On reviewing audit event types I see account operations, lifecycle events, aggregations etc so you can track what the tool is doing with access to other systems. But I do not see administrator actions being logged. Are administrator actions logged any where or can this be configured? for example, if I modify a workflow, or give someone administrator rights, is this logged?
This is a handy list to have
IDK about the workflow change, but for the second scenario, the event you’re looking for is
technicalName:“USER_ROLE_ADMIN_GRANT_PASSED”
3 Likes
Usually I would perform action in sandbox and then use search created:[now-5m TO now] and then get the keywords and use them in prod.
There might be some lag as sandbox search is delayed sometimes but most of the time this works smoothly.
1 Like