Admin Audit Log: Who Changed What

A read-only record of administrative changes in your organization — filter by date, person or action type to find exactly who did what, and when.

“Who changed this?” is a question every company asks sooner or later. The audit log is where you answer it: a running record of administrative actions in your organization, newest first. You can only look — this page has no edit or delete buttons, so the record cannot be tidied up after the fact. Only Owner and Admin roles can open it, and it only ever shows your own organization’s records.

Step 1: Open the log and read a row#

1. Open Admin → Audit Log (/admin/audit). The newest actions are at the top.
2. Read across the row: each entry has five columns, explained below.

• Time — when the action happened, down to the second.
• Actor — the email of the person who did it. An entry with no email means there is no person attached to that record.
• Action — what was done, shown as a short code-like label (for example a staff or role change). Pick the exact wording from the Action filter described in Step 2 — the dropdown lists the actions that have actually occurred in your organization.
• Target — what the action was done to, shown as the kind of thing plus the start of its ID, so you can match it with the record it belongs to.
• Detail — extra notes recorded with the action, such as the reason given for it. Long details are cut short in the list so the row stays readable.

The log opens unfiltered, newest first — often the answer is already on the first screen. This list is the Audit Log page itself (Admin → Audit Log); if what you are looking for is a background job rather than a person’s action, that lives in Admin → Scheduled Jobs instead.

Step 2: Filter by date, person or action#

1. Set a From and To date if you roughly know when it happened — this alone usually shrinks the list a lot.
2. Type part of the person’s email in Actor email if you know who you are checking on — you do not need the full address.
3. Pick an Action from the dropdown if you know the kind of change. “All” is the default; the other choices are the action types that have actually occurred in your organization.
4. Click Search to apply the filters. Change any filter and click Search again to refresh the list.

Filters combine: date range plus a person plus an action type gives you a very short list. The results are paged — use the pager under the table to move through them, and you can change how many rows show per page (50 by default).

Step 3: Work a real question#

1. Start from the complaint, in plain words: for example, “someone lost access last week” or “this role’s settings changed”.
2. Set the date range to cover those days, and add the person’s email if you have a suspect — or leave the person empty and filter by action type if you do not.
3. Read the matching rows top to bottom: Time tells you when, Actor tells you who, Target tells you which record it touched, and Detail often carries the reason that was given at the time.
4. If nothing matches, widen the dates first — most “it is not in the log” cases turn out to be the wrong week, not a missing record.

Docklify features used in this article#

• Audit log list (Time / Actor / Action / Target / Detail, newest first) — Admin → Audit Log (/admin/audit)
• Filters: From / To dates, Actor email (partial match), Action dropdown — Admin → Audit Log (/admin/audit)
• Paged results (50 rows per page by default, adjustable) — Admin → Audit Log (/admin/audit)