Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Audit Trails
  • Getting started
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Management event reference
  • Data event reference
      • AcceptInvitation
      • ActivateMfaEnforcement
      • AddFederatedUserAccounts
      • AddFederationDomain
      • AddUserBlock
      • AddUserpoolDomain
      • AttachRegion
      • AuthenticateByPassword
      • BindOrganizationAccessPolicy
      • ChangeOneTimePassword
      • ConvertUserToExternal
      • CreateApplication
      • CreateApplication
      • CreateAsset
      • CreateBranding
      • CreateCertificate
      • CreateFederation
      • CreateGroup
      • CreateGroupMapping
      • CreateInvitations
      • CreateMembership
      • CreateMfaEnforcement
      • CreateOrganization
      • CreateOsLoginProfile
      • CreateSignatureCertificate
      • CreateUser
      • CreateUserpool
      • CreateUserSshKey
      • DeactivateMfaEnforcement
      • DeleteApplication
      • DeleteApplication
      • DeleteAsset
      • DeleteBranding
      • DeleteCertificate
      • DeleteFederatedUserAccounts
      • DeleteFederation
      • DeleteFederationDomain
      • DeleteGroup
      • DeleteGroupMapping
      • DeleteInvitation
      • DeleteMembership
      • DeleteMfaEnforcement
      • DeleteOrganization
      • DeleteOsLoginProfile
      • DeleteSignatureCertificate
      • DeleteUser
      • DeleteUserpool
      • DeleteUserpoolDomain
      • DeleteUserSshKey
      • OAuthFederationPrivateTlsCreateCertificate
      • OAuthFederationPrivateTlsDeleteCertificate
      • OAuthFederationPrivateTlsUpdateCertificate
      • ReactivateApplication
      • ReactivateApplication
      • ReactivateFederatedUserAccounts
      • ReactivateUser
      • RejectInvitation
      • RemoveUserBlock
      • ResendInvitation
      • SetApplicationAccessBindings
      • SetApplicationAccessBindings
      • SetDefaultProfile
      • SetGroupAccessBindings
      • SetOrganizationAccessBindings
      • SetUserPassword
      • SetUserpoolAccessBindings
      • SuspendApplication
      • SuspendApplication
      • SuspendFederatedUserAccounts
      • SuspendUser
      • UnbindOrganizationAccessPolicy
      • UpdateApplication
      • UpdateApplication
      • UpdateApplicationAccessBindings
      • UpdateApplicationAccessBindings
      • UpdateApplicationAssignments
      • UpdateApplicationAssignments
      • UpdateBranding
      • UpdateCertificate
      • UpdateFederation
      • UpdateGroup
      • UpdateGroupAccessBindings
      • UpdateGroupMapping
      • UpdateGroupMappingItems
      • UpdateGroupMembers
      • UpdateMfaEnforcement
      • UpdateMfaEnforcementAudience
      • UpdateMfaEnforcementExcludedAudience
      • UpdateOrganization
      • UpdateOrganizationAccessBindings
      • UpdateOrganizationAccessPolicyBindingParameters
      • UpdateOsLoginProfile
      • UpdateOsLoginSettings
      • UpdateSignatureCertificate
      • UpdateSubscribers
      • UpdateSubscriptionLimit
      • UpdateUser
      • UpdateUserpool
      • UpdateUserpoolAccessBindings
      • UpdateUserSshKey
      • UploadSignatureCertificate
      • ValidateFederationDomain
      • ValidateUserpoolDomain
  • Release notes

In this article:

  • Event JSON schema
  • Field description
  • IamAuthentication
  • IamTokenInfo
  • Authorization
  • ResourceMetadata
  • Resource
  • RequestMetadata
  • Status
  • UserpoolEventDetails
  • UserSettings
  • PasswordQualityPolicy
  • Fixed
  • Smart
  • PasswordLifetimePolicy
  • BruteforceProtectionPolicy
  • PasswordBlacklistPolicy
  1. Audit log reference
  2. organizationmanager
  3. UpdateUserpool

Identity Hub Audit Trails Events: UpdateUserpool

Written by
Yandex Cloud
Updated at April 15, 2026
  • Event JSON schema
  • Field description
  • IamAuthentication
  • IamTokenInfo
  • Authorization
  • ResourceMetadata
  • Resource
  • RequestMetadata
  • Status
  • UserpoolEventDetails
  • UserSettings
  • PasswordQualityPolicy
  • Fixed
  • Smart
  • PasswordLifetimePolicy
  • BruteforceProtectionPolicy
  • PasswordBlacklistPolicy

Event JSON schemaEvent JSON schema

{
  "eventId": "string",
  "eventSource": "string",
  "eventType": "string",
  "eventTime": "string",
  "authentication": {
    "authenticated": "boolean",
    // Includes only one of the fields `subjectType`
    "subjectType": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectId`
    "subjectId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectName`
    "subjectName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationId`
    "federationId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationName`
    "federationName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationType`
    "federationType": "string",
    // end of the list of possible fields
    "tokenInfo": {
      "maskedIamToken": "string",
      // Includes only one of the fields `iamTokenId`
      "iamTokenId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorId`
      "impersonatorId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorType`
      "impersonatorType": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorName`
      "impersonatorName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationId`
      "impersonatorFederationId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationName`
      "impersonatorFederationName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationType`
      "impersonatorFederationType": "string"
      // end of the list of possible fields
    }
  },
  "authorization": {
    "authorized": "boolean"
  },
  "resourceMetadata": {
    "path": [
      {
        "resourceType": "string",
        "resourceId": "string",
        // Includes only one of the fields `resourceName`
        "resourceName": "string"
        // end of the list of possible fields
      }
    ]
  },
  "requestMetadata": {
    "remoteAddress": "string",
    "userAgent": "string",
    "requestId": "string",
    // Includes only one of the fields `remotePort`
    "remotePort": "string"
    // end of the list of possible fields
  },
  "eventStatus": "string",
  "error": {
    "code": "integer",
    "message": "string",
    "details": [
      "object"
    ]
  },
  "details": {
    "userpoolId": "string",
    "userpoolName": "string",
    "status": "string",
    "domains": [
      "string"
    ],
    "userSettings": {
      "allowEditSelfPassword": "boolean",
      "allowEditSelfInfo": "boolean",
      "allowEditSelfContacts": "boolean",
      "allowEditSelfLogin": "boolean",
      "allowEditSelfJobInfo": "boolean"
    },
    "passwordQualityPolicy": {
      "allowSimilar": "boolean",
      "maxLength": "string",
      "matchLength": "string",
      // Includes only one of the fields `fixed`, `smart`
      "fixed": {
        "lowersRequired": "boolean",
        "uppersRequired": "boolean",
        "digitsRequired": "boolean",
        "specialsRequired": "boolean",
        "minLength": "string"
      },
      "smart": {
        "oneClass": "string",
        "twoClasses": "string",
        "threeClasses": "string",
        "fourClasses": "string"
      }
      // end of the list of possible fields
    },
    "passwordLifetimePolicy": {
      "minDaysCount": "string",
      "maxDaysCount": "string"
    },
    "bruteforceProtectionPolicy": {
      "window": "string",
      "block": "string",
      "attempts": "string"
    },
    "cookieMaxAge": "string",
    "passwordBlacklistPolicy": {
      "checkCommon": "boolean"
    }
  },
  "requestParameters": "object",
  "response": "object"
}

Field descriptionField description

Field

Description

eventId

string

eventSource

string

eventType

string

eventTime

string (date-time)

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

authentication

IamAuthentication

authorization

Authorization

resourceMetadata

ResourceMetadata

requestMetadata

RequestMetadata

eventStatus

enum (EventStatus)

  • STARTED
  • ERROR
  • DONE
  • CANCELLED
  • RUNNING

error

Status

The error result of the operation in case of failure or cancellation.

details

UserpoolEventDetails

requestParameters

object

response

object

IamAuthenticationIamAuthentication

Field

Description

authenticated

boolean

subjectType

enum (IamSubjectType)

Includes only one of the fields subjectType.

  • YANDEX_PASSPORT_USER_ACCOUNT
  • SERVICE_ACCOUNT
  • FEDERATED_USER_ACCOUNT
  • SSH_USER
  • KUBERNETES_USER

subjectId

string

Includes only one of the fields subjectId.

subjectName

string

Includes only one of the fields subjectName.

federationId

string

Includes only one of the fields federationId.

federationName

string

Includes only one of the fields federationName.

federationType

enum (FederationType)

Includes only one of the fields federationType.

  • GLOBAL_FEDERATION
  • PRIVATE_FEDERATION

tokenInfo

IamTokenInfo

IamTokenInfoIamTokenInfo

Field

Description

maskedIamToken

string

iamTokenId

string

Includes only one of the fields iamTokenId.

impersonatorId

string

Includes only one of the fields impersonatorId.

impersonatorType

enum (IamSubjectType)

Includes only one of the fields impersonatorType.

  • YANDEX_PASSPORT_USER_ACCOUNT
  • SERVICE_ACCOUNT
  • FEDERATED_USER_ACCOUNT
  • SSH_USER
  • KUBERNETES_USER

impersonatorName

string

Includes only one of the fields impersonatorName.

impersonatorFederationId

string

Includes only one of the fields impersonatorFederationId.

impersonatorFederationName

string

Includes only one of the fields impersonatorFederationName.

impersonatorFederationType

enum (FederationType)

Includes only one of the fields impersonatorFederationType.

  • GLOBAL_FEDERATION
  • PRIVATE_FEDERATION

AuthorizationAuthorization

Field

Description

authorized

boolean

ResourceMetadataResourceMetadata

Field

Description

path[]

Resource

ResourceResource

Field

Description

resourceType

string

resourceId

string

resourceName

string

Includes only one of the fields resourceName.

RequestMetadataRequestMetadata

Field

Description

remoteAddress

string

userAgent

string

requestId

string

remotePort

string (int64)

Includes only one of the fields remotePort.

StatusStatus

The error result of the operation in case of failure or cancellation.

Field

Description

code

integer (int32)

Error code. An enum value of google.rpc.Code.

message

string

An error message.

details[]

object

A list of messages that carry the error details.

UserpoolEventDetailsUserpoolEventDetails

Field

Description

userpoolId

string

userpoolName

string

status

enum (Status)

  • CREATING
  • ACTIVE
  • DELETING

domains[]

string

userSettings

UserSettings

passwordQualityPolicy

PasswordQualityPolicy

passwordLifetimePolicy

PasswordLifetimePolicy

bruteforceProtectionPolicy

BruteforceProtectionPolicy

cookieMaxAge

string (duration)

passwordBlacklistPolicy

PasswordBlacklistPolicy

UserSettingsUserSettings

Field

Description

allowEditSelfPassword

boolean

allowEditSelfInfo

boolean

allowEditSelfContacts

boolean

allowEditSelfLogin

boolean

allowEditSelfJobInfo

boolean

PasswordQualityPolicyPasswordQualityPolicy

Field

Description

allowSimilar

boolean

maxLength

string (int64)

matchLength

string (int64)

fixed

Fixed

Includes only one of the fields fixed, smart.

smart

Smart

Includes only one of the fields fixed, smart.

FixedFixed

Field

Description

lowersRequired

boolean

uppersRequired

boolean

digitsRequired

boolean

specialsRequired

boolean

minLength

string (int64)

SmartSmart

Field

Description

oneClass

string (int64)

twoClasses

string (int64)

threeClasses

string (int64)

fourClasses

string (int64)

PasswordLifetimePolicyPasswordLifetimePolicy

Field

Description

minDaysCount

string (int64)

maxDaysCount

string (int64)

BruteforceProtectionPolicyBruteforceProtectionPolicy

Field

Description

window

string (duration)

block

string (duration)

attempts

string (int64)

PasswordBlacklistPolicyPasswordBlacklistPolicy

Field

Description

checkCommon

boolean

Was the article helpful?

Previous
UpdateUser
Next
UpdateUserpoolAccessBindings
© 2026 Direct Cursus Technology L.L.C.