Audit events of the platform

The same log as in the tenant view, without the restriction to one tenant. This view requires the rtlscloud Admin role.

Event list

Audit events of the platform

What is different here

There are two views of the same log:

  • The tenant view shows only events concerning the tenant you are signed in with. The restriction cannot be switched off — this view has neither a column nor a filter for the tenant.

  • The platform view shows every event of the installation, with the tenant as a column of its own and as a filter. It requires the rtlscloud Admin role.

Part of the events carry no tenant — sign-ins, password changes, and everything concerning user accounts and tenants themselves. These events are not included in the tenant view, not even when they concern users of your own tenant.

Auditing sign-ins or password changes therefore requires platform access.

Concretely, this view differs in three points:

  • It shows the events of all tenants, and in addition those assigned to no tenant. That is the reason it exists at all.

  • It has the additional column Tenant.

  • It has the additional filter Tenant, which narrows the view to a single tenant — by choice, unlike in the tenant view.

The filters, the export and the retention are the same and are described under Audit events, together with the events a tenant sees as well.

Events only in this view

These types carry no tenant and therefore appear here only:

Type Meaning Source

Sign-in and session

AUTHENTICATION_SUCCESS

A sign-in succeeded.

Platform

AUTHENTICATION_FAILURE

A sign-in failed.

Platform

LOGOUT_SUCCESS

A user signed out.

Platform

AUTHORIZATION_FAILURE

Access was denied. Attempts by callers who are not signed in are not recorded.

Platform

Users

USER_CREATED

A user account was created.

Users & Permissions

USER_CHANGED

A user account was edited.

Users & Permissions

USER_DELETED

A user account was deleted.

Users & Permissions

USER_MEMBERSHIPS_CHANGED

A user account’s memberships changed — groups or tenants. The event carries the old and the new value.

Users & Permissions

USER_PASSWORD_CHANGED

A user account’s password was changed.

Users & Permissions

Tenants

TENANT_CREATED

A tenant was created.

Users & Permissions

TENANT_CHANGED

A tenant was edited.

Users & Permissions

TENANT_DELETED

A tenant was deleted.

Users & Permissions