A possible solution from different sites was to check using workspace & admin API. But the login date/time was of the admin console only, not gcp.