Get one audit event with its full diff
One audit event, always with its full before and after payload.
/v1/workspace/audit-events/{event_id}Admin- Operation id
- get_audit_event
- Access
- An editor or a viewer is refused.
/v1/workspace/audit-events/{event_id}One audit event, always with its full before and after payload.
Use this after finding an event in the list. Unlike the list, the diff is never omitted here.
before and after are the state either side of the change, as it was
recorded at the time. An event with nothing to compare, such as a read or a
sign-in, carries empty ones.
Tenancy: the request is scoped to one workspace, and the credential presented is what selects it. A caller with no membership in that workspace is refused with 404, which is indistinguishable from a workspace that does not exist.
Authorisation: admin or owner. An editor or viewer receives 403 insufficient_role.
Access: Authorization: Bearer carrying either a realm access token or an API key. A key must hold the workspace-admin:write scope, and the workspace role of the person who owns it must meet the floor above.
A realm-issued access token, presented as Authorization: Bearer <token>. It acts as the person who signed in, and every operation resolves their workspace role live from the membership record.
In: header
Path Parameters
uuidResponse Body
application/json
application/json
curl -X GET "https://example.com/v1/workspace/audit-events/497f6eca-6276-4993-bfeb-53cbbbba6f08"{}