> ## Documentation Index
> Fetch the complete documentation index at: https://elephas.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Review Team Activity with the Audit Log

> Use the Elephas Team audit log to review membership, role, device, Brain access and AI policy changes. What is logged, what is never logged, and who can see it.

The audit log in **Team Settings › Security & Audit** records who changed what in your Team: invitations, roles, computers, Brain access, the AI policy and Recovery Authority. It names people and actions, never what your documents say.

<Info>
  Available in **Team workspaces**, for **Owners** and **Admins**.
</Info>

## Before you start

* You are the Team Owner or an Admin. Members see: "Only the Team Owner or an Admin can view audit events. Your current role does not have access."
* An internet connection. Events are stored on the Elephas server.

## Steps

<Steps>
  <Step title="Open Security & Audit">
    Go to **Team Settings › Security & Audit**.
  </Step>

  <Step title="Read the record">
    Each row is one event: what happened, who did it, what it affected and when. Events are listed newest first.
  </Step>

  <Step title="Go further back">
    Click **Load older events** at the bottom. "End of recorded events." means you have reached the start.
  </Step>
</Steps>

## How it works

### What is logged

| Event | Shown as |
| - | - |
| Someone was invited | A teammate was invited |
| An invitation was revoked | An invitation was revoked |
| A role changed | A member's role was changed |
| Someone was removed | A member was removed |
| A computer was approved | A device was approved |
| A computer was blocked | A device was blocked |
| Brain access granted | Access to a Team Brain was granted |
| Brain access removed | Access to a Team Brain was revoked |
| The AI policy changed | The Team AI policy was changed |
| Recovery Authority granted | Recovery Authority was granted |
| Recovery Authority removed | Recovery Authority was revoked |

The server can record more kinds of event than this version of the app knows how to name. Those appear as "Event" followed by a code.

### What is never logged

Audit events are content-free. They name who and what, never what a document says. They never contain Brain names, file names, document text, questions, answers or keys.

### Severity

Each event has a severity: Critical, High, Warning or Info. The list is not sorted by severity. "Newest first. The order is the record, so nothing is sorted by severity." The line under the title counts how many events need a look.

### Security notifications

On the same screen, **Security Notifications** shows the current state of things that may need action, such as computers waiting for approval, blocked computers, or Brains waiting for keys. **Show Diagnostics** adds technical details for support. Diagnostics contain only states, versions and counts, never names, content or keys.

## Troubleshooting

<AccordionGroup>
  <Accordion title="Audit events could not be loaded">
    Check your internet connection and try again.
  </Accordion>

  <Accordion title="An event shows a code instead of a description">
    This version of Elephas does not have words for that event yet. Update Elephas. See [Update Elephas](/docs/getting-started/update-elephas).
  </Accordion>

  <Accordion title="The person is shown as an ID">
    Rows name the person and the target by an opaque ID, not by name. Send the ID to support if you need help matching it to a member.
  </Accordion>
</AccordionGroup>

More fixes in [Team errors](/docs/troubleshooting/team-troubleshooting).

## Related articles

<CardGroup cols={2}>
  <Card title="Roles and permissions" href="/docs/teams/team-roles-and-permissions" />

  <Card title="Team devices" href="/docs/teams/manage-team-devices" />

  <Card title="Security overview" href="/docs/privacy-and-security/security-overview" />

  <Card title="Teams overview" href="/docs/teams/teams-overview" />
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.