Google Workspace User Granted Admin Privileges

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•30

Detects when a Google Workspace user is granted administrative privileges. This could indicate a legitimate administrative action or a malicious attempt to escalate privileges within the Google Workspace environment.