Timeline, time and audit
Audit trail
Administrative and security actions recorded for the organization, who can read them, and how the audit view differs from the activity stream.
On this page
The audit trail records administrative and security actions in your organization — who changed a permission, who removed a user, who changed a setting — so you can answer who did this, and when.
Availability
- Who
- The Owner, and anyone with View audit trail or Manage organization settings (both owner-sensitive)
- Where
- Workspace → Timeline → Audit (
/workspace/timeline/audit)
What it records#
Administrative and security actions, such as:
- people added, changed, disabled or removed,
- roles and permissions granted or revoked,
- organization settings and security rules changed,
- and other administrative changes to the organization.
Filter by area and search, as in the stream.
Audit versus the activity stream#
| Stream | Audit | |
|---|---|---|
| Records | Everyday work across modules | Administrative and security actions |
| Who sees it | Everyone, filtered to the modules they can access | Only people allowed to read the audit trail |
The admin console audit log#
The admin console has its own audit log view for security-sensitive admin and compliance logs, which is included in the Enterprise plan. See Security and sign-in.