Security / Reference

Audit log events

Explore the fields accepted for each Replit audit event, including actors, targets, request context, and metadata.

Raw manifest
Target: userTarget: accountVersion: 3

account.admin_added

An administrator was added to an Account.

View raw JSON

Event fields

FieldTypeRequiredDescription
occurredAtDateYesWhen the action occurred.

Actor

The user or system that performed the action.

FieldTypeRequiredDescription
idstringYesThe stable Replit user ID, or system for an automated action.
typestringYesWhether the actor is a user or the Replit system.
namestringNoThe user email address, when available.
metadataobjectNoNone

Target User

The user affected by the action.

FieldTypeRequiredDescription
idstringYesThe stable user ID.
typeliteralYesThe target type: user.
namestringNoThe user email address.
metadataobjectNoNone

Target Account

The Account at the top of the affected resource hierarchy.

FieldTypeRequiredDescription
idstringYesThe stable Account customer ID.
typeliteralYesThe target type: account.
namestringNoThe Account display name.

Request context

The request context for the action.

FieldTypeRequiredDescription
locationstringYesThe IP address where the request originated.
userAgentstringNoThe client user agent, when available.

Event metadata

Additional metadata.

This event does not define named metadata fields.