The fourth of the audit catalogue's pages: what changed on the team itself. A team setting, the policy acknowledged, a domain verified, a member joining or waiting, a budget asked for and granted, a token revoked, the pause and the resume. Every one is reported by our servers.
The team
| Type | Reported by | When | Detail carries |
|---|---|---|---|
team.changed | Server | A team setting changed: policies, keys, the audit sink, or who is on the team — invited, invitation resent or withdrawn, joined, declined, removed, role changed. | what changed |
team.paused | Server | An owner or admin paused the team: every member's runs stop, tokens are revoked, nothing starts. | by |
team.resumed | Server | The team was resumed. | by |
budget.requested | Server | A member asked for more budget from where they were stopped. | usd, why |
budget.granted | Server | An owner or admin granted a budget request for the month. | member, usd, month |
budget.declined | Server | An owner or admin declined a budget request. | member, usd, month |
token.revoked | Server | An admin revoked every API token and app connection a member held. | member, count |
policy.acknowledged | Server | A member read the team's policy and clicked understood. | version |
domain.verified | Server | An admin proved the team's domain with a DNS record. | domain |
sso.configured | Server | An admin saved the team's company sign-in (its directory's issuer and client). | issuer |
sso.required | Server | An admin required company sign-in for everyone on the verified domain. | — |
sso.optional | Server | An admin stopped requiring company sign-in. | — |
sso.removed | Server | An admin removed the team's company sign-in, and with it any requirement. | — |
member.joined | Server | An account joined the team by its verified domain, or was admitted by an admin. | by, domain or admittedBy |
member.pending | Server | An account on the verified domain signed in and waits for an admin, or for a seat. | domain, why |
test | Server | A test event from the Team page. | sentence |
Who reports them
Every event on this page is reported by the server: our servers observed the change themselves, so a Mac with admin access cannot suppress one. The actor is the account that made the change; a budget grant names the member it was for.