Audit log
See every change, sign-in and password reveal, and who did it.
The audit log records what happens in your workspace, so you can always answer "who changed this?" or "who looked at that password?".
Open it from Admin → Audit log. You need the View the audit log permission.
What's recorded
| Kind | Examples |
|---|---|
| Changes | Creating, updating, deleting, moving, tagging and relating items |
| Passwords | Every reveal and copy, in the app and through the API |
| Sign-ins | Successful and failed sign-ins, two-factor turned on or off |
| Access | Restrictions and grants on items, user and role changes, API keys |
| Automation | Changes made by Ask AI (shown as "AI: …"), the API ("API: …"), bulk actions ("Bulk: …"), and PSA/RMM syncs |
Each entry shows when it happened, who did it, the action, the details and the IP address.
Filter the log
Use the action filter to show only one kind of entry, for example only reveal to see password access. Use the page links to go further back.
Activity on pages
Each organization's Overview and the dashboard show recent activity. They follow the same access rules as everything else, so people only see activity for clients and items they can access.
Tip: Want to be told instead of having to look? Notification rules can alert you about password reveals, failed sign-ins, deletions and security changes as they happen.