Audit log events
Service updates
For service updates on audit logs, please visit our changelog in the Asana Community Forum here.
Accessing audit log API endpoints
Note that only Service Accounts belonging to organizations on the Asana Enterprise+ tier, as well as legacy tier Legacy Enterprise, can access audit log API endpoints. Authentication with a Service Account's personal access token is required.
Asanaβs audit log API allows you to monitor and act upon critical events in your organization's Asana instance.
To get started with the audit log API, visit the API reference.
Supported audit log events
The following tables list our currently supported audit log event event_type
s, organized by event_category
. Audit log events are retained for 90 days from the date of capture.
If an event that you are looking to monitor isn't listed below, please send us your feedback.
Logins
All login events operate on the user resource type.
Event Type | Description |
---|---|
user_login_succeeded | A user successfully logged in to their Asana account. |
user_login_failed | A user failed to log in to their Asana account. |
user_logged_out | A user logged out of their Asana account. |
User updates
All user events operate on the user resource type.
Event Type | Description |
---|---|
user_invited | A new user was invited to or auto-joined the workspace. |
user_deprovisioned | A user was removed from the workspace. |
user_reprovisioned | A deprovisioned user was added back to the workspace. |
user_forgot_password_started | A user requested a forgot password link. |
user_password_reset | A user's password was reset. |
user_password_changed | A user changed their password. |
user_two_factor_auth_enabled | A userβs two factor authentication was enabled. |
user_two_factor_auth_disabled | A userβs two factor authentication was disabled. |
domain_user_billing_paused | A domain user paused from billing, so they no longer count towards paid seats. |
domain_user_billing_unpaused | A domain user unpaused and counts towards paid seats again. |
Admin settings
All admin settings events operate on the workspace resource type except for workspace_announcement_created
and workspace_announcement_removed
that operate on the workspace announcement resource type.
Event Type | Description |
---|---|
workspace_security_contact_email_changed | The workspace's security contact e-mail was changed. |
workspace_google_sso_settings_changed | The workspace's Google SSO settings were changed. |
workspace_saml_settings_changed | The workspace's SAML settings were changed. |
workspace_saml_url_changed | The workspace's SAML url was changed. |
workspace_password_requirements_changed | The workspace's password strength requirements were changed. |
workspace_force_password_reset | All users in the workspace were forced to reset their password. |
workspace_guest_invite_permissions_changed | The workspaceβs guest invite permissions were changed. |
workspace_file_attachment_options_changed | File attachment options were enabled or disabled for the workspace. |
workspace_default_team_privacy_settings_changed | The workspace's default team privacy settings were changed. |
workspace_wide_reporting_enabled | Workspace wide reporting was enabled. |
workspace_wide_reporting_disabled | Workspace wide reporting was disabled. |
workspace_associated_email_domain_added | An email domain was added to the workspace. |
workspace_associated_email_domain_removed | An email domain was removed from the workspace. |
workspace_require_two_factor_auth_enabled | Two factor authentication was set as required for the workspace. |
workspace_require_two_factor_auth_disabled | Two factor authentication was set as not required for the workspace. |
workspace_app_recipient_emails_changed | A list of recipients for app approval requests was changed. |
workspace_view_links_enabled | Read-only link sharing was enabled for the workspace. |
workspace_view_links_disabled | Read-only link sharing was disabled for the workspace. |
workspace_default_session_duration_changed | The workspace's default session duration was changed. |
workspace_announcement_created | An announcement was created and published in the workspace. |
workspace_announcement_removed | An announcement was removed from the workspace. |
workspace_form_link_authentication_required_enabled | For this workspace, form link authentication was set as required, so all viewers need to authenticate with Asana in order to open forms links. |
workspace_form_link_authentication_required_disabled | For this workspace, form link authentication was set as not required, however authentication may still be required for individual links. Some viewers may not need to authenticate with Asana in order to open forms links. |
workspace_personal_access_token_enabled | The workspace's global personal access token setting was enabled. |
workspace_personal_access_token_disabled | The workspace's global personal access token setting was disabled. |
workspace_app_admin_approval_setting_changed | The workspace's specific app approval setting was changed. |
workspace_require_app_approvals_of_type_changed | The workspace's global app approval setting was changed. |
workspace_form_is_embeddable_forms_enabled | Embeddable forms is enabled in admin |
workspace_form_is_embeddable_forms_disabled | Embeddable forms is disabled in admin |
workspace_logged_out_view_authentication_required_enabled | For this workspace, logged out view link authentication was set as required, so all viewers need to authenticate with Asana in order to open logged out view links. |
workspace_logged_out_view_authentication_required_disabled | For this workspace, logged out view link authentication was set as not required, however authentication may still be required for individual links. Some viewers may not need to authenticate with Asana in order to open logged out view links. |
workspace_baa_signed | The workspacesβs Business Associate Addendum (BAA) was signed. |
workspace_machine_learning_product_feature_changed | An artificial intelligence feature was enabled or disabled for the workspace. |
workspace_job_title_field_editability_changed | The workspace's job title editability setting was changed. |
workspace_department_field_editability_changed | The workspace's department editability setting was changed. |
workspace_mobile_app_copy_paste_enabled | Copy and paste of text from the mobile app into another app was enabled. |
workspace_mobile_app_copy_paste_disabled | Copy and paste of text from the mobile app into another app was disabled. |
workspace_mobile_app_widgets_enabled | Home screen widgets for the mobile apps was enabled. |
workspace_mobile_app_widgets_disabled | Home screen widgets for the mobile apps was disabled. |
workspace_mobile_app_screen_capture_enabled | Screen capture on the Android mobile app was enabled. |
workspace_mobile_app_screen_capture_disabled | Screen capture on the Android mobile app was disabled. |
workspace_mobile_app_attachments_sharing_enabled | Attachment downloading and sharing on the mobile apps was enabled. |
workspace_mobile_app_attachments_sharing_disabled | Attachment downloading and sharing on the mobile apps was enabled. |
workspace_mobile_app_biometric_authentication_required_enabled | Biometric authentication on the mobile apps was enabled. |
workspace_mobile_app_biometric_authentication_required_disabled | Biometric authentication on the mobile apps was disabled. |
team_edit_team_name_access_level_changed | The team's setting for who can edit team name was changed. |
workspace_mobile_app_biometric_authentication_duration_changed | Frequency for biometric authentication on the mobile apps was changed. |
team_endorsed | The team was endorsed. |
team_unendorsed | The team was unendorsed. |
team_edit_team_description_access_level_changed | The team's setting for who can edit team description was changed. |
team_edit_team_type_access_level_changed | The team's setting for who can edit team type was changed. |
team_edit_team_trash_access_level_changed | The team's setting for who can delete the team was changed. |
team_domain_member_invite_management_access_level_changed | The team's setting for who can directly add a domain member to the team was changed. |
team_domain_guest_invite_management_access_level_changed | The team's setting for who can directly add a domain guest to the team was changed. |
team_join_team_request_management_access_level_changed | The team's setting for who can receive a Join Team Request was changed. |
team_member_removal_access_level_changed | The team's setting for who can remove members was changed. |
workspace_deprovisioning_project_include_completed_tasks_enabled | The workspace's member removal setting to include completed tasks in the tasks previously assigned to removed members project was enabled. |
workspace_deprovisioning_project_include_completed_tasks_disabled | The workspace's member removal setting to include completed tasks in the tasks previously assigned to removed members project was enabled. |
workspace_deprovisioning_project_recipient_changed | The workspace's member removal setting's project ownership recipient for the tasks previously assigned to removed members project was changed. |
workspace_create_deprovisioning_project_enabled | The workspace's member removal setting to create a tasks previously assigned to removed members project was enabled. |
workspace_create_deprovisioning_project_disabled | The workspace's member removal setting to create a tasks previously assigned to removed members project was disabled. |
workspace_rules_triggered_by_web_request_enabled | The workspace's global setting allowing users to set up rules that use incoming web request triggers was enabled. |
workspace_rules_triggered_by_web_request_disabled | The workspace's global setting allowing users to set up rules that use incoming web request triggers was disabled. |
workspace_trusted_domains_setting_changed | The workspace's trusted guest domain settings were changed. |
workspace_trusted_domain_added | A trusted guest domain was added to the workspace. |
workspace_trusted_domain_removed | A trusted guest domain was removed from the workspace. |
workspace_personal_access_token_expiry_changed | The expiration setting for API personal access tokens belonging to workspace members was changed. |
workspace_service_account_token_expiry_changed | The expiration setting for API service account tokens belonging to the workspace was changed. |
workspace_should_restore_data_for_rejoining_members_enabled | The workspace's setting for restoring data belonging to a workspace member that rejoins the workspace (after leaving it previously) is enabled. |
workspace_should_restore_data_for_rejoining_members_disabled | The workspace's setting for restoring data belonging to a workspace member that rejoins the workspace (after leaving it previously) is disabled. |
workspace_project_public_to_domain_permissions_changed | The workspace's project privacy and access policy was changed. |
workspace_onboarding_targeting_changed | The workspace's customized onboarding recipients have changed. |
workspace_onboarding_content_changed | The workspace's customized onboarding content was changed. |
workspace_bypass_default_nux_enabled | The workspace's customized onboarding was enabled. |
workspace_bypass_default_nux_disabled | The workspace's customized onboarding was disabled. |
workspace_deprovision_inactive_guest_policy_changed | The workspace's policy regarding de-provisioning of inactive guests was changed. |
user_exempted_from_guest_deprovision_rule | A user was exempted from the workspace's policy regarding de-provisioning of inactive guests. |
user_unexempted_from_guest_deprovision_rule | A user was included back in the workspace's policy regarding de-provisioning of inactive guests. |
workspace_project_default_privacy_setting_changed | The workspace's default project privacy settings have been changed. |
workspace_project_default_access_level_changed | The workspace's default project access level settings has been changed. |
workspace_project_default_customization_permission_changed | The workspace's default project customization settings have been changed. |
workspace_project_default_sharing_permission_changed | The workspace's default project sharing settings have been changed. |
workspace_allowed_pat_usage_member_added | A workspace member has been added to the workspace's personal access token usage allowlist. |
workspace_allowed_pat_usage_member_removed | A workspace member has been removed from the workspace's personal access token usage allowlist. |
workspace_guest_app_usage_setting_changed | The workspace's global app usage setting has been changed. |
workspace_guest_pat_usage_setting_changed | The workspace's personal access token usage setting has been changed. |
Roles
All role events operate on the user resource type.
Event Type | Description |
---|---|
user_workspace_admin_role_changed | A userβs workspace admin role was changed. |
user_division_admin_role_changed | A userβs division admin role was changed. |
user_team_admin_role_changed | A user's team admin role was changed. |
Content export
Event Type | Resource Type | Description |
---|---|---|
workspace_export_started | Workspace | An organization export was started. |
search_report_export_started | Search | A search report CSV export was started. |
workspace_teams_export_started | Workspace | A team CSV export for the workspace was started. |
division_teams_export_started | Division | A team CSV export for the division was started. |
workspace_members_export_started | Workspace | A member CSV export was started for the workspace. |
project_csv_export_started | Project | A project CSV export was started. |
attachment_downloaded | Attachment | An attachment was downloaded. |
workspace_attachment_export_started | Attachment | An attachment export was started. |
object_export_started | Workspace | A workspace wide object export was started. |
workspace_audit_log_export_started | Workspace | A workspace audit log CSV export was started. |
workspace_goals_export_started | Workspace | A workspace goals CSV export was started. |
app_insights_export_started | Workspace | A workspace app activity CSV export was started. |
Access control
Event Type | Resource Type | Description |
---|---|---|
project_share_link_enabled | Project | A link allowing workspace members and auto-join users to join a project was enabled. |
project_share_link_disabled | Project | A link allowing workspace members and auto-join users to join a project was disabled. |
project_view_link_enabled | Project | A read-only link for a project was enabled. |
project_view_link_disabled | Project | A read-only link for a project was disabled. |
project_member_added | Project | A user was added to a project. |
project_member_removed | Project | A user was removed from a project. |
project_privacy_settings_changed | Project | A projectβs privacy settings were changed. |
portfolio_member_added | Portfolio | A user was added to a portfolio. |
portfolio_member_removed | Portfolio | A user was removed from a portfolio. |
project_customization_permission_changed | Project | A project's customization permission settings were changed. |
project_sharing_permission_changed | Project | A project's sharing permission settings were changed. |
project_default_access_level_changed | Project | A project's default access level was changed. |
project_member_access_level_changed | Project | A user's access level to a project was changed. |
team_join_request_created | Team | A join team request was created. |
team_member_removed | Team | A user was removed from a team. |
team_member_added | Team | A user was added to a team. |
team_privacy_settings_changed | Team | A teamβs privacy settings were changed. |
Apps
Event Type | Resource Type | Description |
---|---|---|
team_harvest_integration_enabled | Team | The Harvest time tracking integration was enabled for a team. |
team_harvest_integration_disabled | Team | The Harvest time tracking integration was disabled for a team. |
user_app_authorized | User | An app was authorized by a user in the workspace. |
user_app_revoked | User | An app was deauthorized by a user in the workspace. |
user_personal_access_token_authorized | User | A new personal access token was authorized by the user in the workspace. |
user_personal_access_token_revoked | User | A personal access token was deauthorized by the user in the workspace. |
service_account_created | User | A service account was created or reprovisioned. |
service_account_deleted | User | A service account was deleted. |
service_account_name_changed | User | A service accountβs name was changed. |
Creation
Event Type | Resource Type | Description |
---|---|---|
team_created | Team | A new team was created. |
attachment_uploaded | Attachment | An attachment was uploaded. |
Deletion
Event Type | Resource Type | Description |
---|---|---|
task_deleted | Task | A task was deleted. |
task_permanently_deleted | Task | A task was permanently deleted. |
task_undeleted | Task | A task was undeleted. |
project_deleted | Project | A project was deleted. |
project_undeleted | Project | A project was undeleted. |
portfolio_deleted | Portfolio | A portfolio was deleted. |
portfolio_undeleted | Portfolio | A portfolio was undeleted. |
goal_deleted | Goal | A goal was deleted. |
goal_undeleted | Goal | A goal was undeleted. |
custom_field_deleted | Custom Field | A custom field was deleted. |
custom_field_undeleted | Custom Field | A custom field was undeleted. |
message_deleted | Message | A message was deleted. |
message_permanently_deleted | Message | A message was permanently deleted. |
message_undeleted | Message | A message was undeleted. |
team_deleted | Team | A team was deleted. |
team_undeleted | Team | A team was undeleted. |
attachment_deleted | Attachment | An attachment was deleted. |
attachment_undeleted | Attachment | An attachment was undeleted. |
comment_deleted | Story | A comment was deleted. |
comment_undeleted | Story | A comment was undeleted. |
status_update_deleted | Status Update | A status update was deleted. |
status_update_permanently_deleted | Status Update | A status update was permanently deleted. |
status_update_undeleted | Status Update | A status update was undeleted. |
task_template_deleted | Task Template | A task template was deleted. |
task_template_undeleted | Task Template | A task template was undeleted. |
project_template_deleted | Project Template | A project template was deleted. |
project_template_undeleted | Project Template | A project template was undeleted. |
story_deleted | Story | A story was deleted. |
story_undeleted | Story | A story was undeleted. |
bundle_deleted | Bundle | A bundle was uninstalled from a project. |
bundle_installation_deleted | Bundle | A bundle was deleted. |
goal_template_deleted | Goal Template | A goal template was deleted. |
goal_template_undeleted | Goal Template | A goal template was undeleted. |
Updated 4 months ago