---
title: "Get a linked workspace audit log entry"
method: GET
path: "/v1/organization/webapp/audit_logs/{eventId}"
tags: ["Organization"]
---

# Get a linked workspace audit log entry

`GET /v1/organization/webapp/audit_logs/{eventId}`

Get a single audit log entry, including its metadata and forensic details, for a linked Runway workspace you administer. Authorized via the account link between this API project and the workspace.

## Path parameters

- `eventId` string, uuid, required

## Query parameters

- `organizationId` string, uuid

## Headers

- `X-Runway-Version` '2024-11-06', required

## Response `200`

Success

- object
  - `eventId` string, uuid, required — Unique identifier of the entry.
  - `timestamp` string, date-time, required — When the action occurred.
  - `action` 'UserLogin' | 'PasswordChanged' | 'EmailChangeRequested' | 'EmailChanged' | 'UserRegistered' | 'UserAccountDeleted' | 'WorkspaceCreated' | 'WorkspaceDeleted' | 'MemberInvited' | 'MemberRemoved' | 'MemberRoleChanged' | 'InviteAccepted' | 'TeamSettingsUpdated' | 'InviteLinkToggled' | 'UserGroupCreated' | 'UserGroupDeleted' | 'UserGroupMemberAdded' | 'UserGroupMemberRemoved' | 'SSOLogin' | 'SSOUserProvisioned' | 'SSOConfigCreated' | 'SSOUserAutoAddedToTeam' | 'SSODomainRegistrationCloned' | 'AssetCreated' | 'AssetUpdated' | 'AssetDeleted' | 'AssetDownloaded' | 'AssetShared' | 'AssetUnshared' | 'PermissionGranted' | 'PermissionUpdated' | 'PermissionRevoked' | 'PermissionAccepted' | 'SubscriptionCancelled' | 'SubscriptionPlanSwitched' | 'CreditsTransferred' | 'SeatsTransferred' | 'SessionShared' | 'SessionUnshared' | 'VideoProjectShared' | 'VideoProjectUnshared' | 'BrandKitShared' | 'BrandKitUnshared' | 'AgentCustomSkillCreated' | 'AgentCustomSkillDeleted' | 'AgentCustomSkillShared' | 'AgentCustomSkillUnshared' | 'AgentSessionShared' | 'AgentSessionUnshared' | 'AgentConnectorLinkTokenCreated' | 'AgentConnectorConnected' | 'AgentConnectorDisconnected' | 'AgentConnectorAssetExported' | 'AgentConnectorSessionEnabled' | 'AgentConnectorSessionDisabled' | 'GenerationCreated' | 'AccountLinkCreated' | 'AccountLinkDeleted' | 'OrganizationSettingsUpdated' | 'OrganizationDisabledModelsUpdated' | 'WorkspaceCountryLockUpdated' | 'WorkspaceTagCreated' | 'WorkspaceTagUpdated' | 'WorkspaceTagDeleted' | 'WorkspaceTagAssigned' | 'WorkspaceTagUnassigned' | 'MeteredBillingConfigUpdated' | 'MeteredBillingRefillTriggered' | 'MeteredBillingRetryTriggered' | 'EnterpriseSpendCapEnforcementUpdated', required — The action performed.
  - `actorUsername` string, nullable, required — Username of the user who performed the action.
  - `actorEmail` string, nullable, required — Email of the user who performed the action.
  - `actorDeleted` boolean, required — Whether the acting user has since been deleted.
  - `workspaceId` integer, required — ID of the owning workspace.
  - `workspaceName` string, required — Name of the owning workspace.
  - `metadata` object, required — Action-specific details.
    - `Workspace` unknown
    - `Invited member` unknown
    - `Removed member` unknown
    - `Target member` unknown
    - `Member email` unknown
    - `Previous role` unknown
    - `New role` unknown
    - `Role` unknown
    - `Login method` unknown
    - `Platform` unknown
    - `Application` unknown
    - `Plan` unknown
    - `Amount` unknown
    - `New User` unknown
    - `Group name` unknown
    - `Model` unknown
    - `Operation` unknown
    - `Asset name` unknown
    - `Tag name` unknown
    - `Tag color` unknown
    - `Workspace ID` unknown
    - `Workspace name` unknown
    - `Workspace picture` unknown
    - `Workspace description` unknown
    - `Default task name template` unknown
    - `Shared with workspace` unknown
    - `Shared with projects` unknown
    - `Hard spend cap` unknown
    - `Spend cap` unknown
  - `resourceType` string, nullable, required — Type of the affected resource, if any. Currently one of `account_link`, `agent_custom_skill`, `asset`, `brand_kit`, `generation`, `invite_link`, `membership`, `organization`, `permission`, `promotion`, `session`, `shared_asset`, `sso_config`, `sso_domain_registration`, `subscription`, `team_settings`, `user`, `user_group`, `video_project`, `workspace`, or `workspace_tag`. New types may be added over time, so treat this as an open set.
  - `resourceId` string, nullable, required — ID of the affected resource, if any.
  - `clientIpAddress` string, required — IP address of the client that performed the action.
  - `userAgent` string, nullable, required — User-Agent header of the client request.
  - `requestId` string, nullable, required — Request ID for correlation with other logs.

## Other responses

- `404` — The entry does not exist, or is not visible to your organization.

---

[API](https://skmtc.net/runwayml/apis/runwayml-api.md) · [All operations](https://skmtc.net/runwayml/apis/runwayml-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/runwayml/runwayml-api/revisions/cbbe796a13a0/schema)