每個 IAM 權限都有 type 屬性，其值為列舉，可以是下列四個值之一：ADMIN_READ、ADMIN_WRITE、DATA_READ 或 DATA_WRITE。呼叫方法時，服務帳戶憑證會產生稽核記錄，記錄的類別取決於執行方法所需的權限的 type 屬性。如果方法需要 IAM 權限，且 type 屬性值為 DATA_READ、DATA_WRITE 或 ADMIN_READ，就會產生「資料存取」稽核記錄。需要 IAM 權限且 type 屬性值為 ADMIN_WRITE 的方法會產生管理員活動稽核記錄。
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-07-09 (世界標準時間)。"],[[["Service Account Credentials audit logs are captured under the service name `iamcredentials.googleapis.com`, which can be used to filter logs."],["Audit log categories, either Data Access or Admin Activity, are determined by the `type` property of the required IAM permission for a given method, specifically `ADMIN_WRITE`, `ADMIN_READ`, `DATA_READ`, or `DATA_WRITE`."],["Methods requiring IAM permissions with `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ` types result in Data Access audit logs, while those with `ADMIN_WRITE` permissions generate Admin Activity audit logs."],["The methods `GenerateAccessToken`, `GenerateIdToken`, `SignBlob`, and `SignJwt` are logged as Data Access audit logs, each requiring specific permissions, and they are all non-long-running or non-streaming."],["Information regarding how and which permissions are evaluated for each method is documented in the Identity and Access Management documentation for Service Account Credentials, under `google.iam.credentials.v1.IAMCredentials`."]]],[]]
