Adding audit logs for Gemini for Google Workspace activity

What’s changing 

In addition to the recent announcement of audit logs for API-based actions, we’re introducing the ability for admins to see new audit logs in Google Drive for activity triggered by Gemini for Google Workspace. 
For example, if Gemini for Google Workspace accesses data from a set of files in response to a user query, an ‘item content accessed’ event is generated for each of the accessed files in the Drive log events. 

Who’s impacted 

Admins 

Why it matters 

These new audit logs offer admins greater transparency into how Gemini for Google Workspace and Gemini apps leverage your content from Drive, providing granular visibility for security and compliance. 
Gemini leverages the content of your Drive to provide more personalized responses based on your prompts. These logs focus on instances where Gemini specifically accesses Drive files on behalf of users to fulfill their requests. 

Getting started 

Admins: This feature will be ON by default. No action is required as relevant events will appear in the logs automatically. Visit the Help Center to learn more about Drive audit logs and accessing Gemini for Google Workspace. Note: Your ability to run a search depends on your Google Workspace edition, your administrative privileges, and the data source. You can run a search on all users, regardless of their Google Workspace edition. End users: No end user impact. 

Rollout pace 

This feature is now available. 

Availability 

Available for Google Workspace: 
Gemini Business, Enterprise, Education, Education Premium 

Resources 

Google Workspace Admin Help: About the security investigation tool Google Workspace Admin Help: About the audit and investigation tool Google Workspace Admin Help: Drive log events