":"Custom org-defined schema fields keyed by schema name","desc":"Each value is a dict of `{field_name: field_value}`. Workspace admins use this to attach org-specific attributes (e.g. cost center, badge number, clearance). Audits that care about those attributes need this surface. The inner schema varies per organization, so values stay as a dict.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customerId":{"name":"customerId","type":"\u0007","is_mandatory":true,"title":"The unique ID for the customer's Google Workspace account","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"deletionTime":{"name":"deletionTime","type":"\t","is_mandatory":true,"title":"User's deletion time (empty unless the account was soft-deleted)","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"email":{"name":"email","type":"\u001bgoogleworkspace.user.email","title":"Secondary email address attached to a Google Workspace user","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"emails":{"name":"emails","type":"\u0019\u001bgoogleworkspace.user.email","is_mandatory":true,"title":"Secondary email addresses","desc":"Spoofing and account-recovery audits often start here.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"externalId":{"name":"externalId","type":"\u001bgoogleworkspace.user.externalId","title":"External identifier attached to a Google Workspace user","desc":"Single external identifier on the workspace identity: the employee IDs, network IDs, account IDs, and organization-defined identifiers that HR and identity-management systems hang off the account. The `type` field classifies the identifier and `value` carries it.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"externalIds":{"name":"externalIds","type":"\u0019\u001bgoogleworkspace.user.externalId","is_mandatory":true,"title":"External identifiers","desc":"Holds employee IDs, network IDs, and other HR/identity-system references.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"familyName":{"name":"familyName","type":"\u0007","is_mandatory":true,"title":"The user's last name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"fullName":{"name":"fullName","type":"\u0007","is_mandatory":true,"title":"The user's full name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"givenName":{"name":"givenName","type":"\u0007","is_mandatory":true,"title":"The user's first names","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hasRecoveryConfigured":{"name":"hasRecoveryConfigured","type":"\u0004","title":"Whether the user has a recovery email or recovery phone configured","desc":"Convenience predicate over `recoveryEmail` / `recoveryPhone`, true when either account-recovery channel is set. Recovery channels are an account- takeover surface, so audits frequently assert their presence (or absence).","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hasSshKeys":{"name":"hasSshKeys","type":"\u0004","title":"Whether the user has any SSH public keys registered","desc":"Convenience predicate over `sshPublicKeys`, true when at least one key is registered. High-signal for audits scoping which identities can SSH into GCE / POSIX-linked hosts.","min_provider_version":"13.1.5","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"hashFunction":{"name":"hashFunction","type":"\u0007","is_mandatory":true,"title":"Hash format of the password property (MD5, SHA-1, crypt)","desc":"Empty unless explicitly set during user creation. Surface to spot weak password storage on imported accounts.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique ID for the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"includeInGlobalAddressList":{"name":"includeInGlobalAddressList","type":"\u0004","is_mandatory":true,"title":"Whether the user's profile is visible in the Google Workspace global address list","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"ipWhitelisted":{"name":"ipWhitelisted","type":"\u0004","is_mandatory":true,"title":"Whether the user's IP address is allowlisted","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isAdmin":{"name":"isAdmin","type":"\u0004","is_mandatory":true,"title":"Whether the user has super administrator privileges","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isDelegatedAdmin":{"name":"isDelegatedAdmin","type":"\u0004","is_mandatory":true,"title":"Whether the a user is a delegated administrator","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isEnforcedIn2Sv":{"name":"isEnforcedIn2Sv","type":"\u0004","is_mandatory":true,"title":"Whether 2-step verification is enforced","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isEnrolledIn2Sv":{"name":"isEnrolledIn2Sv","type":"\u0004","is_mandatory":true,"title":"Whether the user is enrolled in 2-step verification","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isGuestUser":{"name":"isGuestUser","type":"\u0004","is_mandatory":true,"title":"Whether the user is a guest user","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"isMailboxSetup":{"name":"isMailboxSetup","type":"\u0004","is_mandatory":true,"title":"Whether the user's Google mailbox is created","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"lastLoginTime":{"name":"lastLoginTime","type":"\t","is_mandatory":true,"title":"User's last login time","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"nonEditableAliases":{"name":"nonEditableAliases","type":"\u0019\u0007","is_mandatory":true,"title":"A list of the user's non-editable alias email addresses","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"orgUnitPath":{"name":"orgUnitPath","type":"\u0007","is_mandatory":true,"title":"The full path of the parent organization associated with the user","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"organization":{"name":"organization","type":"\u001bgoogleworkspace.user.organization","title":"Organization a Google Workspace user belongs to","desc":"Single organization membership on the workspace identity: the employer, department, title, location, cost center, and full-time-equivalent fraction reported against the account. The `primary` entry is the one that drives the user's display in the directory.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"organizations":{"name":"organizations","type":"\u0019\u001bgoogleworkspace.user.organization","is_mandatory":true,"title":"Organizations the user belongs to","desc":"Maps the workspace identity to its employer or division.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"phone":{"name":"phone","type":"\u001bgoogleworkspace.user.phone","title":"Phone number attached to a Google Workspace user","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"phones":{"name":"phones","type":"\u0019\u001bgoogleworkspace.user.phone","is_mandatory":true,"title":"Phone numbers","desc":"Includes MFA/recovery fallback numbers and on-call contacts.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"posixAccount":{"name":"posixAccount","type":"\u001bgoogleworkspace.user.posixAccount","title":"POSIX account linked to a Google Workspace user","desc":"Single POSIX account on the workspace identity: the Linux/UNIX-style username, uid, gid, home directory, and shell associated with the account. Used by Linux SSO integrations (sssd, ldap) and any audit that ties Google identities to OS-level accounts.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"posixAccounts":{"name":"posixAccounts","type":"\u0019\u001bgoogleworkspace.user.posixAccount","is_mandatory":true,"title":"POSIX accounts linked to the user","desc":"Ties the workspace identity to Linux/UNIX system accounts via username, uid, gid, home directory, and shell.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primaryEmail":{"name":"primaryEmail","type":"\u0007","is_mandatory":true,"title":"The user's primary email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"recoveryEmail":{"name":"recoveryEmail","type":"\u0007","is_mandatory":true,"title":"Recovery email of the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"recoveryPhone":{"name":"recoveryPhone","type":"\u0007","is_mandatory":true,"title":"Recovery phone of the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"sshPublicKey":{"name":"sshPublicKey","type":"\u001bgoogleworkspace.user.sshPublicKey","title":"SSH public key registered against a Google Workspace user","desc":"Single SSH public key on the workspace identity, high-signal for audits asking which identities can SSH into GCE / POSIX-linked hosts. `key` is the raw public key blob (OpenSSH or RFC 4716 format). `expirationTimeUsec` is the key's expiration timestamp in microseconds since the Unix epoch (empty for non-expiring keys). `fingerprint` is Google's SHA-256 fingerprint of the key.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/google-workspace","is_implicit_resource":true},"sshPublicKeys":{"name":"sshPublicKeys","type":"\u0019\u001bgoogleworkspace.user.sshPublicKey","is_mandatory":true,"title":"SSH public keys configured on the user","desc":"High-signal for audits that ask which workspace identities can SSH into GCE/POSIX-linked hosts.","min_provider_version":"13.0.14","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"suspended":{"name":"suspended","type":"\u0004","is_mandatory":true,"title":"Whether the user is suspended","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"suspensionReason":{"name":"suspensionReason","type":"\u0007","is_mandatory":true,"title":"The reason a user account is suspended","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"thumbnailPhotoUrl":{"name":"thumbnailPhotoUrl","type":"\u0007","is_mandatory":true,"title":"URL of user's profile photo","min_provider_version":"11.1.122","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"tokens":{"name":"tokens","type":"\u0019\u001bgoogleworkspace.token","title":"Returns the user-issued tokens to 3rd party applications","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"usageReport":{"name":"usageReport","type":"\u001bgoogleworkspace.report.usage","title":"Retrieves latest report for the user","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Google Workspace user accounts","desc":"User accounts in the Google Workspace directory, exposing identity attributes, suspension and archival state, administrator flags, 2-step verification enrollment, account-recovery channels, linked POSIX and SSH credentials, and org-defined custom schema fields. A central surface for account-security audits: admin privilege, MFA enrollment, dormant or suspended accounts, and recovery-channel configuration.","private":true,"min_provider_version":"9.0.0","defaults":"primaryEmail","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.address":{"id":"googleworkspace.user.address","name":"googleworkspace.user.address","fields":{"country":{"name":"country","type":"\u0007","is_mandatory":true,"title":"Country name","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"countryCode":{"name":"countryCode","type":"\u0007","is_mandatory":true,"title":"ISO 3166 country code","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"extendedAddress":{"name":"extendedAddress","type":"\u0007","is_mandatory":true,"title":"Extended address line (apartment, suite, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"formatted":{"name":"formatted","type":"\u0007","is_mandatory":true,"title":"Formatted single-line address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"locality":{"name":"locality","type":"\u0007","is_mandatory":true,"title":"City or locality","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"poBox":{"name":"poBox","type":"\u0007","is_mandatory":true,"title":"PO box","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"postalCode":{"name":"postalCode","type":"\u0007","is_mandatory":true,"title":"Postal or ZIP code","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"State, province, or region","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"sourceIsStructured":{"name":"sourceIsStructured","type":"\u0004","is_mandatory":true,"title":"Whether the address was supplied as structured fields (true) or only as `formatted` (false)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"streetAddress":{"name":"streetAddress","type":"\u0007","is_mandatory":true,"title":"Street address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Address type (work, home, other, custom)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Postal address attached to a Google Workspace user","desc":"Single postal address on the workspace identity, used for data-residency, jurisdiction, and contact-information audits. `sourceIsStructured` reports whether the address was supplied as individual fields (true) or as the free-form `formatted` string (false).","private":true,"min_provider_version":"13.0.14","defaults":"formatted type primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.email":{"id":"googleworkspace.user.email","name":"googleworkspace.user.email","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Email address","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary email","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Email type","desc":"One of `work`, `home`, `other`, or `custom`. When `custom`, `customType` carries the label.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Secondary email address attached to a Google Workspace user","private":true,"min_provider_version":"13.0.14","defaults":"address type primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.externalId":{"id":"googleworkspace.user.externalId","name":"googleworkspace.user.externalId","fields":{"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"External ID type","desc":"One of `account`, `customer`, `login_id`, `network`, `organization`, or `custom`. When `custom`, `customType` carries the label.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"External ID value","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"External identifier attached to a Google Workspace user","desc":"Single external identifier on the workspace identity: the employee IDs, network IDs, account IDs, and organization-defined identifiers that HR and identity-management systems hang off the account. The `type` field classifies the identifier and `value` carries it.","private":true,"min_provider_version":"13.0.14","defaults":"value type","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.organization":{"id":"googleworkspace.user.organization","name":"googleworkspace.user.organization","fields":{"costCenter":{"name":"costCenter","type":"\u0007","is_mandatory":true,"title":"Cost-center identifier","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"department":{"name":"department","type":"\u0007","is_mandatory":true,"title":"Department within the organization","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"domain":{"name":"domain","type":"\u0007","is_mandatory":true,"title":"Email domain associated with the organization","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"fullTimeEquivalent":{"name":"fullTimeEquivalent","type":"\u0005","is_mandatory":true,"title":"Full-time-equivalent fraction in basis points (e.g. 10000 = 100% FTE)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Office or branch location","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Organization name (typically the employer)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary organization","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"symbol":{"name":"symbol","type":"\u0007","is_mandatory":true,"title":"Stock or organization-defined symbol","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Job title","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Organization type","desc":"One of `work`, `school`, `domain_only`, `unknown`, or `custom`. When `custom`, `customType` carries the label.","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Organization a Google Workspace user belongs to","desc":"Single organization membership on the workspace identity: the employer, department, title, location, cost center, and full-time-equivalent fraction reported against the account. The `primary` entry is the one that drives the user's display in the directory.","private":true,"min_provider_version":"13.0.14","defaults":"name title department primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.phone":{"id":"googleworkspace.user.phone","name":"googleworkspace.user.phone","fields":{"customType":{"name":"customType","type":"\u0007","is_mandatory":true,"title":"Custom type label (populated when `type` is `custom`)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary phone","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Phone type (work, home, mobile, main, pager, callback, fax variants, custom)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Phone number (free-form; consumers should not assume E.164)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"Phone number attached to a Google Workspace user","private":true,"min_provider_version":"13.0.14","defaults":"value type primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.posixAccount":{"id":"googleworkspace.user.posixAccount","name":"googleworkspace.user.posixAccount","fields":{"accountId":{"name":"accountId","type":"\u0007","is_mandatory":true,"title":"Account identifier within the system","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"gid":{"name":"gid","type":"\u0005","is_mandatory":true,"title":"POSIX group id","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"homeDirectory":{"name":"homeDirectory","type":"\u0007","is_mandatory":true,"title":"Home directory path","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"operatingSystemType":{"name":"operatingSystemType","type":"\u0007","is_mandatory":true,"title":"Operating-system type of the account (LINUX, WINDOWS, UNSPECIFIED)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is the user's primary POSIX account","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"shell":{"name":"shell","type":"\u0007","is_mandatory":true,"title":"Login shell","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"systemId":{"name":"systemId","type":"\u0007","is_mandatory":true,"title":"System identifier the POSIX account is scoped to","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"POSIX user id","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"POSIX username","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"POSIX account linked to a Google Workspace user","desc":"Single POSIX account on the workspace identity: the Linux/UNIX-style username, uid, gid, home directory, and shell associated with the account. Used by Linux SSO integrations (sssd, ldap) and any audit that ties Google identities to OS-level accounts.","private":true,"min_provider_version":"13.0.14","defaults":"username uid systemId primary","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"googleworkspace.user.sshPublicKey":{"id":"googleworkspace.user.sshPublicKey","name":"googleworkspace.user.sshPublicKey","fields":{"expirationTimeUsec":{"name":"expirationTimeUsec","type":"\u0007","is_mandatory":true,"title":"Expiration timestamp in microseconds since the Unix epoch (empty for non-expiring keys)","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"fingerprint":{"name":"fingerprint","type":"\u0007","is_mandatory":true,"title":"SHA-256 fingerprint of the key","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Public key material","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}},"title":"SSH public key registered against a Google Workspace user","desc":"Single SSH public key on the workspace identity, high-signal for audits asking which identities can SSH into GCE / POSIX-linked hosts. `key` is the raw public key blob (OpenSSH or RFC 4716 format). `expirationTimeUsec` is the key's expiration timestamp in microseconds since the Unix epoch (empty for non-expiring keys). `fingerprint` is Google's SHA-256 fingerprint of the key.","private":true,"min_provider_version":"13.0.14","defaults":"fingerprint expirationTimeUsec","provider":"go.mondoo.com/cnquery/v9/providers/google-workspace"}}}