Admin · Identity · Audit
Every key turn, recorded.
The IAM audit timeline. Authentications, sessions, change gates, break-glass, billing, and delegation rows append here in order. Incident-linked events tie back to the governance ledger.
Events106 facets
Warnings3outcome=warning
Denied0outcome=denied
Incident-linked2control-tagged
Audit timeline
Showing 10 of 10 events
| When | Event | Actor | Action | Scope | Target | Outcome |
|---|---|---|---|---|---|---|
| 2026-07-28 12:51 UTCEVT-9927 | sessionincident | systemSession flagged: unrecognized origin during active incident.incident-linked (INC-1) | session.flagged | tenant:NorthwindNorthwind Logistics | sess-4480 | warning |
| 2026-07-28 12:50 UTCEVT-9926 | break-glassincident | James TellermanBreak-glass assist opened on custodial account (reason: SEV2 service loss).incident-linked (INC-1) | break_glass.open | tenant:NorthwindNorthwind Logistics | BG-2201 | warning |
| 2026-07-28 12:48 UTCEVT-9890 | auth | systemMFA challenge pending for Marco Reyes (TOTP enrollment incomplete).mfa-required | auth.mfa_challenge | tenant:NorthwindNorthwind Logistics | u-nw-ops | warning |
| 2026-07-28 12:45 UTCEVT-9875 | delegation | James TellermanCustodial action: support ticket opened on behalf of customer.custodial-flow | delegation.custodial_act | tenant:NorthwindNorthwind Logistics | OBA-301 | success |
| 2026-07-28 12:40 UTCEVT-9905 | auth | Eliza CarringtonSSO login via Northwind IdP (MFA satisfied).sso | auth.login | tenant:NorthwindNorthwind Logistics | sess-4471 | success |
| 2026-07-28 12:34 UTCEVT-9901 | change | Avery LinEmergency reroute approved under incident-linked change gate.soc2-change | change.approve | platformNaaS Labs | CHG-5121 | success |
| 2026-07-28 00:05 UTCEVT-9882 | billing | systemAugust invoice issued for Northwind Logistics.period-close | billing.invoice_issued | tenant:NorthwindNorthwind Logistics | INV-NOR-1240 | success |
| 2026-07-27 08:00 UTCEVT-9898 | change | aegis-botDFW to PHX +200G augment scheduled for capacity review gate.capacity-review | change.schedule | platformNaaS Labs | CHG-5118 | success |
| 2026-07-24 11:02 UTCEVT-9920 | break-glass | Sasha KimBreak-glass closed: LOA uploaded, access released.loa-flow | break_glass.close | tenant:BriarcliffBriarcliff Health | BG-2198 | success |
| 2026-07-24 09:10 UTCEVT-9912 | break-glass | James TellermanBreak-glass opened for LOA processing.loa-flow | break_glass.open | tenant:BriarcliffBriarcliff Health | BG-2198 | success |
simAudit rows are read-only here. Live write actions append to this ledger through the platform-api audit route.