---
title: "List audit records for a user"
method: GET
path: "/users/{id}/audit/records"
tags: ["Users"]
---

# List audit records for a user

`GET /users/{id}/audit/records`

The response will include audit records with changes that are made to the identified user not changes made by the identified user.


The returned records are sorted by the `execution_time` from newest to oldest.

See [`Cursor-based pagination`](https://developer.pagerduty.com/docs/rest-api-v2/pagination/) for instructions on how to paginate through the result set.

For more information see the [Audit API Document](https://developer.pagerduty.com/docs/rest-api-v2/audit-records-api/).

Scoped OAuth requires: `audit_records.read`

## Path parameters

- `id` string, required

## Query parameters

- `limit` integer
- `cursor` string
- `since` string, date-time
- `until` string, date-time

## Headers

- `Accept` string, required
- `Content-Type` 'application/json', required

## Response `200`

Records matching the query criteria.

- AuditRecordResponseSchema
  - `records` AuditRecord[], required — unresolved $ref
  - `response_metadata` AuditMetadata
    - `messages` string[], nullable
  - `limit` integer, required — The minimum of the `limit` parameter used in the request or the maximum request size of the API.
  - `next_cursor` string, nullable, required — An opaque string than will deliver the next set of results when provided as the `cursor` parameter in a subsequent request. A `null` value for this field indicates that there are no additional results.

## Other responses

- `400` — Caller provided invalid arguments. Please review the response for error details. Retrying with the same arguments will *not* work.
- `401` — Caller did not supply credentials or did not provide the correct credentials. If you are using an API key, it may be invalid or your Authorization header may be malformed.
- `402` — Account does not have the abilities to perform the action. Please review the response for the required abilities. You can also use the [Abilities API](#resource_Abilities) to determine what features are available to your account.
- `403` — Caller is not authorized to view the requested resource. While your authentication is valid, the authenticated user or token does not have permission to perform this action.
- `404` — The requested resource was not found.
- `429` — Too many requests have been made, the rate limit has been reached.
- `500` — Internal Server Error the PagerDuty server experienced an error.

---

[API](https://skmtc.net/pagerduty/apis/rest-api.md) · [All operations](https://skmtc.net/pagerduty/apis/rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pagerduty/rest-api/revisions/b679a8f3f02c/schema)