@@ -42,7 +42,7 @@ message Access {
4242 // The caller IP's geolocation, which identifies where the call came from.
4343 Geolocation caller_ip_geo = 3 ;
4444
45- // What kind of user agent is associated, e.g. operating system shells,
45+ // What kind of user agent is associated, for example operating system shells,
4646 // embedded or stand-alone applications, etc.
4747 string user_agent_family = 4 ;
4848
@@ -76,6 +76,15 @@ message Access {
7676 // authorities are present, they are guaranteed to be sorted based on the
7777 // original ordering of the identity delegation events.
7878 repeated ServiceAccountDelegationInfo service_account_delegation_info = 9 ;
79+
80+ // A string that represents the username of a user, user account, or other
81+ // entity involved in the access event. What the entity is and what its role
82+ // in the access event is depends on the finding that this field appears in.
83+ // The entity is likely not an IAM principal, but could be a user that is
84+ // logged into an operating system, if the finding is VM-related, or a user
85+ // that is logged into some type of application that is involved in the
86+ // access event.
87+ string user_name = 11 ;
7988}
8089
8190// Identity delegation history of an authenticated service account.
@@ -97,4 +106,4 @@ message ServiceAccountDelegationInfo {
97106message Geolocation {
98107 // A CLDR.
99108 string region_code = 1 ;
100- }
109+ }
0 commit comments