Google Workspace Attribute Reference
Focus
Focus
Device Security

Google Workspace Attribute Reference

Table of Contents

Google Workspace Attribute Reference

This reference lists the attributes that Device Security collects from Google Workspace, their names as stored in Device Security, and the Device Security fields they map to.
When Device Security integrates with Google Workspace, it imports data to enrich the device inventory.
The third-party attribute name in Device Security refers to the attribute name as it appears in the Assets Inventory table and in Query Engine. This follows the format of third-party-name.attribute-name. When viewing the attribute name in the Assets Inventory table column selector or on a Device Details page, where the third-party name can be found as a header for the attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.

Chrome OS Device Attributes

Device Security collects chrome os device attributes from Google Workspace. The following table lists each Google Workspace attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Google Workspace Attribute
Device Security Attribute Name
Device Security Common Attribute*
Description
macAddress
google_workspace.macAddress
id; MAC Address
MAC address
lastKnownNetwork.ipAddress
google_workspace.lastKnownNetwork.ipAddress
IP Address
IP address
lastSync
google_workspace.lastSync
Last Activity
Last sync
firmwareVersion
google_workspace.firmwareVersion
latest_firmware_version
Firmware version
annotatedLocation
google_workspace.annotatedLocation
Location
Annotated location
model
google_workspace.model
Model
Model of the device
autoUpdateThrough
google_workspace.autoUpdateThrough
OS End of Support Date
Auto update through
chromeOsType
google_workspace.chromeOsType
OS Name
Chrome OS type
osVersion
google_workspace.osVersion
OS Version
OS version
platformVersion
google_workspace.platformVersion
raw_os
Platform version
serialNumber
google_workspace.serialNumber
Serial Number
Serial number
activeTimeRanges
google_workspace.activeTimeRanges
—
Active time ranges
annotatedAssetId
google_workspace.annotatedAssetId
—
Annotated asset ID
annotatedUser
google_workspace.annotatedUser
—
Annotated user
autoUpdateExpiration
google_workspace.autoUpdateExpiration
—
Auto update expiration
bootMode
google_workspace.bootMode
—
Boot mode
cpuInfo.architecture
google_workspace.cpuInfo.architecture
—
Architecture
cpuInfo.maxClockSpeedKhz
google_workspace.cpuInfo.maxClockSpeedKhz
—
Max clock speed khz
cpuInfo.model
google_workspace.cpuInfo.model
—
Model of the device
cpuStatusReports
google_workspace.cpuStatusReports
—
CPU status reports
deviceId
google_workspace.deviceId
—
Device ID
deviceLicenseType
google_workspace.deviceLicenseType
—
Device license type
diskSpaceUsage.capacityBytes
google_workspace.diskSpaceUsage.capacityBytes
—
Capacity bytes
diskSpaceUsage.usedBytes
google_workspace.diskSpaceUsage.usedBytes
—
Used bytes
diskVolumeReports
google_workspace.diskVolumeReports
—
Disk volume reports
etag
google_workspace.etag
—
Etag
ethernetMacAddress
google_workspace.ethernetMacAddress
—
Ethernet MAC address
extendedSupportEligible
google_workspace.extendedSupportEligible
—
Extended support eligible
extendedSupportStart
google_workspace.extendedSupportStart
—
Extended support start
firstEnrollmentTime
google_workspace.firstEnrollmentTime
—
First enrollment time
kind
google_workspace.kind
—
Kind
lastEnrollmentTime
google_workspace.lastEnrollmentTime
—
Last enrollment time
lastKnownNetwork.wanIpAddress
google_workspace.lastKnownNetwork.wanIpAddress
—
WAN IP address
manufactureDate
google_workspace.manufactureDate
—
Manufacture date
orgUnitId
google_workspace.orgUnitId
—
Org unit ID
orgUnitPath
google_workspace.orgUnitPath
—
Org unit path
osUpdateStatus.rebootTime
google_workspace.osUpdateStatus.rebootTime
—
Reboot time
osUpdateStatus.state
google_workspace.osUpdateStatus.state
—
State
osUpdateStatus.targetKioskAppVersion
google_workspace.osUpdateStatus.targetKioskAppVersion
—
Target kiosk app version
osUpdateStatus.targetOsVersion
google_workspace.osUpdateStatus.targetOsVersion
—
Target OS version
osUpdateStatus.updateCheckTime
google_workspace.osUpdateStatus.updateCheckTime
—
Update check time
osUpdateStatus.updateTime
google_workspace.osUpdateStatus.updateTime
—
Update time
osVersionCompliance
google_workspace.osVersionCompliance
—
OS version compliance
recentUsers
google_workspace.recentUsers
—
Recent users
recentUsers__email
google_workspace.recentUsers.email
—
Recentusers email
status
google_workspace.status
—
Status of the device
systemRamFreeReports
google_workspace.systemRamFreeReports
—
System RAM free reports
systemRamTotal
google_workspace.systemRamTotal
—
System RAM total
tpmVersionInfo.family
google_workspace.tpmVersionInfo.family
—
Family
tpmVersionInfo.firmwareVersion
google_workspace.tpmVersionInfo.firmwareVersion
—
Firmware version
tpmVersionInfo.manufacturer
google_workspace.tpmVersionInfo.manufacturer
—
Manufacturer of the device
tpmVersionInfo.specLevel
google_workspace.tpmVersionInfo.specLevel
—
Spec level
tpmVersionInfo.tpmModel
google_workspace.tpmVersionInfo.tpmModel
—
Tpm model
tpmVersionInfo.vendorSpecific
google_workspace.tpmVersionInfo.vendorSpecific
—
Vendor specific

Mobile Devices Attributes

Device Security collects mobile devices attributes from Google Workspace. The following table lists each Google Workspace attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Google Workspace Attribute
Device Security Attribute Name
Device Security Common Attribute*
Description
email
google_workspace.email
AD Username
Email
wifiMacAddress
google_workspace.wifiMacAddress
id; MAC Address
Wifi MAC address
lastSync
google_workspace.lastSync
Last Activity
Last sync
model
google_workspace.model
Model
Model of the device
os
google_workspace.os
OS Name; raw_os
OS
releaseVersion
google_workspace.releaseVersion
OS Version
Release version
serialNumber
google_workspace.serialNumber
Serial Number
Serial number
installed_applications
—
third_party_learned_installed_software
Installed applications
adbStatus
google_workspace.adbStatus
—
Adb status
basebandVersion
google_workspace.basebandVersion
—
Baseband version
bootloaderVersion
google_workspace.bootloaderVersion
—
Bootloader version
brand
google_workspace.brand
—
Brand
buildNumber
google_workspace.buildNumber
—
Build number
defaultLanguage
google_workspace.defaultLanguage
—
Default language
developerOptionsStatus
google_workspace.developerOptionsStatus
—
Developer options status
deviceCompromisedStatus
google_workspace.deviceCompromisedStatus
—
Device compromised status
deviceId
google_workspace.deviceId
—
Device ID
devicePasswordStatus
google_workspace.devicePasswordStatus
—
Device password status
encryptionStatus
google_workspace.encryptionStatus
—
Encryption status
etag
google_workspace.etag
—
Etag
firstSync
google_workspace.firstSync
—
First sync
hardware
google_workspace.hardware
—
Hardware
hardwareId
google_workspace.hardwareId
—
Hardware ID
imei
google_workspace.imei
—
IMEI
kernelVersion
google_workspace.kernelVersion
—
Kernel version
kind
google_workspace.kind
—
Kind
managedAccountIsOnOwnerProfile
google_workspace.managedAccountIsOnOwnerProfile
—
Managed account is on owner profile
manufacturer
google_workspace.manufacturer
—
Manufacturer of the device
meid
google_workspace.meid
—
MEID
name
google_workspace.name
—
Name of the device
networkOperator
google_workspace.networkOperator
—
Network operator
orgUnitId
google_workspace.orgUnitId
—
Org unit ID
orgUnitPath
google_workspace.orgUnitPath
—
Org unit path
privilege
google_workspace.privilege
—
Privilege
resourceId
google_workspace.resourceId
—
Resource ID
securityPatchLevel
google_workspace.securityPatchLevel
—
Security patch level
status
google_workspace.status
—
Status of the device
supportsWorkProfile
google_workspace.supportsWorkProfile
—
Supports work profile
type
google_workspace.type
—
Type
unknownSourcesStatus
google_workspace.unknownSourcesStatus
—
Unknown sources status
userAgent
google_workspace.userAgent
—
User agent
* Only some attributes map to a Device Security Common Attribute.