Access log
Use the Access Log to investigate portal access and high-sensitivity actions. It is read-only. Start with the person, action, or period relevant to your question.
Auditors can review activity within each application’s assigned engagement period. Entries that include other applications or unclear application details are excluded. Organization activity appears within assigned engagement periods when it contains no application details. User, action, and date filters narrow these authorized results.
Find the activity you need
Open the log
Go to Settings → Audit → Access Log.
Choose a period
Load the last 7, 14, 30, 60, or 90 days. Changing the period reloads the log.
Narrow the results
Filter entries by user, action, or both. Each filter reloads the first matching page. Select All users or All actions to clear a filter.
User choices come from activity you can review in the selected period and action.
Review more entries
Select Older or Newer to move through the results. Each page contains up to 50 entries. The first page is not the full history.
Export the current view
Select Export current page to download the entries shown on the current page. The export includes the timestamp, user, role, action, resource details, IP address, and available event details.
The CSV export contains the current page. Use the filters before exporting to narrow the evidence you need.
Read an entry
Read the action label together with the affected resource, user, and time. An unavailable IP address or resource value appears as a dash; it does not establish that no resource was involved.
Keep the selected period and filters with an exported file. If your investigation needs more than one page, record which pages you collected.