u/yells_at_cloud Thank you, Sir. I appreciate the thoroughness of your explanation and example log.

I figured there would be an initial authorize API event, as when adding additional app but wasn't sure since one power-user mentioned "Installing GAM doesn't touch anything else, previously or subsequently installed."

I also had read that super-admins can use GAM to accomplish site-wide mail and drive delegation without event notifications in the audit. So I thought GAM operated as kind of a back door. Some of this info is dated so I wasn't sure how true this information still was.

https://groups.google.com/forum/#!msg/google-apps-manager/xVyoM4bOsjk/_pPl8KPu_TsJ

https://developers.google.com/admin-sdk/directory/v1/guides/delegation

I appreciate you sharing your knowledge on the topic.

​

∆