Audit log events
Service updates
For service updates on audit logs, please visit our changelog in the Asana Community Forum here.
Accessing audit log API endpoints
Note that only Service Accounts belonging to organizations on the Asana Enterprise+ tier, as well as legacy tier Legacy Enterprise, can access audit log API endpoints. Authentication with a Service Account's personal access token is required.
Asana’s audit log API allows you to monitor and act upon critical events in your organization's Asana instance.
To get started with the audit log API, visit the API reference.
Supported audit log events
The following tables list our currently supported audit log event event_types, organized by event_category. Audit log events are retained for 90 days from the date of capture.
If an event that you are looking to monitor isn't listed below, please send us your feedback.
Logins
All login events operate on the user resource type.
| Event Type | Description |
|---|---|
user_login_succeeded | A user successfully logged in to their Asana account. |
user_login_failed | A user failed to log in to their Asana account. |
user_logged_out | A user logged out of their Asana account. |
User updates
All user events operate on the user resource type.
| Event Type | Description |
|---|---|
user_invited | A new user was invited to or auto-joined the workspace. |
user_deprovisioned | A user was removed from the workspace. |
user_reprovisioned | A deprovisioned user was added back to the workspace. |
user_forgot_password_started | A user requested a forgot password link. |
user_password_reset | A user's password was reset. |
user_password_changed | A user changed their password. |
user_two_factor_auth_enabled | A user’s two factor authentication was enabled. |
user_two_factor_auth_disabled | A user’s two factor authentication was disabled. |
user_csv_import_started | A user CSV import was started. |
domain_user_billing_paused | A domain user paused from billing, so they no longer count towards paid seats. |
domain_user_billing_unpaused | A domain user unpaused and counts towards paid seats again. |
Admin settings
| Event Type | Resource Type | Description |
|---|---|---|
ai_studio_addon_type_changed | BillingInfo | AI Studio add-on was modified (Free/Paid/Off) |
ai_studio_member_added | BillingInfo | A user was added onto an AI Studio add-on |
ai_studio_member_removed | BillingInfo | A user was removed from an AI Studio add-on |
team_create_content_access_level_changed | Team | The team's setting for who can create content in this team was changed. |
team_domain_guest_invite_management_access_level_changed | Team | The team's setting for who can directly add a domain guest to the team was changed. |
team_domain_member_invite_management_access_level_changed | Team | The team's setting for who can directly add a domain member to the team was changed. |
team_edit_team_description_access_level_changed | Team | The team's setting for who can edit team description was changed. |
team_edit_team_name_access_level_changed | Team | The team's setting for who can edit team name was changed. |
team_edit_team_trash_access_level_changed | Team | The team's setting for who can delete the team was changed. |
team_edit_team_type_access_level_changed | Team | The team's setting for who can edit team type was changed. |
team_endorsed | Team | The team was endorsed. |
team_join_team_request_management_access_level_changed | Team | The team's setting for who can receive a Join Team Request was changed. |
team_member_removal_access_level_changed | Team | The team's setting for who can remove members was changed. |
team_share_content_access_level_changed | Team | The team's setting for who can share content with this team was changed. |
team_unendorsed | Team | The team was unendorsed. |
user_exempted_from_guest_deprovision_rule | Workspace | A user was exempted from the workspace's policy regarding de-provisioning of inactive guests. |
user_unexempted_from_guest_deprovision_rule | Workspace | A user was included back in the workspace's policy regarding de-provisioning of inactive guests. |
work_access_mode_disabled | Workspace | The workspace's access mode was disabled. |
work_access_mode_enabled | Workspace | The workspace's access mode was enabled. |
workspace_allowed_pat_usage_member_added | Workspace | A workspace member has been added to the workspace's personal access token usage allowlist. |
workspace_allowed_pat_usage_member_removed | Workspace | A workspace member has been removed from the workspace's personal access token usage allowlist. |
workspace_announcement_created | Workspace Announcement | An announcement was created and published in the workspace. |
workspace_announcement_removed | Workspace Announcement | An announcement was removed from the workspace. |
workspace_app_admin_approval_setting_changed | Workspace | The workspace's specific app approval setting was changed. |
workspace_app_recipient_emails_changed | Workspace | A list of recipients for app approval requests was changed. |
workspace_email_domain_added | Workspace | An email domain was added to the workspace. |
workspace_email_domain_removed | Workspace | An email domain was removed from the workspace. |
workspace_baa_signed | Workspace | The workspaces’s Business Associate Addendum (BAA) was signed. |
workspace_bypass_default_nux_disabled | Workspace | The workspace's customized onboarding was disabled. |
workspace_bypass_default_nux_enabled | Workspace | The workspace's customized onboarding was enabled. |
workspace_create_deprovisioning_project_disabled | Workspace | The workspace's member removal setting to create a tasks previously assigned to removed members project was disabled. |
workspace_create_deprovisioning_project_enabled | Workspace | The workspace's member removal setting to create a tasks previously assigned to removed members project was enabled. |
workspace_default_session_duration_changed | Workspace | The workspace's default session duration was changed. |
workspace_default_team_privacy_settings_changed | Workspace | The workspace's default team privacy settings were changed. |
workspace_department_field_editability_changed | Workspace | The workspace's department editability setting was changed. |
workspace_deprovision_inactive_guest_policy_changed | Workspace | The workspace's policy regarding de-provisioning of inactive guests was changed. |
workspace_deprovisioning_project_include_completed_tasks_disabled | Workspace | The workspace's member removal setting to include completed tasks in the tasks previously assigned to removed members project was enabled. |
workspace_deprovisioning_project_include_completed_tasks_enabled | Workspace | The workspace's member removal setting to include completed tasks in the tasks previously assigned to removed members project was enabled. |
workspace_deprovisioning_project_recipient_changed | Workspace | The workspace's member removal setting's project ownership recipient for the tasks previously assigned to removed members project was changed. |
workspace_file_attachment_options_changed | Workspace | File attachment options were enabled or disabled for the workspace. |
workspace_force_password_reset | Workspace | All users in the workspace were forced to reset their password. |
workspace_form_is_embeddable_forms_disabled | Workspace | Embeddable forms is disabled in admin |
workspace_form_is_embeddable_forms_enabled | Workspace | Embeddable forms is enabled in admin |
workspace_form_link_authentication_required_disabled | Workspace | For this workspace, form link authentication was set as not required, however authentication may still be required for individual links. Some viewers may not need to authenticate with Asana in order to open forms links. |
workspace_form_link_authentication_required_enabled | Workspace | For this workspace, form link authentication was set as required, so all viewers need to authenticate with Asana in order to open forms links. |
workspace_google_sso_settings_changed | Workspace | The workspace's Google SSO settings were changed. |
workspace_guest_app_usage_setting_changed | Workspace | The workspace's global app usage setting has been changed. |
workspace_guest_invite_permissions_changed | Workspace | The workspace’s guest invite permissions were changed. |
workspace_guest_pat_usage_setting_changed | Workspace | The workspace's personal access token usage setting has been changed. |
workspace_job_title_field_editability_changed | Workspace | The workspace's job title editability setting was changed. |
workspace_logged_out_view_authentication_required_disabled | Workspace | For this workspace, logged out view link authentication was set as not required, however authentication may still be required for individual links. Some viewers may not need to authenticate with Asana in order to open logged out view links. |
workspace_logged_out_view_authentication_required_enabled | Workspace | For this workspace, logged out view link authentication was set as required, so all viewers need to authenticate with Asana in order to open logged out view links. |
workspace_machine_learning_product_feature_changed | Workspace | An artificial intelligence feature was enabled or disabled for the workspace. |
workspace_mobile_app_attachments_sharing_disabled | Workspace | Attachment downloading and sharing on the mobile apps was enabled. |
workspace_mobile_app_attachments_sharing_enabled | Workspace | Attachment downloading and sharing on the mobile apps was enabled. |
workspace_mobile_app_biometric_authentication_duration_changed | Workspace | Frequency for biometric authentication on the mobile apps was changed. |
workspace_mobile_app_biometric_authentication_required_disabled | Workspace | Biometric authentication on the mobile apps was disabled. |
workspace_mobile_app_biometric_authentication_required_enabled | Workspace | Biometric authentication on the mobile apps was enabled. |
workspace_mobile_app_copy_paste_disabled | Workspace | Copy and paste of text from the mobile app into another app was disabled. |
workspace_mobile_app_copy_paste_enabled | Workspace | Copy and paste of text from the mobile app into another app was enabled. |
workspace_mobile_app_screen_capture_disabled | Workspace | Screen capture on the Android mobile app was disabled. |
workspace_mobile_app_screen_capture_enabled | Workspace | Screen capture on the Android mobile app was enabled. |
workspace_mobile_app_widgets_disabled | Workspace | Home screen widgets for the mobile apps was disabled. |
workspace_mobile_app_widgets_enabled | Workspace | Home screen widgets for the mobile apps was enabled. |
workspace_onboarding_content_changed | Workspace | The workspace's customized onboarding content was changed. |
workspace_onboarding_deleted | Workspace | The workspace's customized onboarding content was delete. |
workspace_onboarding_targeting_changed | Workspace | The workspace's customized onboarding recipients have changed. |
workspace_onboarding_targeting_email_domain_added | Workspace | The workspace's customized onboarding recipients email domain added |
workspace_onboarding_targeting_email_domain_removed | Workspace | The workspace's customized onboarding recipients email domain removed |
workspace_onboarding_targeting_team_added | Workspace | The workspace's customized onboarding recipients team added |
workspace_onboarding_targeting_team_removed | Workspace | The workspace's customized onboarding recipients team removed |
workspace_password_requirements_changed | Workspace | The workspace's password strength requirements were changed. |
workspace_personal_access_token_disabled | Workspace | The workspace's global personal access token setting was disabled. |
workspace_personal_access_token_enabled | Workspace | The workspace's global personal access token setting was enabled. |
workspace_personal_access_token_expiry_changed | Workspace | The expiration setting for API personal access tokens belonging to workspace members was changed. |
workspace_project_default_access_level_changed | Workspace | The workspace's default project access level settings has been changed. |
workspace_project_default_customization_permission_changed | Workspace | The workspace's default project customization settings have been changed. |
workspace_project_default_privacy_setting_changed | Workspace | The workspace's default project privacy settings have been changed. |
workspace_project_default_sharing_permission_changed | Workspace | The workspace's default project sharing settings have been changed. |
workspace_project_public_to_domain_permissions_changed | Workspace | The workspace's project privacy and access policy was changed. |
workspace_require_app_approvals_of_type_changed | Workspace | The workspace's global app approval setting was changed. |
workspace_require_two_factor_auth_disabled | Workspace | Two factor authentication was set as not required for the workspace. |
workspace_require_two_factor_auth_enabled | Workspace | Two factor authentication was set as required for the workspace. |
workspace_rules_triggered_by_web_request_disabled | Workspace | The workspace's global setting allowing users to set up rules that use incoming web request triggers was disabled. |
workspace_rules_triggered_by_web_request_enabled | Workspace | The workspace's global setting allowing users to set up rules that use incoming web request triggers was enabled. |
workspace_saml_settings_changed | Workspace | The workspace's SAML settings were changed. |
workspace_saml_url_changed | Workspace | The workspace's SAML url was changed. |
workspace_security_contact_email_changed | Workspace | The workspace's security contact e-mail was changed. |
workspace_service_account_token_expiry_changed | Workspace | The expiration setting for API service account tokens belonging to the workspace was changed. |
workspace_should_restore_data_for_rejoining_members_disabled | Workspace | The workspace's setting for restoring data belonging to a workspace member that rejoins the workspace (after leaving it previously) is disabled. |
workspace_should_restore_data_for_rejoining_members_enabled | Workspace | The workspace's setting for restoring data belonging to a workspace member that rejoins the workspace (after leaving it previously) is enabled. |
workspace_should_restore_data_for_rejoining_guests_disabled | Workspace | The workspace's setting for restoring data belonging to a workspace guest that rejoins the workspace (after leaving it previously) is disabled. |
workspace_should_restore_data_for_rejoining_guests_enabled | Workspace | The workspace's setting for restoring data belonging to a workspace guest that rejoins the workspace (after leaving it previously) is enabled. |
workspace_trusted_domain_added | Workspace | A trusted guest domain was added to the workspace. |
workspace_trusted_domain_removed | Workspace | A trusted guest domain was removed from the workspace. |
workspace_trusted_domains_setting_changed | Workspace | The workspace's trusted guest domain settings were changed. |
workspace_view_links_disabled | Workspace | Read-only link sharing was disabled for the workspace. |
workspace_view_links_enabled | Workspace | Read-only link sharing was enabled for the workspace. |
workspace_wide_reporting_disabled | Workspace | Workspace wide reporting was disabled. |
workspace_wide_reporting_enabled | Workspace | Workspace wide reporting was enabled. |
Roles
All role events operate on the user resource type.
| Event Type | Description |
|---|---|
user_workspace_admin_role_changed | A user’s workspace admin role was changed. |
user_division_admin_role_changed | A user’s division admin role was changed. |
user_team_admin_role_changed | A user's team admin role was changed. |
Content export
| Event Type | Resource Type | Description |
|---|---|---|
workspace_export_started | Workspace | An organization export was started. |
search_report_export_started | Search | A search report CSV export was started. |
workspace_teams_export_started | Workspace | A team CSV export for the workspace was started. |
division_teams_export_started | Division | A team CSV export for the division was started. |
workspace_members_export_started | Workspace | A member CSV export was started for the workspace. |
project_csv_export_started | Project | A project CSV export was started. |
attachment_downloaded | Attachment | An attachment was downloaded. |
workspace_attachment_export_started | Attachment | An attachment export was started. |
object_export_started | Workspace | A workspace wide object export was started. |
workspace_audit_log_export_started | Workspace | A workspace audit log CSV export was started. |
workspace_goals_export_started | Workspace | A workspace goals CSV export was started. |
app_insights_export_started | Workspace | A workspace app activity CSV export was started. |
Access control
| Event Type | Resource Type | Description |
|---|---|---|
custom_field_default_access_level_changed | Custom Field | A custom field's default access level was changed. |
custom_field_member_access_level_changed | Custom Field | A user's access level to a custom field was changed. |
custom_field_member_added | Custom Field | A user was added to a custom field. |
custom_field_member_removed | Custom Field | A user was removed from a custom field. |
custom_field_privacy_settings_changed | Custom Field | A custom field's privacy settings were changed. |
license_downgraded | User | A user's product license was downgraded |
license_request_approved | User | A user's license request was approved |
license_request_rejected | User | A user's license request was rejected |
license_upgraded | User | A user's product license was upgraded |
portfolio_default_access_level_changed | Portfolio | A portfolio's default access level was changed. |
portfolio_member_access_level_changed | Portfolio | A user's access level to a portfolio was changed. |
project_custom_property_setting_changed | Project | The access level of a custom field on a project was changed. |
project_multihoming_setting_changed | Project | A project's multihoming setting was changed. |
project_share_link_enabled | Project | A link allowing workspace members and auto-join users to join a project was enabled. |
project_share_link_disabled | Project | A link allowing workspace members and auto-join users to join a project was disabled. |
project_view_link_enabled | Project | A read-only link for a project was enabled. |
project_view_link_disabled | Project | A read-only link for a project was disabled. |
project_member_added | Project | A user was added to a project. |
project_member_removed | Project | A user was removed from a project. |
project_privacy_settings_changed | Project | A project’s privacy settings were changed. |
portfolio_member_added | Portfolio | A user was added to a portfolio. |
portfolio_member_removed | Portfolio | A user was removed from a portfolio. |
portfolio_customization_permission_changed | Portfolio | A portfolio's customization permission settings were changed. |
portfolio_sharing_permission_changed | Portfolio | A portfolio's sharing permission settings were changed. |
project_customization_permission_changed | Project | A project's customization permission settings were changed. |
project_sharing_permission_changed | Project | A project's sharing permission settings were changed. |
project_default_access_level_changed | Project | A project's default access level was changed. |
project_member_access_level_changed | Project | A user's access level to a project was changed. |
team_join_request_created | Team | A join team request was created. |
team_member_removed | Team | A user was removed from a team. |
team_member_added | Team | A user was added to a team. |
team_privacy_settings_changed | Team | A team’s privacy settings were changed. |
Apps
| Event Type | Resource Type | Description |
|---|---|---|
team_harvest_integration_enabled | Team | The Harvest time tracking integration was enabled for a team. |
team_harvest_integration_disabled | Team | The Harvest time tracking integration was disabled for a team. |
user_app_authorized | User | An app was authorized by a user in the workspace. |
user_app_revoked | User | An app was deauthorized by a user in the workspace. |
user_personal_access_token_authorized | User | A new personal access token was authorized by the user in the workspace. |
user_personal_access_token_revoked | User | A personal access token was deauthorized by the user in the workspace. |
service_account_created | User | A service account was created or reprovisioned. |
service_account_deleted | User | A service account was deleted. |
service_account_name_changed | User | A service account’s name was changed. |
Creation
| Event Type | Resource Type | Description |
|---|---|---|
team_created | Team | A new team was created. |
attachment_uploaded | Attachment | An attachment was uploaded. |
Deletion
| Event Type | Resource Type | Description |
|---|---|---|
task_deleted | Task | A task was deleted. |
task_permanently_deleted | Task | A task was permanently deleted. |
task_undeleted | Task | A task was undeleted. |
project_deleted | Project | A project was deleted. |
project_undeleted | Project | A project was undeleted. |
portfolio_deleted | Portfolio | A portfolio was deleted. |
portfolio_undeleted | Portfolio | A portfolio was undeleted. |
goal_deleted | Goal | A goal was deleted. |
goal_undeleted | Goal | A goal was undeleted. |
custom_field_deleted | Custom Field | A custom field was deleted. |
custom_field_undeleted | Custom Field | A custom field was undeleted. |
message_deleted | Message | A message was deleted. |
message_permanently_deleted | Message | A message was permanently deleted. |
message_undeleted | Message | A message was undeleted. |
team_deleted | Team | A team was deleted. |
team_undeleted | Team | A team was undeleted. |
attachment_deleted | Attachment | An attachment was deleted. |
attachment_undeleted | Attachment | An attachment was undeleted. |
comment_deleted | Story | A comment was deleted. |
comment_undeleted | Story | A comment was undeleted. |
status_update_deleted | Status Update | A status update was deleted. |
status_update_permanently_deleted | Status Update | A status update was permanently deleted. |
status_update_undeleted | Status Update | A status update was undeleted. |
task_template_deleted | Task Template | A task template was deleted. |
task_template_undeleted | Task Template | A task template was undeleted. |
project_template_deleted | Project Template | A project template was deleted. |
project_template_undeleted | Project Template | A project template was undeleted. |
story_deleted | Story | A story was deleted. |
story_undeleted | Story | A story was undeleted. |
bundle_deleted | Bundle | A bundle was uninstalled from a project. |
bundle_installation_deleted | Bundle | A bundle was deleted. |
goal_template_deleted | Goal Template | A goal template was deleted. |
goal_template_undeleted | Goal Template | A goal template was undeleted. |
Updated 11 days ago