Hey there! I noticed 2 alerts setup natively in bettercloud (Super Administrator Count Exceeds Threshold and Super Administrator Added) do the same thing but have two different user counts. I took a closer look and:
• The Exceeds Threshold alerts when users are both added and removed from Super Admin.
• The Admin Added alerts only when a user is added.
I’d like some clarity on what the intentions are for the two alerts?
BetterCloud Google Workspace Super Admin Alerts Question
one probably uses reports api, the other probably uses directory api. reports api has an inherent lag of a few days.
https://support.google.com/a/answer/7061566?hl=en
Open Thread in Slack
admin added
alert probably pulls information from admin audit log via reports api. this is near real-time. exceeds threshold
probably pulls information from accounts report (2-3 days)
Open Thread in Slack
Exceeds Threshold
shows the current state of Admins
Admin Added
is a historical view of everyone who has ever been given Admin access and when (they'll show even if they don't currently have access)
Open Thread in Slack
Exceeds Threshold
is meant to be used if you have a policy that says 'we should only have have X Super Admins` and if you exceed that number it will fire
Open Thread in Slack
Admin Added
is generally used if you want to take an action whenever anyone gets admin access
Open Thread in Slack
Reply
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.