Audit Events

create_audit_storage_connection

Audit to cloud storage connection is created.

bucketName

cloudStorageType (S3, Azure, GCS, etc)

update_audit_storage_connection

Audit to cloud storage connection is updated.

cloudStorageType (S3, Azure, GCS, etc)

new: {
 bucketName, 
 bucketRegion,
 roleArn
}

(if successful)

old: 
{  
  bucketName,
  bucketRegion,  
  roleArn 
}

delete_audit_storage_connection

Audit to cloud storage connection is deleted.

cloudStorageType (S3, Azure, GCS, etc)

(if successful)

bucketName

create_billing_account

Creation of a billing account.

billingAccountId

billingAccount.getName()

update_billing_account

A modification to the name of the billing account.

billingAccountId

oldBillingAccountName

newBillingAccountName

update_entitlements_quantity

A modification to the number of effective entitlements.

oldEntitlementQuantity

newEntitlementQuantity

no_user_seats_assigned

An attempt to assign 1 or more users a role was rejected because the users were already assigned the specified role.

productPolicyIduserIds

no_user_seats_assigned

An attempt to assign 1 or more users a role was rejected because there were insufficient entitlements.

productPolicyIduserIds

insufficient_seats_quantity_for_role

An attempt to assign 1 or more users a role was rejected because there were insufficient seats for a specific role.

productPolicyId

userIdsWithUnassignedSeat

assign_user_seats

1 or more users have been assigned a role.

userIdsWithUnassignedSeat

productPolicyId

revoke_user_seats_due_to_overages

An attempt to add assigned seats exceeded the contracted values and the seats causing overages have been revoked.

removedProductPolicyIds

removedUserIds

update_workspace_tier

A modification to the contract tier.

oldTierName

newTierName

workspaceName

provision_product

A product entitlement has been provisioned as a result of a change to the contract.

productName

productSKU

deprovision_product

A product entitlement has been removed as a result of an expired contract.

productName

productSKU

A product entitlement has been removed as a result of an expired contract

A product has been enabled in a workspace as a result of a change to the contract.

A product has been enabled in a workspace as a result of a change to the contract

A product has been disabled in a workspace as a result of an expired contract.

enable_api_access

An API access token has been set up as a result of a contract change.

licenseBillingService

An API access token has been set up as a result of a contract change

An API access token has been disabled as a result of an expired contract.

revoke_user_seats

Seats have been revoked.

removedProductPolicyIds

removedUserIds

no_user_seats_to_revoke

An attempt to remove seats occurred, but it was not successful as there are no seats to be revoked.

removedProductPolicyIds

removedUserIds

create_workflow

Creating a new workflow. workflowMode could be: Cloud Native, Standard.

assetId

workflowName

workflowMode

import_workflow

Importing workflow is complete.

assetId

workflowName

delete_workflow

Workflow is deleted.

assetId

workflowName

workflow_run_initiated

Initiating Full Run execution for workflow. initiatedFrom could be: Schedule, Plans, Cloud.

assetId

workflowName

initiatedFrom

export_workflow

Workflow is exported.

assetId

workflowName

update_workflow

Capturing any update to a workflow (when a new version was added for workflow).

assetId

workflowName

rename_workflow

Renaming workflow.

assetId

oldWorkflowName

newWorkflowName

set_workflow_version_name

Setting a name for specific workflow version.

assetId

versionId

versionName

remove_access_workflow

Removing access for workflow.

assetId

workflowName

removedAccessUserId

removedAccessUserEmail

share_access_workflow

Sharing access on workflow. permishionType could be: view/edit.

assetId

workflowName

shareeUserId

shareeEmail

permishionType

create_schedule

Schedule created.

asset_type

asset_id(s)

modify_schedule

Schedule modified.

asset_type

asset_id(s)

enable_schedule

Schedule enabled.

asset_type

asset_id(s)

disable_schedule

Schedule disabled.

asset_type

asset_id(s)

delete_schedule

Schedule deleted.

asset_type

asset_id(s)

create_schedule_data_connection

Schedule data connection created.

asset_type

asset_id(s)

update_schedule_data_connection

Schedule data connection updated.

asset_type

asset_id(s)