Stay organized with collections
Save and categorize content based on your preferences.
This page contains information about Cloud Audit logging for
contactcenteraiplatform.googleapis.com API. For example, entries
are logged when Contact Center AI Platform (CCAI Platform) is created or deleted.
This page doesn't describe audit logs for user actions performed on
Contact Center AI Platform. For example, when contact center users (admins,
managers, agents) sign in, or make changes to settings. To get audit logs for
user actions, contact Cloud Support and provide the following:
Google Cloud project of the CCAI Platform contact center.
CCAI Platform URL for the contact center
The region for the CCAI Platform contact center, for example,
us-central1.
The Cloud Storage bucket (gs://bucketname) where you want
Cloud Support to upload the logs. You will need to grant write access to Cloud
Support on this bucket, so they can upload the logs.
The start and end time and date with the time zone (preferably in UTC)
within the last 30 days for the window that you want the logs for. Logs older
than 30 days are deleted and cannot be provided.
This document describes audit logging for Google Cloud Contact Center as a Service. Google Cloud services
generate audit logs that record administrative and access activities within your Google Cloud resources.
For more information about Cloud Audit Logs, see the following:
Each IAM permission has a type property, whose value is an enum
that can be one of four values: ADMIN_READ, ADMIN_WRITE,
DATA_READ, or DATA_WRITE. When you call a method,
Google Cloud Contact Center as a Service generates an audit log whose category is dependent on the
type property of the permission required to perform the method.
Methods that require an IAM permission with the type property value
of DATA_READ, DATA_WRITE, or ADMIN_READ generate
Data Access audit logs.
Methods that require an IAM permission with the type property value
of ADMIN_WRITE generate
Admin Activity audit logs.
For information about how and which permissions are evaluated for each method,
see the Identity and Access Management documentation for Google Cloud Contact Center as a Service.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eThis page details audit logging for the \u003ccode\u003econtactcenteraiplatform.googleapis.com\u003c/code\u003e API, specifically covering actions like the creation or deletion of the Contact Center AI Platform (CCAI Platform).\u003c/p\u003e\n"],["\u003cp\u003eAudit logs for user actions within the CCAI Platform (e.g., logins, setting changes) are not covered here and can be requested from Cloud Support by providing project details, the CCAI platform URL, region, bucket storage, and a timeframe within the last 30 days.\u003c/p\u003e\n"],["\u003cp\u003eAudit logs are categorized as either Admin Activity or Data Access, determined by the IAM permission type (\u003ccode\u003eADMIN_WRITE\u003c/code\u003e, \u003ccode\u003eADMIN_READ\u003c/code\u003e, \u003ccode\u003eDATA_READ\u003c/code\u003e, \u003ccode\u003eDATA_WRITE\u003c/code\u003e) required for the method.\u003c/p\u003e\n"],["\u003cp\u003eAdmin Activity logs are generated for methods that require \u003ccode\u003eADMIN_WRITE\u003c/code\u003e permissions such as \u003ccode\u003eCreateContactCenter\u003c/code\u003e, \u003ccode\u003eDeleteContactCenter\u003c/code\u003e, and \u003ccode\u003eUpdateContactCenter\u003c/code\u003e, while Data Access logs are generated for \u003ccode\u003eADMIN_READ\u003c/code\u003e, \u003ccode\u003eDATA_READ\u003c/code\u003e, and \u003ccode\u003eDATA_WRITE\u003c/code\u003e permissions.\u003c/p\u003e\n"],["\u003cp\u003eCertain high-volume or low-value methods, such as \u003ccode\u003egoogle.cloud.location.Locations.GetLocation\u003c/code\u003e and \u003ccode\u003egoogle.longrunning.Operations.WaitOperation\u003c/code\u003e, do not generate audit logs.\u003c/p\u003e\n"]]],[],null,["# Audit logging information\n\nThis page contains information about Cloud Audit logging for\n`contactcenteraiplatform.googleapis.com` API. For example, entries\nare logged when Contact Center AI Platform (CCAI Platform) is created or deleted.\n\nThis page doesn't describe audit logs for user actions performed on\nContact Center AI Platform. For example, when contact center users (admins,\nmanagers, agents) sign in, or make changes to settings. To get audit logs for\nuser actions, contact Cloud Support and provide the following:\n\n- Google Cloud project of the CCAI Platform contact center.\n\n- CCAI Platform URL for the contact center\n\n- The region for the CCAI Platform contact center, for example,\n `us-central1`.\n\n- The Cloud Storage bucket (`gs://bucketname`) where you want\n Cloud Support to upload the logs. You will need to grant write access to Cloud\n Support on this bucket, so they can upload the logs.\n\n The start and end time and date with the time zone (preferably in UTC)\n within the last 30 days for the window that you want the logs for. Logs older\n than 30 days are deleted and cannot be provided.\n\nThis document describes audit logging for Google Cloud Contact Center as a Service. Google Cloud services\ngenerate audit logs that record administrative and access activities within your Google Cloud resources.\nFor more information about Cloud Audit Logs, see the following:\n\n- [Types of audit logs](/logging/docs/audit#types)\n- [Audit log entry structure](/logging/docs/audit#audit_log_entry_structure)\n- [Storing and routing audit logs](/logging/docs/audit#storing_and_routing_audit_logs)\n- [Cloud Logging pricing summary](/stackdriver/pricing#logs-pricing-summary)\n- [Enable Data Access audit logs](/logging/docs/audit/configure-data-access)\n\n\u003cbr /\u003e\n\nService name\n------------\n\nGoogle Cloud Contact Center as a Service audit logs use the service name `contactcenteraiplatform.googleapis.com`.\nFilter for this service: \n\n```gdscript\n protoPayload.serviceName=\"contactcenteraiplatform.googleapis.com\"\n \n```\n\n\u003cbr /\u003e\n\nMethods by permission type\n--------------------------\n\nEach IAM permission has a `type` property, whose value is an enum\nthat can be one of four values: `ADMIN_READ`, `ADMIN_WRITE`,\n`DATA_READ`, or `DATA_WRITE`. When you call a method,\nGoogle Cloud Contact Center as a Service generates an audit log whose category is dependent on the\n`type` property of the permission required to perform the method.\n\nMethods that require an IAM permission with the `type` property value\nof `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ` generate\n[Data Access](/logging/docs/audit#data-access) audit logs.\n\nMethods that require an IAM permission with the `type` property value\nof `ADMIN_WRITE` generate\n[Admin Activity](/logging/docs/audit#admin-activity) audit logs.\n\nAPI interface audit logs\n------------------------\n\nFor information about how and which permissions are evaluated for each method,\nsee the Identity and Access Management documentation for Google Cloud Contact Center as a Service.\n\n### `google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform`\n\nThe following audit logs are associated with methods belonging to\n`google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform`.\n\n#### `CreateContactCenter`\n\n- **Method** : `google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.CreateContactCenter` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `contactcenteraiplatform.contactCenters.create - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.CreateContactCenter\"\n ` \n\n#### `DeleteContactCenter`\n\n- **Method** : `google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.DeleteContactCenter` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `contactcenteraiplatform.contactCenters.delete - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.DeleteContactCenter\"\n ` \n\n#### `GetContactCenter`\n\n- **Method** : `google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.GetContactCenter` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `contactcenteraiplatform.contactCenters.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.GetContactCenter\"\n ` \n\n#### `ListContactCenters`\n\n- **Method** : `google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.ListContactCenters` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `contactcenteraiplatform.contactCenters.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.ListContactCenters\"\n ` \n\n#### `QueryContactCenterQuota`\n\n- **Method** : `google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.QueryContactCenterQuota` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `contactcenteraiplatform.contactCenters.queryQuota - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.QueryContactCenterQuota\"\n ` \n\n#### `UpdateContactCenter`\n\n- **Method** : `google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.UpdateContactCenter` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `contactcenteraiplatform.contactCenters.update - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.contactcenteraiplatform.v1alpha1.ContactCenterAiPlatform.UpdateContactCenter\"\n ` \n\n### `google.longrunning.Operations`\n\nThe following audit logs are associated with methods belonging to\n`google.longrunning.Operations`.\n\n#### `CancelOperation`\n\n- **Method** : `google.longrunning.Operations.CancelOperation` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `contactcenteraiplatform.operations.cancel - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.CancelOperation\"\n ` \n\n#### `DeleteOperation`\n\n- **Method** : `google.longrunning.Operations.DeleteOperation` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `contactcenteraiplatform.operations.delete - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.DeleteOperation\"\n ` \n\n#### `GetOperation`\n\n- **Method** : `google.longrunning.Operations.GetOperation` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `contactcenteraiplatform.operations.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.GetOperation\"\n ` \n\n#### `ListOperations`\n\n- **Method** : `google.longrunning.Operations.ListOperations` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `contactcenteraiplatform.operations.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.ListOperations\"\n ` \n\nMethods that don't produce audit logs\n-------------------------------------\n\nA method might not produce audit logs for one or more of the following\nreasons:\n\n- It is a high volume method involving significant log generation and storage costs.\n- It has low auditing value.\n- Another audit or platform log already provides method coverage.\n\n\u003cbr /\u003e\n\nThe following methods don't produce audit logs:\n\n- `google.cloud.location.Locations.GetLocation`\n- `google.cloud.location.Locations.ListLocations`\n- `google.longrunning.Operations.WaitOperation`"]]
