ACL Audit Records
The ACL Audit Records screen is reached from the Administration > Auditing menu.
Recorded Operations
The screen records every grant and revoke event that occurs on the API Proxy and API Proxy Group access permissions assigned to credentials. Each record shows three pieces of information together:
- Source Type: Indicates which flow the permission change came from. The table displays it as either ACL or PORTAL. ACL covers every permission granted or removed manually from the Identity screens as well as through a contract; PORTAL covers permissions that result from a product subscription made through the API Portal.
- Operation Type: Grant (permission granted) or Revoke (permission removed).
- Reason Type: Indicates the underlying event that triggered the operation.
When a credential is given API Proxy or API Proxy Group access through a contract (Contracts screen), that operation also appears on this screen as a Grant record; its Source Type is marked ACL, the same as a manual grant made from the Identity screen. The record does not separately indicate whether the permission originated from a contract or a manual assignment.
Reason Types
| Reason Type | Description |
|---|---|
| API Proxy Group Deleted | An API Proxy Group the credential had access to was deleted, so the permission is removed. |
| API Proxy Group Permission | Occurs when an API Proxy Group permission is granted or removed from the Identity screen or through a contract. |
| API Proxy Group Permission Expired | An API Proxy Group permission's expiration date has passed, so it is removed automatically. |
| API Proxy Group Added | A new API Proxy was added to an API Proxy Group the credential already had access to, so the credential also gains access to it. |
| API Proxy Group Removed | An API Proxy was removed from an API Proxy Group, so the credential's access to that API Proxy is removed. |
| API Proxy Deleted | An API Proxy the credential had access to was deleted, so the permission is removed. |
| API Proxy Permission | Occurs when an API Proxy permission is granted or removed from the Identity screen or through a contract. |
| API Proxy Permission Expired | An API Proxy permission's expiration date has passed, so it is removed automatically. |
| API Proxy Method Added | A new method was added to an API Proxy the credential already had access to, so the credential also gains access to it. |
| API Proxy Method Removed | A method was removed from an API Proxy, so the credential's access to that method is removed. |
| Portal Subscription | The credential subscribed to a product through the API Portal, granting access to the API Proxies tied to that product. |
| Portal Unsubscription | The credential's subscription to a product through the API Portal ended, removing the associated access. |
| Portal Product Deleted | An API Portal product was deleted, so the access tied to it is removed. |
| Credential Enabled | A disabled credential was re-enabled, so all of its permissions become active again. |
| Credential Disabled | A credential was disabled, so all of its permissions are temporarily removed. |
| Credential Deleted | A credential was deleted, so all of its permissions are permanently removed. |
Filtering
You can set criteria from the filter fields at the top of the page to view results in the table. Filter contents can be cleared with the delete button.
| Field | Description |
|---|---|
| Start Date / End Date | Filters records by a date range on the operation date. |
| Operation Type | Filters records by Grant or Revoke. |
| Credential Username | Returns records whose credential username contains the entered value. |
| Credential E-mail | Returns records whose credential e-mail contains the entered value. |
| Credential Organization Name | Returns records whose organization name contains the entered value. |
| Project(s) | Returns records related to API Proxies belonging to the selected project(s). |
| API Proxy(s) | Returns records related to the selected API Proxy(s). |
| API Proxy Method Name | Returns records whose API Proxy method name contains the entered value. |
| Routing Address | Returns records whose routing address contains the entered value. |
Table Columns
| Column | Description |
|---|---|
| Operation Date | The date and time the operation occurred. |
| Source Type | The origin of the permission — ACL or PORTAL. |
| Operation Type | Grant or Revoke. |
| Reason Type | The event that triggered the operation (see the table above). |
| Credential Username | The username of the credential the permission belongs to. |
| Credential E-mail | The e-mail address of the credential the permission belongs to. |
| Credential Organization Name | The organization the credential belongs to (if any). |
| API Proxy Name | The name of the API Proxy related to the permission. |
| API Proxy Method Name | The name of the API Proxy method related to the permission (for method-level permissions). |
| Routing Address | The routing address of the related API Proxy method. |
| Product Name | For records with Source Type PORTAL, the name of the API Portal product the subscription is for. |
Excel Export
The Excel icon at the top of the page exports all records currently listed under the applied filter criteria as an Excel file.
Difference from ACL Report
The ACL Report screen is a snapshot of credentials' current API Proxy access status. The ACL Audit Records screen is an event history showing how that access was created and removed over time — which permission was granted or revoked, when, and for what reason.