Audit Events

What Are Access Events?

Every access grant operation (create, revoke) is recorded as an access event. This provides an audit trail of permission changes.

Querying Events

GET /access-events?subject_id=user-uuid&from=2026-01-01T00:00:00Z&to=2026-01-31T23:59:59Z

Param	Type	Description
subject_id	UUID	Filter by subject user
resource_type	string	Filter by resource type
resource_id	UUID	Filter by resource ID
from	RFC3339	Start of time range
to	RFC3339	End of time range

Invalid from/to values are silently ignored (no error).

Event Shape

{
  "id": "uuid",
  "occurred_at": "2026-01-15T10:00:00Z",
  "org_id": "uuid",
  "subject_type": "user",
  "subject_id": "user-uuid",
  "verb": "write",
  "resource_type": "project",
  "resource_id": "project-uuid",
  "decision": "granted",
  "grant_id": "grant-uuid"
}

Access

Only org admin/owner can view audit events.

Related

• Access Grants — Creating and managing grants