Question

BetterCloud Google Workspace Super Admin Alerts Question

  • 2 February 2021
  • 8 replies
  • 11 views

Badge

Hey there! I noticed 2 alerts setup natively in bettercloud (Super Administrator Count Exceeds Threshold and Super Administrator Added) do the same thing but have two different user counts. I took a closer look and:
• The Exceeds Threshold alerts when users are both added and removed from Super Admin.
• The Admin Added alerts only when a user is added.
I’d like some clarity on what the intentions are for the two alerts?


8 replies

Userlevel 3
Badge +1

one probably uses reports api, the other probably uses directory api. reports api has an inherent lag of a few days.

https://support.google.com/a/answer/7061566?hl=en


Open Thread in Slack
Userlevel 3
Badge +1

admin added alert probably pulls information from admin audit log via reports api. this is near real-time. exceeds threshold probably pulls information from accounts report (2-3 days)


Open Thread in Slack
Userlevel 5
Badge +2

Exceeds Threshold shows the current state of Admins

Admin Added is a historical view of everyone who has ever been given Admin access and when (they'll show even if they don't currently have access)


Open Thread in Slack
Userlevel 3
Badge +1

i keep forgetting what slack workspace i'm in 😅


Open Thread in Slack
Userlevel 5
Badge +2

Exceeds Threshold is meant to be used if you have a policy that says 'we should only have have X Super Admins` and if you exceed that number it will fire


Open Thread in Slack
Userlevel 5
Badge +2

Admin Added is generally used if you want to take an action whenever anyone gets admin access


Open Thread in Slack
Badge

That makes sense. Are we able to set the threshold in Exceeds Threshold ?


Open Thread in Slack
Userlevel 5
Badge +2

Yep in the Alerts > Manage section


Open Thread in Slack

Reply