Admin
Audit log
Every administrative action Joring records, and how to export it.
Joring records administrative actions to an append-only log, readable and exportable from Settings → Audit log by anyone whose role includes audit reads. Export is CSV.
The log records administrative actions. It does not record what people typed into AI tools — see Privacy model.
What is recorded
| Action | |
|---|---|
team.name.changed | Team renamed |
team.invite.created | Invite sent, once per person when several are invited at once |
team.invite.resent | Invite resent |
team.invite.canceled | Invite revoked |
team.member.removed | Member removed |
team.role_grant.created | Role granted |
team.role_grant.revoked | Role removed |
team.role_grant.expired | Timed role reached its end date |
team.member.manager_changed | Reporting line changed |
team.member.group_roles_changed | Roles from groups changed for a person |
team.group.created | Group created |
team.group.updated | Group renamed or described |
team.group.deleted | Group deleted |
team.group.members_added | Members added to a group |
team.group.member_removed | Member removed from a group |
team.group.roles_changed | Roles assigned on a group changed |
team.group.linked | Identity provider took over a group managed in Joring |
team.group.unlinked | Group moved to Joring management |
team.member_access.reviewed | External access confirmed for another 90 days |
team.member_access.expired | External access ended at its end date |
team.ownership_transfer.requested | Ownership transfer offered |
team.ownership_transfer.declined | Transfer declined |
team.ownership_transfer.canceled | Transfer canceled |
team.ownership.transferred | Ownership moved |
team.access_request.created | Access requested |
team.access_request.resolved | Access request resolved |
Reviewing it
The two entries worth alerting on are sso.policy.updated and
scim.token.created. The first can widen who is allowed to sign in; the second
mints a credential that can create accounts. Neither is unusual on its own —
both are worth knowing about when nobody scheduled a change.
Set policies for what may be sent to AI tools.