Team activity
Review an audit trail of activity across your WorkOS team.
Team activity provides an audit trail of activity across your WorkOS team. Use it to understand who or what changed a resource, what changed, and when the action occurred.
Team activity records actions involving team members, organizations, API keys, connections, webhooks, AuthKit settings, and other resources. Each event includes:
- Action: the type of activity that occurred.
- Actor: the identity, credential, team, or system that performed the action.
- Targets: the resources affected by the action.
- Occurred at: the date and time of the action.
- Details: additional event data provided as JSON.
Team activity is available to team Admins. To enable it for your team, contact WorkOS support.
After team activity is enabled, open Settings > Team activity in the WorkOS dashboard.
Events are shown in reverse chronological order. You can search events, filter them by event type or a date range within the previous 90 days, and select an event to inspect its metadata and JSON details.
Log streaming continuously sends team activity events to a destination you manage. Use it to centralize WorkOS activity with your other security and operational data.
The supported destinations and payload formats are the same as those described in the Log Streams documentation, including SIEM providers, data warehouses, object storage, and generic HTTPS endpoints.
To enable team activity log streaming, contact WorkOS support.