Conversational Insights audit logging

This document describes audit logging for Conversational Insights. Google Cloud services generate audit logs that record administrative and access activities within your Google Cloud resources. For more information about Cloud Audit Logs, see the following:

Service name

Conversational Insights audit logs use the service name contactcenterinsights.googleapis.com. Filter for this service:

    protoPayload.serviceName="contactcenterinsights.googleapis.com"
  

Methods by permission type

Each IAM permission has a type property, whose value is an enum that can be one of four values: ADMIN_READ, ADMIN_WRITE, DATA_READ, or DATA_WRITE. When you call a method, Conversational Insights generates an audit log whose category is dependent on the type property of the permission required to perform the method. Methods that require an IAM permission with the type property value of DATA_READ, DATA_WRITE, or ADMIN_READ generate Data Access audit logs. Methods that require an IAM permission with the type property value of ADMIN_WRITE generate Admin Activity audit logs.

Permission type Methods
DATA_READ google.cloud.contactcenterinsights.v1.ContactCenterInsights.CalculateIssueModelStats
google.cloud.contactcenterinsights.v1.ContactCenterInsights.CalculateStats
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ExportInsightsData
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetAnalysis
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetConversation
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetEncryptionSpec
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetIssue
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetPhraseMatcher
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetSettings
google.cloud.contactcenterinsights.v1.ContactCenterInsights.GetView
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ListAnalyses
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ListConversations
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ListIssueModels
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ListIssues
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ListPhraseMatchers
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ListViews
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.CalculateStats
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.ExportInsightsData
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.GetAnalysis
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.GetConversation
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.GetIssue
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.GetIssueModel
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.GetPhraseMatcher
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.GetSettings
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.GetView
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.ListAnalyses
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.ListConversations
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.ListIssueModels
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.ListIssues
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.ListPhraseMatchers
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.ListViews
DATA_WRITE google.cloud.contactcenterinsights.v1.ContactCenterInsights.BulkAnalyzeConversations
google.cloud.contactcenterinsights.v1.ContactCenterInsights.BulkDeleteConversations
google.cloud.contactcenterinsights.v1.ContactCenterInsights.CreateAnalysis
google.cloud.contactcenterinsights.v1.ContactCenterInsights.CreateConversation
google.cloud.contactcenterinsights.v1.ContactCenterInsights.CreateIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.CreatePhraseMatcher
google.cloud.contactcenterinsights.v1.ContactCenterInsights.CreateView
google.cloud.contactcenterinsights.v1.ContactCenterInsights.DeleteAnalysis
google.cloud.contactcenterinsights.v1.ContactCenterInsights.DeleteConversation
google.cloud.contactcenterinsights.v1.ContactCenterInsights.DeleteIssue
google.cloud.contactcenterinsights.v1.ContactCenterInsights.DeleteIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.DeletePhraseMatcher
google.cloud.contactcenterinsights.v1.ContactCenterInsights.DeleteView
google.cloud.contactcenterinsights.v1.ContactCenterInsights.DeployIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ExportIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.ImportIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.IngestConversations
google.cloud.contactcenterinsights.v1.ContactCenterInsights.InitializeEncryptionSpec
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UndeployIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UpdateConversation
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UpdateIssue
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UpdateIssueModel
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UpdatePhraseMatcher
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UpdateSettings
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UpdateView
google.cloud.contactcenterinsights.v1.ContactCenterInsights.UploadConversation
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.BulkAnalyzeConversations
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.BulkDeleteConversations
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.CreateAnalysis
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.CreateConversation
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.CreatePhraseMatcher
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.CreateView
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.DeleteAnalysis
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.DeleteConversation
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.DeletePhraseMatcher
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.DeleteView
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.IngestConversations
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.UpdateConversation
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.UpdateIssueModel
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.UpdatePhraseMatcher
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.UpdateSettings
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.UpdateView
google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.UploadConversation
google.longrunning.Operations.CancelOperation

API interface audit logs

For information about how and which permissions are evaluated for each method, see the Identity and Access Management documentation for Conversational Insights.

google.cloud.contactcenterinsights.v1.ContactCenterInsights

The following audit logs are associated with methods belonging to google.cloud.contactcenterinsights.v1.ContactCenterInsights.

BulkAnalyzeConversations

BulkDeleteConversations

CalculateIssueModelStats

CalculateStats

CreateAnalysis

CreateConversation

CreateIssueModel

CreatePhraseMatcher

CreateView

DeleteAnalysis

DeleteConversation

DeleteIssue

DeleteIssueModel

DeletePhraseMatcher

DeleteView

DeployIssueModel

ExportInsightsData

ExportIssueModel

GetAnalysis

GetConversation

GetEncryptionSpec

GetIssue

GetIssueModel

GetPhraseMatcher

GetSettings

GetView

ImportIssueModel

IngestConversations

InitializeEncryptionSpec

ListAnalyses

ListConversations

ListIssueModels

ListIssues

ListPhraseMatchers

ListViews

UndeployIssueModel

UpdateConversation

UpdateIssue

UpdateIssueModel

UpdatePhraseMatcher

UpdateSettings

UpdateView

UploadConversation

google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights

The following audit logs are associated with methods belonging to google.cloud.contactcenterinsights.v1alpha1.ContactCenterInsights.

BulkAnalyzeConversations

BulkDeleteConversations

CalculateStats

CreateAnalysis

CreateConversation

CreatePhraseMatcher

CreateView

DeleteAnalysis

DeleteConversation

DeletePhraseMatcher

DeleteView

ExportInsightsData

GetAnalysis

GetConversation

GetIssue

GetIssueModel

GetPhraseMatcher

GetSettings

GetView

IngestConversations

ListAnalyses

ListConversations

ListIssueModels

ListIssues

ListPhraseMatchers

ListViews

UpdateConversation

UpdateIssueModel

UpdatePhraseMatcher

UpdateSettings

UpdateView

UploadConversation

google.longrunning.Operations

The following audit logs are associated with methods belonging to google.longrunning.Operations.

CancelOperation

  • Method: google.longrunning.Operations.CancelOperation
  • Audit log type: Data access
  • Permissions:
    • contactcenterinsights.operations.cancel - DATA_WRITE
  • Method is a long-running or streaming operation: No.
  • Filter for this method: protoPayload.methodName="google.longrunning.Operations.CancelOperation"

Methods that don't produce audit logs

A method might not produce audit logs for one or more of the following reasons:

  • It is a high volume method involving signifcant log generation and storage costs.
  • It has low auditing value.
  • Another audit or platform log already provides method coverage.

The following methods don't produce audit logs:

  • google.longrunning.Operations.GetOperation
  • google.longrunning.Operations.ListOperations