Skip to main content

Audit log: who did what in your workspace

The two logs owners and admins can read — the workspace audit log and the access log in Members — what they record and how to search them.

M
Monfri Team
Updated ·4 min read

Monfri writes down the important things that happen in a workspace: who signed in, who changed a setting, who gave whom access. Owners and admins can read it in two places.

The workspace audit log

In the menu on the left, open Audit log. The page Audit Log lists every entry, newest first:

Column What it shows
Date When it happened.
User Who did it — a member of your workspace, or Monfri support.
Action The kind of event, for example org.updated or service.activated.
Description The details in words, for example Invited [email protected] as member.

To search, choose an Action, a From and a To date and click Filter. Clear shows everything again. The list shows 25 entries a page: Showing 1 to 25 of … entries.

What it records

Area Actions
Sign-ins and accounts user.logged_in, user.password_changed, user.email_changed, user.profile_updated
Workspace org.created, org.updated (the settings), workspace.sample_data_removed, workspace.export_requested, workspace.export_downloaded, workspace.deletion_requested, workspace.deletion_cancelled
Team member.invited, member.joined, member.role_changed, member.removed, member.left
Services service.activated, service.deactivated, service.provisioned
Billing billing.checkout_initiated, billing.subscription_created, billing.subscription_updated, billing.subscription_cancelling, billing.payment_failed
Security security.csp.suspended, security.csp.lifted
Monfri support admin.organization.viewed, admin.impersonation.started, admin.impersonation.stopped, and changes support made, such as admin.trial.extended or admin.plan.assigned

The Action list shows only the actions that have happened in your workspace so far.

A sign-in is written to the workspace the person was in at that moment.

When Monfri support looks at your workspace

Support opens a workspace only to help — when you ask, or to fix a problem. Every time it does, the log says so: admin.organization.viewed when someone from Monfri opened your workspace in the support tools, and admin.impersonation.started and admin.impersonation.stopped when they worked in it as you would. If you see an entry you did not expect, write to [email protected].

The access log in Members

Members → Audit log is a separate log only of access: invitations, roles and service access. It has its own filters — the action, a from date and a to date — and Refresh.

Column What it shows
When The time.
Action What happened.
Actor Who did it.
Target Whose access changed.
Details The role, the services, the reason.

Its actions:

Action Meaning
INVITE_SENT, INVITE_REVOKED, INVITE_ACCEPTED An invitation was sent or resent, revoked, or accepted.
ACCESS_GRANTED, ACCESS_REVOKED Access to a service was given or taken away.
ROLE_CHANGED The workspace role changed.
OWNERSHIP_TRANSFERRED Monfri support handed the workspace to a new primary owner.
RESOURCE_REVOKE A guest lost a record. The records a guest gets come with the invitation.
MEMBER_REMOVED Someone was removed from the workspace.
ACCESS_REQUEST_CREATED, _APPROVED, _DENIED, _CANCELLED, _EXPIRED An access request and what became of it.

Entries in the access log are kept for one year.

Each service has its own history

The audit log covers the Hub: the account, the workspace, the team, the services and billing. What people do inside a service — editing a contact, sending a campaign, publishing a flow — is recorded in that service, for example in the history of a CRM contact or the runs of a flow.

If something doesn't work

I don't see Audit log in the menu

Only owners and admins have it. Ask an owner to make you an admin, or to look for you.

The access log shows nothing

The tab is for owners and admins. For everyone else it stays empty.

No audit log entries found.

Nothing matches the filters. Click Clear, then narrow down again.

Didn't find your answer?

Write to us and tell us what you were trying to do.