About this article
This article will explain the user management activity log functionality, which information is available, how you can retrieve, and interpret it.
- What is the user management activity log?
- How to download the user management activity logs?
- Activities logged in Users and Partners
- Activities logged in Users Groups
- Activities logged in Invites
- Activities logged in Email sign-ins
Prerequisites
|
What is the user management activity log?
The user management activity log provides access to downloadable CSV files that contain information within a given date range about the following user activities:
- Activities logged in Users and Partners
- Activities logged in User Groups
- Activities logged in Invites
- Activities logged in Email sign-ins
How to download the user management activity logs?
- Navigate to the Users tab
- Click on
More options
- Click on
Activity Log
- Tick the desired activity logs to be downloaded
- Set the time frame
- Click
download
|
Activities logged in Users and Partners
The Users and Partners activity log files will display activities related to users or partners being created, updated (for example roles or claims), or deleted from the tenant. Each logged activity will contain the date of the activity, who performed the activity, who was affected by the activity, which user type was affected (internal, partner, or invited). Most activities will also display the details of the old value versus the new value.
The log file will contain the following information:
Date
: the date on which the activity took placeEntityType
: the area of the activityUserAccess
: relates to the role of the user or the partnerUsers
: relates to user/partner creation, updates, authentication, or deletion
ChangedBy
: who performed the actionUserName
: a specific user on the tenantSYSTEM
: authentication or SCIM
AffectedId/AffectedName
: displays the Id and Name of the user or the partner.AffectedUserType
:Internal
: the user is part of the Users tabPartner
: the user is part of the Partners tabInvited
: the user was invited to the tenant
Action
:Created
: the user was created on the tenantUpdated
: the user or the partner was updated (roles, claims)Deleted
: the user was removed from the tenantRevoked
: the user or the partner access to the tenant was removedAssigned
: the user or the partner was given access to the tenant
Difference
: displays the details of the old value versus the new value or only the detail of the new value
Activities logged in Users Groups
The Users Groups activity log files will display activities related to user groups being created, updated, or deleted from the tenant. Each logged activity will contain the date of the activity, who performed the activity, and which user group was affected by the activity. Most activities will also display the details of the old value versus the new value as well as the detail of the new value.
The log file will contain the following information:
Date
: the date on which the activity took placeEntityType
: the area of the activityUserGroup
: relates to user groups
ChangedBy
: who performed the actionUserName
: a specific user on the tenant
AffectedId/AffectedName
: displays the Id and Name of the user group.Action
:Created
: the user group was created on the tenantUpdated
: the user group was updated (name, description, filters)Deleted
: the user group was removed from the tenant
Difference
: displays the details of the old value versus the new value or only the detail of the new value
|
Activities logged in Invites
The Invites activity log files will display when an invite has been sent, resent, accepted, or deleted. Each logged activity will contain the date of the activity, who performed the activity, and which user was affected by the activity.
The log file will contain the following information:
Date
: the date on which the activity took placeInvitee
: the email address of the user affected by the actionInvited by
: the email address of the user who performed the actionStatus
:Invited
: the invitation was sent to a userAccepted
: the invitation was accepted by a userDeleted
: the invitation was deleted by a user
(if “Status changed by” is empty, the user was deleted in the Users tabResent
: the invitation was resent to a user
Status changed by
: the email address of the user who changed the current status, it can be either the sender's or receiver's email address
Examples:
A user was invited to the tenant:
Invitee: jane.doe@mycompany.com, Status: Invited, Status changed by: john.doe@mycompany.com
The invitation was resent to the user:
Invitee: jane.doe@mycompany.com, Status: Resent, Status changed by: john.doe@mycompany.com
Activities logged in Email sign-ins
In the Email sign-ins activity log we show the date of the activity and who signed in with Email authentication (either with the Email authentication method set on the tenant or as an invited user to the tenant).
The log file will contain the following information:
Date
: the date on which the activity took placeEmail
: the email address of the user who attempted to log inAuthentication method name
: the email authentication id used
If this column is empty, it means the user was invited to the tenant through the Invites tabIP Address
: the originating IP addressCountry
: the originating countryStatus
: Status of the authentication attemptSuccess
: The provided credentials are correctFailure
: Incorrect user credentialsBlocked
: Incorrect credentials were used 10 times in a row which leads to a temporary ban of the user account (email address).
Examples:
A user signed in using “EU Email” authentication method::
Email: jane.doe@mycompany.com, Authentication method name: EU Email, Status: success
An invited user tried signing in with the wrong password:
Email: john.doe@mycompany.com, Authentication method name: empty, Status: failure
|
Related articles
Comments
0 comments
Article is closed for comments.