Skip to content

Review governance and integration events

See the governance actions taken on your tenant, and from which plane each was made: by your own tenant administrators or by a platform operator. Read the audit events of one integration of your tenant.

Who can do it

A tenant administrator or a tenant auditor, and a platform super administrator or platform auditor. Both reads need the permission to read the administrative trail, or to read every trail.

Before you start

  • Governance actions are administrative changes to the tenant's own configuration: its policies, key backend, actors, grants, exchange contexts, integrations and settings.
  • An integration's events have no console control on the tenant plane; see "Without the console".

Steps

  1. Open Settings from your tenant's navigation.
  2. Open the Activity tab. It lists Governance actions on this tenant, newest first, with When, Action, Actor and Plane.
  3. To see the actions of one plane only, choose it in Acting plane. Show all planes removes the filter.

What you see when it worked

Each action names what changed and the plane it was made from: Tenant administrator or Platform operator. Where the deployment withholds a platform operator's identity, the actor reads "Identity withheld". Actions taken before plane attribution was recorded carry none and are not shown here; they remain in your Audit Log.

If it fails

What you see Cause What to do
"Administrative changes are not shown because your access does not include reading this tenant's administrative audit trail. Nothing was requested for it." You do not hold the permission to read the administrative trail Ask for a role that adds it, such as the tenant auditor role
"No governance actions taken from {plane} are recorded for this tenant." Nothing was done from that plane Select Show all planes

Without the console

The console has no tenant-plane control for one integration's events; use the API for that.

Surface How
API, governance actions GET /api/v3/audit/tenants/{tenantId}/governance/events (operation listTenantGovernanceEvents), optional actorPlane, page (from 0) and size (20 by default). A plane the deployment withholds returns an empty page
API, one integration's events (no console control) GET /api/v3/audit/tenants/{tenantId}/integrations/{slug}/events (listTenantIntegrationAuditEvents), page and size (25 by default)

There is no CLI command and no admin SDK method for these reads.