#Activity Log

3 min read
RoleCustomer Activity Log Access
Client AdminCan view tenant-scoped activity
Client ManagerCan view tenant-scoped activity
Client StaffNo access

#Overview

The Activity Log page remains directly available at /audit-log for eligible customer roles. It provides tenant-scoped visibility into important actions and events within your organisation's AiDial portal.

Activity Log data is loaded through your signed-in portal session. The browser calls the portal's server-side BFF routes (/api/compliance/audit-events and /api/compliance/audit-events/actors); the portal re-checks your session, role, and tenant scope before calling aidial_api with a server-side bearer token. You do not need to enter or send an API key for this page.

The customer sidebar now uses Compliance for customer evidence workflows. /audit-log is still authorised as a directly addressable operational audit view for eligible roles.

#What You Can Review

  • Session lifecycle, sign-in failure, authorisation, Activity Log access, and sensitive-access events when they are present in the portal audit stream.
  • Export, transcript download, recording playback or download, billing, and other audited data-access actions.
  • Team, settings, tenant, data-governance, and compliance-related changes when they are written to the portal audit stream.
  • Who acted, what happened, when it happened, the affected project/setting/ticket/call, the result, and why the activity matters.
  • Technical evidence, including source IP, raw identifiers, policy decisions, and JSON metadata, when expanded and visible to your role.

#Filters And Detail

  • Filter by date range, business-area preset, action type, actor, and outcome.
  • Presets cover Settings changes, Support tickets, Security activity, Billing, Calls, and Data/privacy.
  • Use Load more events to continue through cursor-paginated results. Active filters are kept when loading the next page.
  • Expand individual rows to inspect Technical details such as target identifiers, purpose, justification, source IP, raw action type, and metadata when those fields are visible to your role and available.
  • Restricted or unavailable fields are shown with the page's redaction messaging rather than leaking restricted values.

#Access Notes

  • Only Client Admin and Client Manager users can open the customer Activity Log.
  • Client Staff users do not have access to this surface.
  • Tenant scope is enforced server-side from your session. Changing URL or API parameters cannot expose another organisation's activity events.
  • Opening the Activity Log is itself recorded as an audit_log_accessed event.
  • Partner roles use the same /audit-log route for assigned-client audit workflows; that partner workflow is outside this client guide.
  • AiDial staff accessing the same /audit-log route from the admin navigation must select a tenant before events are fetched. Cross-tenant access is recorded separately and is outside this client guide.
  • Older events only appear while they remain present in the activity event store.