List recent security-relevant events
The audit events worth an administrator's attention, newest first.
/v1/workspace/security/recent-eventsAdmin- Operation id
- security_recent_events
- Access
- An editor or a viewer is refused.
/v1/workspace/security/recent-eventsThe audit events worth an administrator's attention, newest first.
A fixed set of high-risk actions, such as a role change, a session revocation or a key being minted. It is a filtered view of the audit log, not a second log, so anything here also appears there.
limit is 1 to 100 and defaults to 20. There is no paging and no filter:
for anything else, search the audit log itself.
Tenancy: the request is scoped to one workspace, and the credential presented is what selects it. A caller with no membership in that workspace is refused with 404, which is indistinguishable from a workspace that does not exist.
Authorisation: admin or owner. An editor or viewer receives 403 insufficient_role.
Access: Authorization: Bearer carrying either a realm access token or an API key. A key must hold the workspace-admin:write scope, and the workspace role of the person who owns it must meet the floor above.
A realm-issued access token, presented as Authorization: Bearer <token>. It acts as the person who signed in, and every operation resolves their workspace role live from the membership record.
In: header
Query Parameters
1 <= value <= 10020Response Body
application/json
application/json
curl -X GET "https://example.com/v1/workspace/security/recent-events"{}