Articles in this section

User management activity log

Updated
Follow

About this article

This article will explain the user management activity log functionality, which information is available, how you can retrieve, and interpret it.

 

Prerequisites

 
  • Admin or owner access to Templafy tenant

 

What is the user management activity log? 

The user management activity log provides access to downloadable CSV files that contain information within a given date range about the following user activities:

  • Activities logged in Users and Partners
  • Activities logged in User Groups
  • Activities logged in Invites
  • Activities logged in Email sign-ins

How to download the user management activity logs?

  1. Navigate to the Users tab
  2. Click on More options
  3. Click on Activity Log
  4. Tick the desired activity logs to be downloaded
  5. Set the time frame
  6. Click download

 

Download_logs_UserManagemenet.gif

 

 

  • The time frame is limited to 30 days at a time and is backward compatible for up to one year.

  • Each activity log will be downloaded as its CSV file.

 

Activities logged in Users and Partners

The Users and Partners activity log files will display activities related to users or partners being created, updated (for example roles or claims), or deleted from the tenant. Each logged activity will contain the date of the activity, who performed the activity, who was affected by the activity, which user type was affected (internal, partner, or invited). Most activities will also display the details of the old value versus the new value.

 

The log file will contain the following information:

  • Date: the date on which the activity took place
  • EntityType: the area of the activity
    • UserAccess: relates to the role of the user or the partner
    • Users: relates to user/partner creation, updates, authentication, or deletion
  • ChangedBy:  who performed the action
    • UserName: a specific user on the tenant 
    • SYSTEM: authentication or SCIM 
  • AffectedId/AffectedName: displays the Id and Name of the user or the partner.
  • AffectedUserType: 
    • Internal: the user is part of the Users tab
    • Partner: the user is part of the Partners tab
    • Invited: the user was invited to the tenant 
  • Action: 
    • Created: the user was created on the tenant
    • Updated: the user or the partner was updated (roles, claims)
    • Deleted: the user was removed from the tenant
    • Revoked: the user or the partner access to the tenant was removed
    • Assigned: the user or the partner was given access to the tenant
  • Difference: displays the details of the old value versus the new value or only the detail of the new value

 

Activities logged in Users Groups

The Users Groups activity log files will display activities related to user groups being created, updated, or deleted from the tenant. Each logged activity will contain the date of the activity, who performed the activity, and which user group was affected by the activity. Most activities will also display the details of the old value versus the new value as well as the detail of the new value.

 

The log file will contain the following information:

  • Date: the date on which the activity took place
  • EntityType: the area of the activity
    • UserGroup: relates to user groups
  • ChangedBy:  who performed the action
    • UserName: a specific user on the tenant 
  • AffectedId/AffectedName: displays the Id and Name of the user group.
  • Action: 
    • Created: the user group was created on the tenant
    • Updated: the user group was updated (name, description, filters)
    • Deleted: the user group was removed from the tenant
  • Difference: displays the details of the old value versus the new value or only the detail of the new value
 

  • Only updates made to the name, the description, or the filters of the group through the Admin Center will appear in the User Management activity log. (Groups updates made directly within the active directory won’t appear in the activity log)

 

Activities logged in Invites

The Invites activity log files will display when an invite has been sent, resent, accepted, or deleted. Each logged activity will contain the date of the activity, who performed the activity, and which user was affected by the activity.

The log file will contain the following information:

  • Date: the date on which the activity took place
  • Invitee: the email address of the user affected by the action
  • Invited by: the email address of the user who performed the action
  • Status:
    • Invited: the invitation was sent to a user
    • Accepted: the invitation was accepted by a user
    • Deleted: the invitation was deleted by a user
      (if “Status changed by” is empty, the user was deleted in the Users tab
    • Resent: the invitation was resent to a user
  • Status changed by: the email address of the user who changed the current status, it can be either the sender's or receiver's email address

Examples:

A user was invited to the tenant:
Invitee: jane.doe@mycompany.com, Status: Invited, Status changed by: john.doe@mycompany.com

The invitation was resent to the user:
Invitee: jane.doe@mycompany.com, Status: Resent, Status changed by: john.doe@mycompany.com

 

Activities logged in Email sign-ins

In the Email sign-ins activity log we show the date of the activity and who signed in with Email authentication (either with the Email authentication method set on the tenant or as an invited user to the tenant).

 

The log file will contain the following information:

  • Date: the date on which the activity took place
  • Email: the email address of the user who attempted to log in
  • Authentication method name: the email authentication id used 
    If this column is empty, it means the user was invited to the tenant through the Invites tab
  • IP Address: the originating IP address
  • Country: the originating country
  • Status: Status of the authentication attempt
    • Success: The provided credentials are correct
    • Failure: Incorrect user credentials
    • Blocked: Incorrect credentials were used 10 times in a row which leads to a temporary ban of the user account (email address).

Examples:

A user signed in using “EU Email” authentication method::
Email: jane.doe@mycompany.com, Authentication method name: EU Email, Status: success

 

An invited user tried signing in with the wrong password:
Email: john.doe@mycompany.com, Authentication method name: empty, Status: failure

 

 

  • SSO sign-in activities will not be logged. This information is usually accessible in the log section of the utilized Identity Provider (IdP). For more information please reach out to your internal IT department.

  • If the EU data protection filter has been enabled on the tenant, the status will log the status as a success, even if the EU data protection filter blocks the access. For more information about the EU data protection filter please refer to the following guide.

  • Requests to reset account passwords are not logged.

 

Related articles

 

 

Related articles

Comments

0 comments

Article is closed for comments.