Audit Logs

The exported CSV file can be opened using any spreadsheet-compatible software and includes the following fields:

ColumnDescription
timestampTime and date at which the event occurred
actor_access_token_idUUID of the access token used for the action
actor_access_token_nameName of the access token used
actor_user_idUUID of the user who performed the action
actor_user_nameUsername of the team member responsible for the event
actor_user_emailEmail address of the team member responsible for the event
actionSpecific action taken (e.g., created, updated, deleted)
previousJSON object showing the object's previous state (if applicable)
nextJSON object showing the object's updated state (if applicable)

An action is either done by a user or an account access token, so at least one of them will always be present.

A federated GraphQL supergraph

Action NameDescription
graph.createdIndicates that a new graph was created
graph.deletedIndicates that a new graph was deleted
graph.updatedIndicates that a new graph was updated

A subgraph within a federated GraphQL supergraph

Action NameDescription
subgraph.createdIndicates that a new subgraph was created
subgraph.deletedIndicates that a subgraph was deleted
subgraph.updatedIndicates that a subgraph was updated
subgraph.publishedIndicates that a schema was published to a graph

Organization and team members

Action NameDescription
member.createdIndicates that a new member was added
member.deletedIndicates that a member was removed
member.updatedIndicates that a member was updated

Graph branches for development and testing

Action NameDescription
branch.createdIndicates that a new branch was created
branch.deletedIndicates that a branch was deleted
branch.updatedIndicates that a branch was updated

Organizational teams for access control

Action NameDescription
team.createdIndicates that a new team was created
team.deletedIndicates that a team was deleted
team.updatedIndicates that a team was updated
team.member.addedIndicates that a member was added to a team
team.member.updatedIndicates that a team member's role was updated
team.member.removedIndicates that a member was removed from a team

User invitations to join the organization

Action NameDescription
invite.createdIndicates that a new invite was created
invite.deletedIndicates that an invite was deleted
invite.updatedIndicates that an invite was updated

Organization management

Action NameDescription
organization.createdIndicates that a new organization was created
organization.updatedIndicates that an organization was updated

API access tokens for programmatic access

Action NameDescription
access_token.createdIndicates that a new access token was created
access_token.deletedIndicates that an access token was deleted
access_token.updatedIndicates that an access token was updated
access_token.graph.addedIndicates that access to a graph was granted to a token
access_token.graph.updatedIndicates that graph access permissions were updated for a token
access_token.graph.removedIndicates that access to a graph was revoked from a token

Audit log export and management operations

Action NameDescription
audit_log.export.downloadedIndicates that an audit log export was downloaded (async)

Trusted documents management for GraphQL operations

Action NameDescription
trusted_document.submittedIndicates that trusted documents were submitted for a client