Send feedback
Stay organized with collections
Save and categorize content based on your preferences.
Dataproc Resource Manager audit logging
This document describes audit logging for Dataproc Resource Manager. Google Cloud services
generate audit logs that record administrative and access activities within your Google Cloud resources.
For more information about Cloud Audit Logs, see the following:
Service name
Dataproc Resource Manager audit logs use the service name dataprocrm.googleapis.com.
Filter for this service:
protoPayload . serviceName = "dataprocrm.googleapis.com"
Methods by permission type
Each IAM permission has a type property, whose value is an enum
that can be one of four values: ADMIN_READ, ADMIN_WRITE,
DATA_READ, or DATA_WRITE. When you call a method,
Dataproc Resource Manager generates an audit log whose category is dependent on the
type property of the permission required to perform the method.
Methods that require an IAM permission with the type property value
of DATA_READ, DATA_WRITE, or ADMIN_READ generate
Data Access audit logs.
Methods that require an IAM permission with the type property value
of ADMIN_WRITE generate
Admin Activity audit logs.
Permission type
Methods
ADMIN_READgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.GetNodegoogle.cloud.dataproc.rm.v1.DataprocResourceManager.GetNodePoolgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.GetWorkloadgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodePoolsgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodesgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.ListWorkloads
ADMIN_WRITEgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.CancelWorkloadgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.CreateNodePoolgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.CreateWorkloadgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodePoolgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodesgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteWorkloadgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.HeartbeatNodegoogle.cloud.dataproc.rm.v1.DataprocResourceManager.ResizeNodePool
DATA_READgoogle.cloud.dataproc.rm.v1.DataprocResourceManager.MintOAuthToken
API interface audit logs
For information about how and which permissions are evaluated for each method,
see the Identity and Access Management documentation for Dataproc Resource Manager.
google.cloud.dataproc.rm.v1.DataprocResourceManagerThe following audit logs are associated with methods belonging to
google.cloud.dataproc.rm.v1.DataprocResourceManager.
CancelWorkload
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.CancelWorkloadAudit log type : Admin activity Permissions : dataprocrm.workloads.cancel - ADMIN_WRITEMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.CancelWorkload"
CreateNodePool
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateNodePoolAudit log type : Admin activity Permissions : dataprocrm.nodePools.create - ADMIN_WRITEMethod is a long-running or streaming operation :
Long-running operation Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateNodePool"
CreateWorkload
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateWorkloadAudit log type : Admin activity Permissions : dataprocrm.workloads.create - ADMIN_WRITEMethod is a long-running or streaming operation :
Long-running operation Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateWorkload"
DeleteNodePool
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodePoolAudit log type : Admin activity Permissions : dataprocrm.nodePools.delete - ADMIN_WRITEMethod is a long-running or streaming operation :
Long-running operation Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodePool"
DeleteNodes
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodesAudit log type : Admin activity Permissions : dataprocrm.nodePools.deleteNodes - ADMIN_WRITEMethod is a long-running or streaming operation :
Long-running operation Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodes"
DeleteWorkload
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteWorkloadAudit log type : Admin activity Permissions : dataprocrm.workloads.delete - ADMIN_WRITEMethod is a long-running or streaming operation :
Long-running operation Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteWorkload"
GetNode
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNodeAudit log type : Data access Permissions : dataprocrm.nodes.get - ADMIN_READMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNode"
GetNodePool
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNodePoolAudit log type : Data access Permissions : dataprocrm.nodePools.get - ADMIN_READMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNodePool"
GetWorkload
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.GetWorkloadAudit log type : Data access Permissions : dataprocrm.workloads.get - ADMIN_READMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.GetWorkload"
HeartbeatNode
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.HeartbeatNodeAudit log type : Admin activity Permissions : dataprocrm.nodes.heartbeat - ADMIN_WRITEMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.HeartbeatNode"
ListNodePools
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodePoolsAudit log type : Data access Permissions : dataprocrm.nodePools.list - ADMIN_READMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodePools"
ListNodes
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodesAudit log type : Data access Permissions : dataprocrm.nodes.list - ADMIN_READMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodes"
ListWorkloads
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.ListWorkloadsAudit log type : Data access Permissions : dataprocrm.workloads.list - ADMIN_READMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.ListWorkloads"
MintOAuthToken
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.MintOAuthTokenAudit log type : Data access Permissions : dataprocrm.nodes.mintOAuthToken - DATA_READMethod is a long-running or streaming operation :
No.Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.MintOAuthToken"
ResizeNodePool
Method : google.cloud.dataproc.rm.v1.DataprocResourceManager.ResizeNodePoolAudit log type : Admin activity Permissions : dataprocrm.nodePools.resize - ADMIN_WRITEMethod is a long-running or streaming operation :
Long-running operation Filter for this method :
protoPayload.methodName="google.cloud.dataproc.rm.v1.DataprocResourceManager.ResizeNodePool"
Send feedback
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-09-03 UTC.
Need to tell us more?
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-03 UTC."],[],[],null,["Dataproc Resource Manager audit logging\n=======================================\n\nThis document describes audit logging for Dataproc Resource Manager. Google Cloud services\ngenerate audit logs that record administrative and access activities within your Google Cloud resources.\nFor more information about Cloud Audit Logs, see the following:\n\n- [Types of audit logs](/logging/docs/audit#types)\n- [Audit log entry structure](/logging/docs/audit#audit_log_entry_structure)\n- [Storing and routing audit logs](/logging/docs/audit#storing_and_routing_audit_logs)\n- [Cloud Logging pricing summary](/stackdriver/pricing#logs-pricing-summary)\n- [Enable Data Access audit logs](/logging/docs/audit/configure-data-access)\n\n\u003cbr /\u003e\n\nService name\n------------\n\nDataproc Resource Manager audit logs use the service name `dataprocrm.googleapis.com`.\nFilter for this service: \n\n```gdscript\n protoPayload.serviceName=\"dataprocrm.googleapis.com\"\n \n```\n\n\u003cbr /\u003e\n\nMethods by permission type\n--------------------------\n\nEach IAM permission has a `type` property, whose value is an enum\nthat can be one of four values: `ADMIN_READ`, `ADMIN_WRITE`,\n`DATA_READ`, or `DATA_WRITE`. When you call a method,\nDataproc Resource Manager generates an audit log whose category is dependent on the\n`type` property of the permission required to perform the method.\n\nMethods that require an IAM permission with the `type` property value\nof `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ` generate\n[Data Access](/logging/docs/audit#data-access) audit logs.\n\nMethods that require an IAM permission with the `type` property value\nof `ADMIN_WRITE` generate\n[Admin Activity](/logging/docs/audit#admin-activity) audit logs.\n\nAPI interface audit logs\n------------------------\n\nFor information about how and which permissions are evaluated for each method,\nsee the Identity and Access Management documentation for Dataproc Resource Manager.\n\n### `google.cloud.dataproc.rm.v1.DataprocResourceManager`\n\nThe following audit logs are associated with methods belonging to\n`google.cloud.dataproc.rm.v1.DataprocResourceManager`.\n\n#### `CancelWorkload`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.CancelWorkload` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.workloads.cancel - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.CancelWorkload\"\n ` \n\n#### `CreateNodePool`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateNodePool` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.nodePools.create - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateNodePool\"\n ` \n\n#### `CreateWorkload`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateWorkload` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.workloads.create - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.CreateWorkload\"\n ` \n\n#### `DeleteNodePool`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodePool` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.nodePools.delete - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodePool\"\n ` \n\n#### `DeleteNodes`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodes` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.nodePools.deleteNodes - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteNodes\"\n ` \n\n#### `DeleteWorkload`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteWorkload` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.workloads.delete - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.DeleteWorkload\"\n ` \n\n#### `GetNode`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNode` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `dataprocrm.nodes.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNode\"\n ` \n\n#### `GetNodePool`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNodePool` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `dataprocrm.nodePools.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.GetNodePool\"\n ` \n\n#### `GetWorkload`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.GetWorkload` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `dataprocrm.workloads.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.GetWorkload\"\n ` \n\n#### `HeartbeatNode`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.HeartbeatNode` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.nodes.heartbeat - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.HeartbeatNode\"\n ` \n\n#### `ListNodePools`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodePools` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `dataprocrm.nodePools.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodePools\"\n ` \n\n#### `ListNodes`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodes` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `dataprocrm.nodes.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.ListNodes\"\n ` \n\n#### `ListWorkloads`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.ListWorkloads` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `dataprocrm.workloads.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.ListWorkloads\"\n ` \n\n#### `MintOAuthToken`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.MintOAuthToken` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `dataprocrm.nodes.mintOAuthToken - DATA_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.MintOAuthToken\"\n ` \n\n#### `ResizeNodePool`\n\n- **Method** : `google.cloud.dataproc.rm.v1.DataprocResourceManager.ResizeNodePool` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `dataprocrm.nodePools.resize - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.dataproc.rm.v1.DataprocResourceManager.ResizeNodePool\"\n `"]]
