Administrator email alerts

Some alerts are limited or unavailable if you’re using an external SSO ldP.

As your organization's administrator, you can receive email alerts when something important happens in your organization, such as a suspicious sign-in attempt, a compromised mobile device, or when another administrator changes settings. When you turn on an alert for an activity, you'll receive an email each time that activity happens, up to 25 emails in 2 hours.

Tip: If you’re using a personal account, you can see devices that have used your account.

Types of email alerts

User activity alerts
  • Apps outage alert—new, updated, or resolved outage on the G Suite Status Dashboard (G Suite only)
  • New user added
  • Government-based attack
  • Suspended user made active
  • Suspicious login activity
  • User deleted
  • User granted Admin privilege
  • User suspended
  • User’s Admin privilege revoked
  • User’s password changed
Mobile device activity alerts
  • Device compromise update (also alerts when a device is no longer compromised)
  • Suspicious mobile activity (any changes to device model, serial number, Wi-Fi MAC address, device policy app privilege, manufacturer, device brand, device hardware, or bootloader version on a user’s device)
Alerts for settings changed by other administrators
  • Calendar settings changed (G Suite only)
  • Drive settings changed (G Suite only)
  • Gmail settings changed (G Suite only)
  • Mobile settings changed (any mobile management settings are changed)
Email activity alerts (G Suite only) Custom activity alerts

You can create the following custom alerts based on your organization’s audit logs.

Turn custom alerts on and off

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console Home page, go to Reports.

    To see Reports, you might have to click More controls at the bottom.

  3. In the left pane, click Manage Alerts.
  4. In the Status column on the right, turn the switch on to receive an alert, or turn off to stop receiving the alert.
  5. (Optional) Click the Email recipients column to edit alert recipients by email address. You can also check or uncheck Super Administrator(s) to start or stop alerts for users who are super administrators.

Alert center alerts

Use the alert center to view notifications about potential issues within your domain, and take action to resolve the issues and protect your organization from security threats. Administrators can set up email notifications for alert center alerts by configuring a rule in the Google Admin console. For instructions, see Configure alert center email notifications. See also About the alert center

Was this helpful?
How can we improve it?