> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/user.md).

# User

The **GCPUser** entity represents a Google Cloud / Google Workspace user account.

| Field                       | Type    | Possible Operators                                                 | Description                                               |
| --------------------------- | ------- | ------------------------------------------------------------------ | --------------------------------------------------------- |
| Guid                        | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Unique identifier for the entity in FSProtect             |
| FSName                      | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Display name used in FSProtect                            |
| GCPTier                     | NUMBER  | Equal, Between, Smaller, Larger, Smaller or Equal, Larger or Equal | GCP tier classification assigned by FSProtect             |
| Domain                      | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Domain the user belongs to                                |
| Aliases                     | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Email aliases associated with the user                    |
| ChangePasswordAtNextLogin   | BOOLEAN | Equal, Not Equal                                                   | Whether the user must change their password on next login |
| CreationTime                | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Timestamp when the user account was created               |
| CreationTimeDateTimeOffset  | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Creation time with timezone offset                        |
| CustomerId                  | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Google Workspace customer ID                              |
| DeletionTime                | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Timestamp when the user account was deleted               |
| Emails                      | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | All email addresses associated with the user              |
| GuestAccountEmail           | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Email address of the guest account                        |
| Id                          | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Google-assigned unique user ID                            |
| IsAdmin                     | BOOLEAN | Equal, Not Equal                                                   | Whether the user has super admin privileges               |
| IpWhitelisted               | BOOLEAN | Equal, Not Equal                                                   | Whether the user's IP address is whitelisted              |
| IsDelegatedAdmin            | BOOLEAN | Equal, Not Equal                                                   | Whether the user is a delegated administrator             |
| IsEnforcedIn2Sv             | BOOLEAN | Equal, Not Equal                                                   | Whether 2-step verification is enforced for the user      |
| IsEnrolledIn2Sv             | BOOLEAN | Equal, Not Equal                                                   | Whether the user is enrolled in 2-step verification       |
| IsGuestUser                 | BOOLEAN | Equal, Not Equal                                                   | Whether the account is a guest user                       |
| Kind                        | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Resource kind identifier from Google                      |
| LastLoginTime               | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Timestamp of the user's last login                        |
| LastLoginTimeDateTimeOffset | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Last login time with timezone offset                      |
| DisplayName                 | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Full display name of the user                             |
| GivenName                   | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | First name of the user                                    |
| LastName                    | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Last name of the user                                     |
| NonEditableAliases          | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Aliases that cannot be edited                             |
| OrgUnitPath                 | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Organizational unit path the user belongs to              |
| PrimaryEmail                | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Primary email address of the user                         |
| RecoveryEmail               | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Recovery email address for the user                       |
| Relations                   | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | User relations (e.g. manager, assistant)                  |
| Suspended                   | BOOLEAN | Equal, Not Equal                                                   | Whether the user account is suspended                     |
| SuspensionReason            | TEXT    | Like, Not Like, Equal, Not Equal, Is Empty                         | Reason for account suspension                             |
| risk                        | NUMBER  | Equal, Between, Smaller, Larger, Smaller or Equal, Larger or Equal | Risk score assigned to the entity                         |
| ExposurePoint               | NUMBER  | Equal, Between, Smaller, Larger, Smaller or Equal, Larger or Equal | Exposure point score assigned to the entity               |
| IsStealth                   | BOOLEAN | Equal, Not Equal                                                   | Whether the entity is marked as stealth                   |