🚧
Service updates
For service updates on audit logs, please visit our changelog in the Asana Community Forum here.

📘
Accessing audit log API endpoints
Note that only Service Accounts belonging to organizations on the Asana Enterprise+ tier, legacy tier Legacy Enterprise, or an Enterprise domain with the Compliance Management Add-on can access audit log API endpoints. Authentication with a Service Account's personal access token is required.

Asana’s audit log API allows you to monitor and act upon critical events in your organization's Asana instance.

To get started with the audit log API, visit the API reference.

Supported audit log events

The following tables list our currently supported audit log event event_types, organized by event_category. Audit log events are retained for 90 days from the date of capture.

If an event that you are looking to monitor isn't listed below, please send us your feedback.

Logins

All login events operate on the user resource type.

Event Type	Description
`user_logged_out`	A user logged out of their Asana account.
`user_login_failed`	A user failed to log in to their Asana account.
`user_login_succeeded`	A user successfully logged in to their Asana account.

User updates

All user events operate on the user resource type.

Event Type	Description
`domain_user_billing_paused`	A domain user paused from billing, so they no longer count towards paid seats.
`domain_user_billing_unpaused`	A domain user unpaused and counts towards paid seats again.
`user_csv_import_started`	A user CSV import was started.
`user_deprovisioned`	A user was removed from the workspace.
`user_forgot_password_started`	A user requested a forgot password link.
`user_invited`	A new user was invited to or auto-joined the workspace.
`user_password_changed`	A user changed their password.
`user_password_reset`	A user's password was reset.
`user_reprovisioned`	A deprovisioned user was added back to the workspace.
`user_two_factor_auth_disabled`	A user's two factor authentication was disabled.
`user_two_factor_auth_enabled`	A user's two factor authentication was enabled.

Admin settings

Event Type	Resource Type	Description
`ai_studio_addon_type_changed`	BillingInfo	AI Studio add-on was modified (Free/Paid/Off)
`ai_studio_member_added`	BillingInfo	A user was added onto an AI Studio add-on
`ai_studio_member_removed`	BillingInfo	A user was removed from an AI Studio add-on
`sandbox_created`	Workspace	A sandbox environment associated with this workspace was created.
`sandbox_deleted`	Workspace	A sandbox environment associated with this workspace was deleted.
`team_create_content_access_level_changed`	Team	The team's setting for who can create content in this team was changed.
`team_domain_guest_invite_management_access_level_changed`	Team	The team's setting for who can directly add a domain guest to the team was changed.
`team_domain_member_invite_management_access_level_changed`	Team	The team's setting for who can directly add a domain member to the team was changed.
`team_edit_team_description_access_level_changed`	Team	The team's setting for who can edit team description was changed.
`team_edit_team_name_access_level_changed`	Team	The team's setting for who can edit team name was changed.
`team_edit_team_trash_access_level_changed`	Team	The team's setting for who can delete the team was changed.
`team_edit_team_type_access_level_changed`	Team	The team's setting for who can edit team type was changed.
`team_endorsed`	Team	The team was endorsed.
`team_join_team_request_management_access_level_changed`	Team	The team's setting for who can receive a Join Team Request was changed.
`team_member_removal_access_level_changed`	Team	The team's setting for who can remove members was changed.
`team_share_content_access_level_changed`	Team	The team's setting for who can share content with this team was changed.
`team_unendorsed`	Team	The team was unendorsed.
`user_exempted_from_guest_deprovision_rule`	Workspace	A user was exempted from the workspace's policy regarding de-provisioning of inactive guests.
`user_unexempted_from_guest_deprovision_rule`	Workspace	A user was included back in the workspace's policy regarding de-provisioning of inactive guests.
`work_access_mode_disabled`	Workspace	The workspace's access mode was disabled.
`work_access_mode_enabled`	Workspace	The workspace's access mode was enabled.
`workspace_allowed_ip_range_added`	Workspace	An IP range was added to the workspace's IP allowlist.
`workspace_allowed_ip_range_changed`	Workspace	An IP range in the workspace's IP allowlist was modified.
`workspace_allowed_ip_range_removed`	Workspace	An IP range was removed from the workspace's IP allowlist.
`workspace_allowed_pat_usage_member_added`	Workspace	A workspace member has been added to the workspace's personal access token usage allowlist.
`workspace_allowed_pat_usage_member_removed`	Workspace	A workspace member has been removed from the workspace's personal access token usage allowlist.
`workspace_announcement_created`	Workspace Announcement	An announcement was created and published in the workspace.
`workspace_announcement_removed`	Workspace Announcement	An announcement was removed from the workspace.
`workspace_app_admin_approval_setting_changed`	Workspace	The workspace's specific app approval setting was changed.
`workspace_app_recipient_emails_changed`	Workspace	A list of recipients for app approval requests was changed.
`workspace_baa_signed`	Workspace	The workspaces's Business Associate Addendum (BAA) was signed.
`workspace_bypass_default_nux_disabled`	Workspace	The workspace's customized onboarding was disabled.
`workspace_bypass_default_nux_enabled`	Workspace	The workspace's customized onboarding was enabled.
`workspace_create_deprovisioning_project_disabled`	Workspace	The workspace's member removal setting to create a tasks previously assigned to removed members project was disabled.
`workspace_create_deprovisioning_project_enabled`	Workspace	The workspace's member removal setting to create a tasks previously assigned to removed members project was enabled.
`workspace_custom_branding_changed`	Workspace	The workspace's custom branding was changed.
`workspace_default_session_duration_changed`	Workspace	The workspace's default session duration was changed.
`workspace_default_team_privacy_settings_changed`	Workspace	The workspace's default team privacy settings were changed.
`workspace_department_field_editability_changed`	Workspace	The workspace's department editability setting was changed.
`workspace_deprovision_inactive_guest_policy_changed`	Workspace	The workspace's policy regarding de-provisioning of inactive guests was changed.
`workspace_deprovisioning_project_include_completed_tasks_disabled`	Workspace	The workspace's member removal setting to include completed tasks in the tasks previously assigned to removed members project was enabled.
`workspace_deprovisioning_project_include_completed_tasks_enabled`	Workspace	The workspace's member removal setting to include completed tasks in the tasks previously assigned to removed members project was enabled.
`workspace_deprovisioning_project_recipient_changed`	Workspace	The workspace's member removal setting's project ownership recipient for the tasks previously assigned to removed members project was changed.
`workspace_email_domain_added`	Workspace	An email domain was added to the workspace.
`workspace_email_domain_dns_verification_canceled`	Workspace	The DNS verification process for adding an email domain to the workspace was canceled.
`workspace_email_domain_dns_verification_started`	Workspace	The DNS verification process for adding an email domain to the workspace was started.
`workspace_email_domain_dns_verification_verified`	Workspace	The DNS verification process for adding an email domain to the workspace was completed.
`workspace_email_domain_removed`	Workspace	An email domain was removed from the workspace.
`workspace_file_attachment_options_changed`	Workspace	File attachment options were enabled or disabled for the workspace.
`workspace_force_password_reset`	Workspace	All users in the workspace were forced to reset their password.
`workspace_form_is_embeddable_forms_disabled`	Workspace	Embeddable forms is disabled in admin
`workspace_form_is_embeddable_forms_enabled`	Workspace	Embeddable forms is enabled in admin
`workspace_form_link_authentication_required_disabled`	Workspace	For this workspace, form link authentication was set as not required, however authentication may still be required for individual links. Some viewers may not need to authenticate with Asana in order to open forms links.
`workspace_form_link_authentication_required_enabled`	Workspace	For this workspace, form link authentication was set as required, so all viewers need to authenticate with Asana in order to open forms links.
`workspace_google_sso_settings_changed`	Workspace	The workspace's Google SSO settings were changed.
`workspace_guest_app_usage_setting_changed`	Workspace	The workspace's global app usage setting has been changed.
`workspace_guest_invite_permissions_changed`	Workspace	The workspace's guest invite permissions were changed.
`workspace_guest_pat_usage_setting_changed`	Workspace	The workspace's personal access token usage setting has been changed.
`workspace_idle_session_duration_changed`	Workspace	The workspace's idle session duration was changed.
`workspace_ip_allowlist_disabled`	Workspace	The workspace's IP allowlist was turned off.
`workspace_ip_allowlist_enabled`	Workspace	The workspace's IP allowlist was turned on.
`workspace_ip_allowlist_member_type_changed`	Workspace	The type of users the workspace's IP allowlist applies to was changed.
`workspace_job_title_field_editability_changed`	Workspace	The workspace's job title editability setting was changed.
`workspace_logged_out_view_authentication_required_disabled`	Workspace	For this workspace, logged out view link authentication was set as not required, however authentication may still be required for individual links. Some viewers may not need to authenticate with Asana in order to open logged out view links.
`workspace_logged_out_view_authentication_required_enabled`	Workspace	For this workspace, logged out view link authentication was set as required, so all viewers need to authenticate with Asana in order to open logged out view links.
`workspace_machine_learning_product_feature_changed`	Workspace	An artificial intelligence feature was enabled or disabled for the workspace.
`workspace_mobile_app_attachments_sharing_disabled`	Workspace	Attachment downloading and sharing on the mobile apps was enabled.
`workspace_mobile_app_attachments_sharing_enabled`	Workspace	Attachment downloading and sharing on the mobile apps was enabled.
`workspace_mobile_app_biometric_authentication_duration_changed`	Workspace	Frequency for biometric authentication on the mobile apps was changed.
`workspace_mobile_app_biometric_authentication_required_disabled`	Workspace	Biometric authentication on the mobile apps was disabled.
`workspace_mobile_app_biometric_authentication_required_enabled`	Workspace	Biometric authentication on the mobile apps was enabled.
`workspace_mobile_app_copy_paste_disabled`	Workspace	Copy and paste of text from the mobile app into another app was disabled.
`workspace_mobile_app_copy_paste_enabled`	Workspace	Copy and paste of text from the mobile app into another app was enabled.
`workspace_mobile_app_screen_capture_disabled`	Workspace	Screen capture on the Android mobile app was disabled.
`workspace_mobile_app_screen_capture_enabled`	Workspace	Screen capture on the Android mobile app was enabled.
`workspace_mobile_app_widgets_disabled`	Workspace	Home screen widgets for the mobile apps was disabled.
`workspace_mobile_app_widgets_enabled`	Workspace	Home screen widgets for the mobile apps was enabled.
`workspace_onboarding_content_changed`	Workspace	The workspace's customized onboarding content was changed.
`workspace_onboarding_deleted`	Workspace	The workspace's customized onboarding content was delete.
`workspace_onboarding_targeting_changed`	Workspace	The workspace's customized onboarding recipients have changed.
`workspace_onboarding_targeting_email_domain_added`	Workspace	The workspace's customized onboarding recipients email domain added
`workspace_onboarding_targeting_email_domain_removed`	Workspace	The workspace's customized onboarding recipients email domain removed
`workspace_onboarding_targeting_team_added`	Workspace	The workspace's customized onboarding recipients team added
`workspace_onboarding_targeting_team_removed`	Workspace	The workspace's customized onboarding recipients team removed
`workspace_password_requirements_changed`	Workspace	The workspace's password strength requirements were changed.
`workspace_personal_access_token_disabled`	Workspace	The workspace's global personal access token setting was disabled.
`workspace_personal_access_token_enabled`	Workspace	The workspace's global personal access token setting was enabled.
`workspace_personal_access_token_expiry_changed`	Workspace	The expiration setting for API personal access tokens belonging to workspace members was changed.
`workspace_project_default_access_level_changed`	Workspace	The workspace's default project access level settings has been changed.
`workspace_project_default_customization_permission_changed`	Workspace	The workspace's default project customization settings have been changed.
`workspace_project_default_privacy_setting_changed`	Workspace	The workspace's default project privacy settings have been changed.
`workspace_project_default_sharing_permission_changed`	Workspace	The workspace's default project sharing settings have been changed.
`workspace_project_public_to_domain_permissions_changed`	Workspace	The workspace's project privacy and access policy was changed.
`workspace_redact_uwc_from_external_notifications_disabled`	Workspace	The workspace's redaction of user work content in 3rd party notifications was disabled.
`workspace_redact_uwc_from_external_notifications_enabled`	Workspace	The workspace's redaction of user work content in 3rd party notifications was enabled.
`workspace_require_app_approvals_of_type_changed`	Workspace	The workspace's global app approval setting was changed.
`workspace_require_two_factor_auth_disabled`	Workspace	Two factor authentication was set as not required for the workspace.
`workspace_require_two_factor_auth_enabled`	Workspace	Two factor authentication was set as required for the workspace.
`workspace_rules_triggered_by_web_request_disabled`	Workspace	The workspace's global setting allowing users to set up rules that use incoming web request triggers was disabled.
`workspace_rules_triggered_by_web_request_enabled`	Workspace	The workspace's global setting allowing users to set up rules that use incoming web request triggers was enabled.
`workspace_saml_settings_changed`	Workspace	The workspace's SAML settings were changed.
`workspace_saml_url_changed`	Workspace	The workspace's SAML url was changed.
`workspace_security_contact_email_changed`	Workspace	The workspace's security contact e-mail was changed.
`workspace_service_account_token_expiry_changed`	Workspace	The expiration setting for API service account tokens belonging to the workspace was changed.
`workspace_should_restore_data_for_rejoining_guests_disabled`	Workspace	The workspace's setting for restoring data belonging to a workspace guest that rejoins the workspace (after leaving it previously) is disabled.
`workspace_should_restore_data_for_rejoining_guests_enabled`	Workspace	The workspace's setting for restoring data belonging to a workspace guest that rejoins the workspace (after leaving it previously) is enabled.
`workspace_should_restore_data_for_rejoining_members_disabled`	Workspace	The workspace's setting for restoring data belonging to a workspace member that rejoins the workspace (after leaving it previously) is disabled.
`workspace_should_restore_data_for_rejoining_members_enabled`	Workspace	The workspace's setting for restoring data belonging to a workspace member that rejoins the workspace (after leaving it previously) is enabled.
`workspace_trusted_domain_added`	Workspace	A trusted guest domain was added to the workspace.
`workspace_trusted_domain_removed`	Workspace	A trusted guest domain was removed from the workspace.
`workspace_trusted_domains_setting_changed`	Workspace	The workspace's trusted guest domain settings were changed.
`workspace_view_links_disabled`	Workspace	Read-only link sharing was disabled for the workspace.
`workspace_view_links_enabled`	Workspace	Read-only link sharing was enabled for the workspace.
`workspace_wide_reporting_disabled`	Workspace	Workspace wide reporting was disabled.
`workspace_wide_reporting_enabled`	Workspace	Workspace wide reporting was enabled.

Roles

All role events operate on the user resource type.

Event Type	Description
`user_division_admin_role_changed`	A user's division admin role was changed.
`user_role_changed`	A user's RBAC role was changed
`user_team_admin_role_changed`	A user's team admin role was changed.
`user_workspace_admin_role_changed`	A user's workspace admin role was changed.

Content export

Event Type	Resource Type	Description
`app_insights_export_started`	Workspace	A workspace app activity CSV export was started.
`attachment_downloaded`	Attachment	An attachment was downloaded.
`division_teams_export_started`	Division	A team CSV export for the division was started.
`object_export_started`	Workspace	A workspace wide object export was started.
`project_csv_export_started`	Project	A project CSV export was started.
`reporting_export_started`	Team/Portfolio/Project	A reporting export was started.
`search_report_export_started`	Search	A search report CSV export was started.
`time_tracking_csv_export_started`	Project	A time tracking CSV export was started.
`workspace_attachment_export_started`	Attachment	An attachment export was started.
`workspace_audit_log_export_started`	Workspace	A workspace audit log CSV export was started.
`workspace_export_started`	Workspace	An organization export was started.
`workspace_goal_default_privacy_setting_changed`	Workspace	The default privacy setting for goals in the workspace was changed.
`workspace_goals_export_started`	Workspace	A workspace goals CSV export was started.
`workspace_members_export_started`	Workspace	A member CSV export was started for the workspace.
`workspace_portfolio_default_privacy_setting_changed`	Workspace	The default privacy setting for portfolios in the workspace was changed.
`workspace_teams_export_started`	Workspace	A team CSV export for the workspace was started.

Access control

Event Type	Resource Type	Description
`access_request_approved`	Project/Portfolio	A user's access request to an object was approved.
`access_request_cancelled`	Project/Portfolio	A user's access request to an object was cancelled.
`access_request_denied`	Project/Portfolio	A user's access request to an object was denied.
`ai_teammate_member_access_level_changed`	AI Teammate	A user's access level to an AI teammate was changed.
`ai_teammate_member_added`	AI Teammate	A user was added to an AI Teammate.
`ai_teammate_member_removed`	AI Teammate	A user was removed from an AI Teammate.
`custom_field_default_access_level_changed`	Custom Field	A custom field's default access level was changed.
`custom_field_member_access_level_changed`	Custom Field	A user's access level to a custom field was changed.
`custom_field_member_added`	Custom Field	A user was added to a custom field.
`custom_field_member_removed`	Custom Field	A user was removed from a custom field.
`custom_field_privacy_settings_changed`	Custom Field	A custom field's privacy settings were changed.
`dashboard_member_access_level_changed`	Dashboard	A dashboard member's access level was changed.
`dashboard_member_added`	Dashboard	A dashboard member was added.
`dashboard_member_removed`	Dashboard	A dashboard member was removed.
`form_configuration_incoming_replies_disabled`	Form Configuration	A form configuration's incoming replies was disabled.
`form_configuration_incoming_replies_enabled`	Form Configuration	A form configuration's incoming replies was enabled.
`form_configuration_outgoing_replies_disabled`	Form Configuration	A form configuration's outgoing replies was disabled.
`form_configuration_outgoing_replies_enabled`	Form Configuration	A form configuration's outgoing replies was enabled.
`goal_default_access_level_changed`	Goal	A goal's default access level was changed.
`goal_member_access_level_changed`	Goal	A user's or team's access level to a goal was changed.
`goal_member_added`	Goal	A user or team was added to a goal.
`goal_member_removed`	Goal	A user or team was removed from a goal.
`license_downgraded`	User	A user's product license was downgraded
`license_request_approved`	User	A user's license request was approved
`license_request_rejected`	User	A user's license request was rejected
`license_upgraded`	User	A user's product license was upgraded
`portfolio_customization_permission_changed`	Portfolio	A portfolio's customization permission settings were changed.
`portfolio_default_access_level_changed`	Portfolio	A portfolio's default access level was changed.
`portfolio_member_access_level_changed`	Portfolio	A user's or team's access level to a portfolio was changed.
`portfolio_member_added`	Portfolio	A user or team was added to a portfolio.
`portfolio_member_removed`	Portfolio	A user or team was removed from a portfolio.
`portfolio_sharing_permission_changed`	Portfolio	A portfolio's sharing permission settings were changed.
`project_assignee_field_setting_minimum_access_level_changed`	Project	The minimum access level of the assignee field on a project was changed.
`project_custom_property_setting_changed`	Project	The access level of a custom field on a project was changed.
`project_customization_permission_changed`	Project	A project's customization permission settings were changed.
`project_default_access_level_changed`	Project	A project's default access level was changed.
`project_due_date_field_setting_minimum_access_level_changed`	Project	The minimum access level of the due date field on a project was changed.
`project_member_access_level_changed`	Project	A user's or team's access level to a project was changed.
`project_member_added`	Project	A user or team was added to a project.
`project_member_removed`	Project	A user or team was removed from a project.
`project_multihoming_setting_changed`	Project	A project's multihoming setting was changed.
`project_privacy_settings_changed`	Project	A project's privacy settings were changed.
`project_share_link_disabled`	Project	A link allowing workspace members and auto-join users to join a project was disabled.
`project_share_link_enabled`	Project	A link allowing workspace members and auto-join users to join a project was enabled.
`project_sharing_permission_changed`	Project	A project's sharing permission settings were changed.
`project_view_link_disabled`	Project	A read-only link for a project was disabled.
`project_view_link_enabled`	Project	A read-only link for a project was enabled.
`role_permission_changed`	RBAC Role	A permission setting on the RBAC role was changed
`task_follower_added`	Task	An AI Teammate was added as a follower of a Task.
`task_follower_removed`	Task	An AI Teammate was removed as a follower of a Task.
`team_join_request_created`	Team	A join team request was created.
`team_member_added`	Team	A user was added to a team.
`team_member_removed`	Team	A user was removed from a team.
`team_privacy_settings_changed`	Team	A team's privacy settings were changed.
`user_access_denied`	User	The workspace's IP allowlist prevented a user from accessing the workspace.

Apps

Event Type	Resource Type	Description
`service_account_created`	User	A service account was created or reprovisioned.
`service_account_deleted`	User	A service account was deleted.
`service_account_name_changed`	User	A service account's name was changed.
`team_harvest_integration_disabled`	Team	The Harvest time tracking integration was disabled for a team.
`team_harvest_integration_enabled`	Team	The Harvest time tracking integration was enabled for a team.
`user_app_authorized`	User	An app was authorized by a user in the workspace.
`user_app_revoked`	User	An app was deauthorized by a user in the workspace.
`user_personal_access_token_authorized`	User	A new personal access token was authorized by the user in the workspace.
`user_personal_access_token_revoked`	User	A personal access token was deauthorized by the user in the workspace.

Creation

Event Type	Resource Type	Description
`attachment_uploaded`	Attachment	An attachment was uploaded.
`custom_role_created`	Workspace	The custom RBAC Role created in the workspace
`team_created`	Team	A new team was created.

Deletion

Event Type	Resource Type	Description
`attachment_deleted`	Attachment	An attachment was deleted.
`attachment_undeleted`	Attachment	An attachment was undeleted.
`bundle_deleted`	Bundle	A bundle was uninstalled from a project.
`bundle_installation_deleted`	Bundle	A bundle was deleted.
`comment_deleted`	Story	A comment was deleted.
`comment_undeleted`	Story	A comment was undeleted.
`custom_field_deleted`	Custom Field	A custom field was deleted.
`custom_field_undeleted`	Custom Field	A custom field was undeleted.
`custom_role_deleted`	Workspace	The custom RBAC Role deleted from the workspace
`goal_deleted`	Goal	A goal was deleted.
`goal_template_deleted`	Goal Template	A goal template was deleted.
`goal_template_undeleted`	Goal Template	A goal template was undeleted.
`goal_undeleted`	Goal	A goal was undeleted.
`message_deleted`	Message	A message was deleted.
`message_permanently_deleted`	Message	A message was permanently deleted.
`message_undeleted`	Message	A message was undeleted.
`portfolio_deleted`	Portfolio	A portfolio was deleted.
`portfolio_undeleted`	Portfolio	A portfolio was undeleted.
`project_budget_deleted`	Project	A project budget was deleted.
`project_budget_undeleted`	Project	A project budget was undeleted.
`project_deleted`	Project	A project was deleted.
`project_template_deleted`	Project Template	A project template was deleted.
`project_template_undeleted`	Project Template	A project template was undeleted.
`project_undeleted`	Project	A project was undeleted.
`resource_project_rate_deleted`	Project	A resource project rate was deleted.
`resource_project_rate_undeleted`	Project	A resource project rate was undeleted.
`status_update_deleted`	Status Update	A status update was deleted.
`status_update_permanently_deleted`	Status Update	A status update was permanently deleted.
`status_update_undeleted`	Status Update	A status update was undeleted.
`story_deleted`	Story	A story was deleted.
`story_undeleted`	Story	A story was undeleted.
`task_deleted`	Task	A task was deleted.
`task_permanently_deleted`	Task	A task was permanently deleted.
`task_template_deleted`	Task Template	A task template was deleted.
`task_template_undeleted`	Task Template	A task template was undeleted.
`task_undeleted`	Task	A task was undeleted.
`team_deleted`	Team	A team was deleted.
`team_undeleted`	Team	A team was undeleted.
`workspace_automated_deletion_disabled`	Workspace	A workspace automated deletion was disabled.
`workspace_automated_deletion_enabled`	Workspace	A workspace automated deletion was enabled.
`workspace_deletion_cancelled`	Workspace	A workspace deletion was cancelled.
`workspace_deletion_requested`	Workspace	A workspace deletion was requested.
`workspace_deletion_scheduled`	Workspace	A workspace deletion was scheduled.