Unexpected rooted alert?
I got this same thing. I have Google for business and my devices that access the business accounts are managed by the google system. It is a SM-P610 Samsung, and I have personal and work accounts on it. It alerted &quot;An Android device was rooted&quot; at 7:23AM then later at 8:32 alerted that &quot;An Android device was recovered from rooted state&quot;.
The alerts are from google.admin.com, through the Google for Business account.