IAM Event - Oauth Access Used for Foreign Application

EVENT

Oauth Granted Permissions (shadow IT tracking)  -  Tracking what other SaaS Apps used Google Workspace and/or Microsoft credentials to log in without permissions to directly access a primary app.

RECOMMENDED ACTION

This event details Oauth Granted Permissions and will help you with shadow IT tracking.  The detail in this event will show what other SaaS Apps a User is connecting to with their Google Workspace and/or Microsoft 365 credentials.

ALERT TYPE

Logged Event