get https://api.mural.co/enterprise/v1/audit-log
Retrieve member audit events for your company for up to 30 consecutive days. If you don’t define a specific time range using the filter[date][since] and filter[date][until] fields, the API returns events from the past 7 days.
Note: The full list of parameters was implemented June 1, 2021. Requests prior to this date may not contain all available audit log parameters.
Entity can be one of the following: APIKEY, BILLING_GROUP, COMPANY, EMAIL, HUB, MURAL, REFCODE, ROOM, SLACK_COMMAND, TEMPLATE, USER, WORKSPACE
List of attributes response:
- actor
- The entity that performed the action (APIKEY, USER, COMPANY).
- action
- The type of action performed.
- affected
- The entity that was affected by the action.
- company
- The company that the entity belongs to.
- date
- The date and time (UTC) when the action occurred.
- destination
- The target location of the affected entity.
- The email address of the entity.
- id
- A unique identifier for this specific action occurrence.
- ip
- The source IP address of the requesting entity.
- snapshotDate
- The date and time (UTC) of the last time this entry was extracted
- name
- The name of the entity.
- origin
- The source location of the affected entity.
- type
- The entity type.
List of actions:
- ABORT_VOTING_SESSION
- Aborted voting session
- ACCEPT_MEMBERSHIP
- Accepted membership request to join workspace
- ACCEPT_REACTIVATION_REQUESTS
- Accepted reactivation requests
- ACCEPT_TERMS_AND_CONDITIONS
- Accepted terms and conditions
- ACCESS_AUDIT_LOG
- Accessed audit log
- ACCESS_DENIED
- Access denied
- ACCESS_REPORTS_MURALS
- Access Reports Murals
- ACCESS_REPORTS_QEMS
- Access Reports QEMs
- ACCESS_REPORTS_ROOM_MEMBERSHIPS
- Access Reports Room Memberships
- ACCESS_REPORTS_ROOMS
- Access Reports Rooms
- ACCESS_REPORTS_TEMPLATES
- Access Reports Templates
- ACCESS_REPORTS_USERS
- Access Reports Users
- ACCESS_REPORTS_WORKSPACE_MEMBERSHIPS
- Access Reports Workspace Memberships
- ACCESS_REPORTS_WORKSPACES
- Access Reports Workspaces
- ACTIVATE_CONTENT_KEY
- Activated top-level CEK (Content Encryption Key)
- ACTIVATE_DATA_KEY
- Activated a DEK (Data Encryption Key) for a mural, template, etc.
- ADD_COMPANY_ADMINS
- Added more than one company administrator
- ADD_COMPANY_CLIENT_APPS
- Added company client applications
- ADD_COMPANY_DOMAINS
- Added company domains
- ADD_COMPANY_MEMBER
- Added a company member
- ADD_FACILITATOR
- Added facilitator
- ADD_FAVORITE_CUSTOM_TEMPLATE
- Added favorite custom template
- ADD_FAVORITE_GLOBAL_TEMPLATE
- Added favorite global template
- ADD_FAVORITE_ROOM
- Added room as favorite
- ADD_FAVORITE
- Added favorite
- ADD_GLOBAL_ADMIN
- Added global admin
- ADD_GROUP_MEMBER
- Added a user to a group
- ADD_IMAGE
- Added image to mural
- ADD_INTEGRATION
- Added integration
- ADD_RECENT
- Added mural to recent
- ADD_SLACK_TO_PROFILE
- Added Slack to profile
- ADD_VISITOR_PASSWORD
- Added a visitor password for accessing a mural
- ADD_WORKSPACE_ADMIN
- Added admin to mural or room via direct link
- ADD_WORKSPACE_TO_GROUP
- Added a workspace to a group
- AI_AUTO_CLUSTER
- Clustered widgets with AI
- AI_ENHANCE
- Enhanced widgets with AI
- AI_GENERATE_IDEAS
- Generated ideas with AI
- AI_SUGGEST_TITLE
- Suggested title with AI
- ARCHIVE_MURAL
- Archived mural
- CHAT
- Sent a chat message
- CONVERT_TO_GUEST_INVITATION
- Converted an invitation to a guest invitation
- CONVERT_TO_GUEST
- Converted user to guest
- CONVERT_TO_MEMBER_INVITATION
- Converted an invitation to a member invitation
- CONVERT_TO_MEMBER
- Converted user to member
- CREATE_ACCOUNT
- Created account
- CREATE_CLIENT_APP
- Created a client app
- CREATE_COMPANY_API_KEY
- Created company API key
- CREATE_COMPANY
- Created company
- CREATE_CONTENT_ENCRYPTION_KEY
- Created a CEK (Content Encryption Key)
- CREATE_DATA_ENCRYPTION_KEY
- Created a DEK (Data Encryption Key)
- CREATE_EMAIL_CODE
- Created an email code
- CREATE_EMBED_KEY
- Created an embed token
- CREATE_FOLDER
- Created a folder
- CREATE_GROUP
- Created a group
- CREATE_KMS_CLOUD_CONFIG
- Created cloud KMS (Key Management Service) configuration
- CREATE_MFA_SECRETS
- Created Multi-Factor Authentication secrets
- CREATE_MURAL_CONTENT
- Created mural content
- CREATE_MURAL
- Created mural
- CREATE_OR_UPDATE_USER_QUEST
- Created or updated user Quest schema
- CREATE_ROOM
- Created room
- CREATE_SNIPPET
- Created snippet
- CREATE_SSO_CONFIG
- Created Single Sign-On config
- CREATE_TEMPLATE_CONTENT
- Created template content
- CREATE_TEMPLATE
- Created template
- CREATE_USER_PROFILE
- Created user profile
- CREATE_USER_SESSION
- Created user session
- CREATE_VISITOR_TOKEN
- Created visitor token
- CREATE_WORKSPACE
- Created workspace
- DEACTIVATE_CONTENT_KEY
- Deactivated top-level CEK (Content Encryption Key)
- DEACTIVATE_DATA_KEY
- Deactivated a DEK (Data Encryption Key) for a mural, template, etc.
- DEACTIVATE_USER_FROM_WORKSPACE
- Deactivated a user from the workspace
- DELETE_ACCOUNT
- Deleted user account in product
- DELETE_CLIENT_APP
- Deleted client app
- DELETE_COMPANY_API_KEY
- Deleted company API key
- DELETE_FOLDER
- Deleted a folder
- DELETE_GROUP
- Deleted a group
- DELETE_INTEGRATION
- Deleted integration
- DELETE_MFA_SECRETS
- Deleted Multi-Factor Authentication secrets
- DELETE_MULTIPLE_VOTING_SESSION
- Deleted mutiple voting session
- DELETE_MURAL_EMBED_KEY
- Deleted all embed keys for a mural
- DELETE_MURAL_MEMBER
- Deleted mural member
- DELETE_MURAL
- Deleted mural
- DELETE_PENDING_INVITATION
- Deleted pending invitation
- DELETE_ROOM_MEMBER
- Deleted a room member
- DELETE_ROOM
- Deleted a room
- DELETE_TEMPLATE_EMBED_KEY
- Deleted all embed keys for a template
- DELETE_TEMPLATE
- Deleted a template
- DELETE_USER_SESSIONS
- Deleted user sessions
- DELETE_USER
- Deleted user via SCIM
- DELETE_WORKSPACE_MEMBER
- Deleted a workspace member
- DELETE_WORKSPACE
- Deleted a workspace
- DEVICE_REGISTERED
- Registered a device
- DISABLED_FILE_RESTRICTION_DOWNLOAD
- Disabled file restriction for downloads
- DISABLED_FILE_RESTRICTION_UPLOAD
- Disabled file restriction for uploads
- DOWNLOAD_QEMS_REPORT_CSV
- Download QEMs report CSV
- DUPLICATE_MURAL
- Duplicated mural
- DUPLICATE_ROOM
- Duplicated room
- EDIT_SNIPPET
- Edited snippet
- ENABLED_AUTOMATIC_PROVISIONING_CUSTOM_SUPPORT_LINK
- Enabled automatic mode of provisioning with custom link for the support page
- ENABLED_AUTOMATIC_PROVISIONING_CUSTOM_SUPPORT_PAGE
- Enabled automatic mode of provisioning with custom content for the support page
- ENABLED_AUTOMATIC_PROVISIONING
- Enabled automatic mode of provisioning through SCIM
- ENABLED_FILE_RESTRICTION_DOWNLOAD
- Enabled file restriction for downloads
- ENABLED_FILE_RESTRICTION_UPLOAD
- Enabled file restriction for uploads
- ENABLED_MANUAL_PROVISIONING
- Enabled manual mode of provisioning
- END_VOTING_SESSION
- Ended voting session
- ENQUEUE_WIDGET
- Added a widget to widget queue
- EXPORT_MURAL_DATA
- Exported mural data
- EXPORT_MURAL_IMAGE
- Exported mural as an image
- EXPORT_MURAL_PDF
- Exported mural as a pdf
- FAILED_LOGIN_INVALID_PASSWORD
- Failed to login because of invalid password
- FETCH_ENTITY
- Fetched entity
- FILE_PREVIEW
- Added file to mural
- FIX_MURAL_MEMBERS
- Fixed mural members
- FREE_TRIAL_EXPIRED
- Free trial expired
- GENERATE_MURAL_INVITE_LINK
- Generated a mural invite link
- GENERATE_ROOM_INVITE_LINK
- Generated a room invite link
- GENERATE_WORKSPACE_INVITE_LINK
- Generated a workspace invite link
- IMPERSONATE_USER
- Impersonated another user
- INVITE_MEMBER
- Invited a member to destination
- JOIN_ROOM
- Joined a room
- JOIN_WORKSPACE
- Joined workspace
- LEAVE_MURAL
- Member left a mural
- LEAVE_ROOM
- Left a room
- LEAVE_WORKSPACE
- Member left a workspace
- MEMBER_LIMIT_REACHED
- Reached member limit
- MODIFIED_FILE_RESTRICTION_DOWNLOAD_EXTENSIONS
- Modified file restriction download extensions
- MODIFIED_FILE_RESTRICTION
- Modified file restriction
- MOVE_COMPANY_MEMBER
- Moved a company member
- MOVE_FOLDER
- Moved a folder
- MOVE_MURAL_CONTENT
- Moved mural content
- MOVE_MURAL
- Moved a mural
- MOVE_ROOM
- Moved a room
- MOVE_WORKSPACE
- Moved workspace
- MURAL_UPGRADED
- User upgraded automatically to new mural version
- PRIVATE_TIME_BEGIN
- Private time began
- PRIVATE_TIME_END
- Private time ended
- PUSH_TO_HUB
- Pushed mural to Microsoft Surface Hub
- REACTIVATE_MEMBER
- Activated a suspended member
- REGISTER_CUSTOMER_MANAGED_KEY_ENCRYPTION_KEY
- Registered a customer-managed key
- REJECT_MEMBERSHIP
- Rejected a membership request
- REJECT_REACTIVATION_REQUESTS
- Rejected reactivation requests
- REMOVE_COMPANY_ADMINS
- Removed more than one company adminstrator
- REMOVE_COMPANY_CLIENT_APPS
- Removed company client applications
- REMOVE_COMPANY_DOMAINS
- Removed company domains
- REMOVE_COMPANY_MEMBER
- Removed a company member
- REMOVE_FAVORITE_ROOM
- Removed room from favorites
- REMOVE_FAVORITE
- Removed favorite
- REMOVE_GLOBAL_ADMIN
- Removed global admin
- REMOVE_GROUP_MEMBER
- Removed a user from a group
- REMOVE_GROUP_USER_TYPE
- A 'user type' was removed from a group
- REMOVE_MURALS_FROM_PROFILE
- Removed murals from profile
- REMOVE_PARTIAL_MEMBER
- Removed partial member
- REMOVE_PASSWORD_RESET_TOKEN
- Removed password reset token
- REMOVE_ROOM_INVITE_LINK
- Removed a room invite link
- REMOVE_VISITOR_PASSWORD
- Removed visitor password for mural
- REMOVE_WORKSPACE_FROM_GROUP
- Removed a workspace from a group
- RENAME_MURAL
- Renamed a mural
- RENAME_ROOM
- Renamed a room
- RENAME_WORKSPACE
- Renamed a workspace
- REQUEST_ACCOUNT_REACTIVATION
- Requested account reactivation
- REQUEST_MEMBERSHIP
- Requested to become a member of a destination
- REQUEST_REACTIVATION
- Requested reactivation
- RESEND_INVITE_MEMBER
- Resent member invite
- RESET_PASSWORD
- Reset password
- RESET_VISITOR_LINK
- Reset visitor link
- SEEN_CHAT
- Viewed chat
- SEEN_MURAL
- Viewed mural
- SEND_EXPORTS_EMAIL
- Exports email was sent
- SEND_GUEST_DOMAIN_RESTRICTION_EMAIL
- Guest domain restriction email was sent
- SEND_JOIN_MURAL_INVITATION
- Join mural invitation was sent
- SEND_MFA_DISABLED_EMAIL
- Multi-Factor Authentication disabled email was sent
- SEND_MFA_ENABLED_EMAIL
- Multi-Factor Authentication enabled email was sent
- SEND_RESET_PASSWORD
- Reset password was sent
- SEND_USED_ALL_RECOVERY_CODES
- All used recovery codes were sent
- SEND_VERIFY_EMAIL_WITH_CODE
- Email verification with code was sent
- SEND_VERIFY_EMAIL
- Email verification was sent
- SET_COLLAB_STATUS
- Collaboration status was set
- SET_TEMPLATE_WIDGETS
- Template widgets was set
- SIGN_IN_FAILURE
- Sign in failed
- SIGN_IN
- Signed in
- SIGN_OUT
- Signed out
- SIGN_UP
- Signed up
- SOFT_LIMIT_USER_HIT
- Soft limit reached for user
- START_VOTING_SESSION
- Started voting session
- SUBSCRIPTION_SUSPENDED
- Suspended subscription
- SUSPEND_USER
- Suspended a member
- SUSPEND_USERS
- Suspended members
- SYNC_COMPANY_MEMBERS
- Synced company members
- SYNC_COMPANY_WORKSPACES
- Synced company workspaces
- SYNC_WITH_CONTENTFUL
- Synced with Contentful
- TIMER_START
- Started timer
- TIMER_STOP
- Stopped timer
- TRANSFER_OWNERSHIP
- Transferred entity ownership
- UNSUSPEND_USER
- Unsuspended a member
- UNSUSPEND_USERS
- Unsuspended members
- UPDATE_ACTIVITY
- Updated activity
- UPDATE_CLIENT_APP
- Updated client app
- UPDATE_COMPANY_MEMBER
- Updated company member information
- UPDATE_COMPANY_SETTINGS
- Updated company settings
- UPDATE_COMPANY_SSO
- Updated company Single Sign-On
- UPDATE_COMPANY
- Updated company information
- UPDATE_EMBED_KEY_STATUS
- Updated status of an embed key
- UPDATE_FOLDER
- Updated folder
- UPDATE_GLOBAL_ADMIN
- Updated global admin
- UPDATE_GROUP_NAME
- Updated a group name
- UPDATE_GROUP_PERMISSIONS
- Updated permissions of a group
- UPDATE_GROUP_USER_TYPE
- A 'user type' was added to a group
- UPDATE_MEMBER_EMAIL_SCIM
- Updated member email via SCIM
- UPDATE_MEMBER_FIRSTNAME
- Updated member first name
- UPDATE_MEMBER_LASTNAME
- Updated member last name
- UPDATE_MURAL_LINK
- Updated mural link
- UPDATE_MURAL_MEMBER_SETTINGS
- Updated member settings of a mural
- UPDATE_MURAL_MEMBER
- Updated mural member
- UPDATE_MURAL_MIGRATION
- Updated mural migration
- UPDATE_MURAL_PROPERTY
- Updated properties of a mural
- UPDATE_ORGANIZATION
- Updated organization
- UPDATE_PARTNER
- Updated partner
- UPDATE_PROFILE
- Updated profile
- UPDATE_ROOM_MEMBER_SETTINGS
- Updated room member settings
- UPDATE_ROOM_MEMBER
- Updated room member
- UPDATE_ROOM
- Updated room
- UPDATE_SHARE_SETTINGS
- Updated share settings
- UPDATE_TEMPLATE_PROPERTY
- Updated template property
- UPDATE_USER_LICENSE
- Updated user license
- UPDATE_WIDGET
- Updated an existing widget
- UPDATE_WORKSPACE_BILLING_EMAIL
- Updated workspace billing email
- UPDATE_WORKSPACE_MEMBER_SETTINGS
- Updated workspace member settings
- UPDATE_WORKSPACE_MIGRATION
- Updated workspace migration
- UPDATE_WORKSPACE_OWNER
- Updated the workspace owner
- UPDATE_WORKSPACE_SETTINGS
- Updated the workspace settings
- VERIFY_EMAIL_WITH_CODE_RETRY
- Verified a member email by code retry
- VERIFY_EMAIL_WITH_CODE
- Verified a member email by code
- VERIFY_EMAIL
- Verified a member email
- VISITOR_CREATED_ACCOUNT
- Account created by visitor