---
title: "Get Audit Log"
method: GET
path: "/audit_log"
tags: ["Audit Log"]
---

# Get Audit Log

`GET /audit_log`

Get <a href="https://help.wrike.com/hc/en-us/articles/209606309-Audit-Log-Reports">Audit Log Reports</a>, that contains audit trail for actions in the account. Available to Enterprise admins with "Create user activity reports" right.

<b>Scopes:</b> amReadOnlyAuditLog

## Query parameters

- `pageSize` number — Page size
- `nextPageToken` string — Next page token, overrides any other parameters in request
- `objectType` 'Account' | 'Group' | 'AnalyzeReportWidget' | 'Task' | 'User' | 'WorkspaceSnapshot' | 'TimesheetTimeframeSettings' | 'CalendarExternalLink' | 'Attachment' | 'Folder' | 'DataExport' | 'PowerBIEntity' | 'Whiteboard' | 'Space' | 'Comment' | 'RequestForm' | 'AccessRole' | 'Timesheet' | 'Invitation' | 'Workflow' | 'AnalyzeReport' | 'Oauth2Client' | 'Project' | 'PublicLink' | 'UserRole' | 'CustomField' | 'UserType' — * `Account` * `Group` * `AnalyzeReportWidget` * `Task` * `User` * `WorkspaceSnapshot` * `TimesheetTimeframeSettings` * `CalendarExternalLink` * `Attachment` * `Folder` * `DataExport` * `PowerBIEntity` * `Whiteboard` * `Space` * `Comment` * `RequestForm` * `AccessRole` * `Timesheet` * `Invitation` * `Workflow` * `AnalyzeReport` * `Oauth2Client` * `Project` * `PublicLink` * `UserRole` * `CustomField` * `UserType`

## Response `2XX`

success response

- object
  - `data` AuditLog[]
    - `ipAddress` string — IP address from which an operation was performed
    - `objectName` string — Object name
    - `userEmail` string — Operational user e-mail
    - `details` object — Map<String, String> - Operation details
    - `id` string
    - `operation` 'SecondFactorEnabled' | 'CustomFieldRemoved' | 'CalendarExternalLinksActivated' | 'TaskDuplication' | 'GanttSnapshotDeleted' | 'CalendarExternalLinkDeleted' | 'TaskRestored' | 'CalendarExternalLinksDeactivated' | 'PowerBIPublicLinkDeleted' | 'ApprovalCanceled' | 'RequestFormCreated' | 'SamlClearPasswordForSamlUsers' | 'OneTimePasswordUsed' | 'AnalyzeWidgetPublicLinkCreated' | 'TaskErased' | 'InvitationPolicyChanged' | 'CalendarExternalLinkCreated' | 'UserTaskGroupRolesChanged' | 'UserJoinedSpace' | 'SamlSSOSettingsChanged' | 'UserFailLogin' | 'SamlSSODisabled' | 'AdminMailSettingsChanged' | 'CustomFieldRemovedFromFolder' | 'UserLoggedIn' | 'UserRoleChanged' | 'CustomFieldAddedToFolder' | 'UserTypeModified' | 'AccessCodeAccepted' | 'PublicLinkExpirationChanged' | 'UserLogout' | 'PowerBIPublicLinkCreated' | 'GuestReviewerRevoked' | 'ApprovedIpRangesOrSubnetsChanged' | 'TaskScheduleChanged' | 'CustomFieldRestored' | 'AccountDeleted' | 'UserAdminPermissionsChanged' | 'AttachDeleted' | 'SpaceDeleted' | 'AuditReportCreated' | 'UserTypeCreated' | 'ExcelExportCreated' | 'AdminLoggedInAsUser' | 'WorkflowCreated' | 'TaskUnsharedFromAuthor' | 'AccessAuditReportCsvExport' | 'AttachMarkAsFinal' | 'OneTimePasswordStatusSwitched' | 'ApproverAdded' | 'UserLeftSpace' | 'TaskUnarchived' | 'ApprovalDescriptionChanged' | 'GroupParentRemoved' | 'GuestReviewAccountSettingsChanged' | 'WorkflowDeleted' | 'PasswordPolicyModified' | 'GroupInviteeAdded' | 'UserRestored' | 'WorkflowArchived' | 'ApprovalDueDateChanged' | 'AnalyzeWidgetPublicLinkDeleted' | 'SpaceArchivedUnarchived' | 'TaskStatusChanged' | 'TaskCommentChanged' | 'AccessRoleDeleted' | 'TaskUnassigned' | 'AnalyzePublicLinkCreated' | 'GuestReviewRejected' | 'TaskUnshared' | 'PasswordChanged' | 'RequestFormDeleted' | 'AttemptDownloadInfectedAttach' | 'InvitationSend' | 'AccessRoleModified' | 'SpaceCreated' | 'ApprovedDomainsChanged' | 'TimesheetStatusChanged' | 'TimelogLocked' | 'UserRevokeAdmin' | 'RecycleBinErased' | 'ApproverRemoved' | 'UserDeleted' | 'GanttSnapshotCreated' | 'GroupMemberRemoved' | 'UserProfileUpdated' | 'SecondFactorUsageReportCreated' | 'SecondFactorDisabled' | 'WhiteboardCreated' | 'AttachViewed' | 'AccessRoleCreated' | 'GroupMemberAdded' | 'AccountDataExportRequested' | 'SamlSSOMetadataChanged' | 'GroupRenamed' | 'PublicLinkCreated' | 'TaskShared' | 'AccountModified' | 'PublicLinkPasswordRequested' | 'WorkflowModified' | 'PublicLinkDeleted' | 'AccessCodeDeclined' | 'AnalyzeWidgetPublicLinkAccessed' | 'ApprovalCreated' | 'Oauth2AccessRevoked' | 'TaskParentRemoved' | 'AntivirusDeletedInfectedAttach' | 'RequestFormModified' | 'GroupInviteeRemoved' | 'GuestReviewerInvited' | 'TaskArchived' | 'AccountBackupCreated' | 'FeedCreated' | 'AccessCodeGenerated' | 'UserDeactivated' | 'AttachCopied' | 'GroupParentAdded' | 'GuestReviewerChanged' | 'TimelogUnlocked' | 'TaskCreated' | 'WhiteboardRemoved' | 'OneTimePasswordRevoked' | 'ApprovalFinished' | 'TaskAssigned' | 'OneTimePasswordCreated' | 'GroupCreated' | 'TimesheetCreated' | 'UsersAndGroupsExported' | 'AttachMoved' | 'CustomFieldCreated' | 'AutomatedIntegrationsExecution' | 'PowerBIPublicLinkAccessed' | 'AttachUnmarkAsFinal' | 'AnalyzePublicLinkAccessed' | 'TimesheetTimeframeSettingsModified' | 'GroupDeleted' | 'CustomFieldModified' | 'TaskCommentDeleted' | 'AnalyzePublicLinkDeleted' | 'UserTypeDeleted' | 'TimesheetTimeframeSettingsCreated' | 'Oauth2AccessGranted' | 'UserGrantAdmin' | 'PublicLinksAccountSettingsChanged' | 'WorkflowUnarchived' | 'TaskDeleted' | 'InvitationAccepted' | 'AccountDataExportGenerated' | 'SamlSSOEnabled' | 'PublicLinkPasswordChanged' | 'TaskParentAdded' | 'ApprovalDecisionMade' | 'GuestReviewAccepted' | 'UserCustomFieldValueChanged' | 'UserActivated' | 'AttachUploaded' | 'AttachDownloaded' — * `SecondFactorEnabled` * `CustomFieldRemoved` * `CalendarExternalLinksActivated` * `TaskDuplication` * `GanttSnapshotDeleted` * `CalendarExternalLinkDeleted` * `TaskRestored` * `CalendarExternalLinksDeactivated` * `PowerBIPublicLinkDeleted` * `ApprovalCanceled` * `RequestFormCreated` * `SamlClearPasswordForSamlUsers` * `OneTimePasswordUsed` * `AnalyzeWidgetPublicLinkCreated` * `TaskErased` * `InvitationPolicyChanged` * `CalendarExternalLinkCreated` * `UserTaskGroupRolesChanged` * `UserJoinedSpace` * `SamlSSOSettingsChanged` * `UserFailLogin` * `SamlSSODisabled` * `AdminMailSettingsChanged` * `CustomFieldRemovedFromFolder` * `UserLoggedIn` * `UserRoleChanged` * `CustomFieldAddedToFolder` * `UserTypeModified` * `AccessCodeAccepted` * `PublicLinkExpirationChanged` * `UserLogout` * `PowerBIPublicLinkCreated` * `GuestReviewerRevoked` * `ApprovedIpRangesOrSubnetsChanged` * `TaskScheduleChanged` * `CustomFieldRestored` * `AccountDeleted` * `UserAdminPermissionsChanged` * `AttachDeleted` * `SpaceDeleted` * `AuditReportCreated` * `UserTypeCreated` * `ExcelExportCreated` * `AdminLoggedInAsUser` * `WorkflowCreated` * `TaskUnsharedFromAuthor` * `AccessAuditReportCsvExport` * `AttachMarkAsFinal` * `OneTimePasswordStatusSwitched` * `ApproverAdded` * `UserLeftSpace` * `TaskUnarchived` * `ApprovalDescriptionChanged` * `GroupParentRemoved` * `GuestReviewAccountSettingsChanged` * `WorkflowDeleted` * `PasswordPolicyModified` * `GroupInviteeAdded` * `UserRestored` * `WorkflowArchived` * `ApprovalDueDateChanged` * `AnalyzeWidgetPublicLinkDeleted` * `SpaceArchivedUnarchived` * `TaskStatusChanged` * `TaskCommentChanged` * `AccessRoleDeleted` * `TaskUnassigned` * `AnalyzePublicLinkCreated` * `GuestReviewRejected` * `TaskUnshared` * `PasswordChanged` * `RequestFormDeleted` * `AttemptDownloadInfectedAttach` * `InvitationSend` * `AccessRoleModified` * `SpaceCreated` * `ApprovedDomainsChanged` * `TimesheetStatusChanged` * `TimelogLocked` * `UserRevokeAdmin` * `RecycleBinErased` * `ApproverRemoved` * `UserDeleted` * `GanttSnapshotCreated` * `GroupMemberRemoved` * `UserProfileUpdated` * `SecondFactorUsageReportCreated` * `SecondFactorDisabled` * `WhiteboardCreated` * `AttachViewed` * `AccessRoleCreated` * `GroupMemberAdded` * `AccountDataExportRequested` * `SamlSSOMetadataChanged` * `GroupRenamed` * `PublicLinkCreated` * `TaskShared` * `AccountModified` * `PublicLinkPasswordRequested` * `WorkflowModified` * `PublicLinkDeleted` * `AccessCodeDeclined` * `AnalyzeWidgetPublicLinkAccessed` * `ApprovalCreated` * `Oauth2AccessRevoked` * `TaskParentRemoved` * `AntivirusDeletedInfectedAttach` * `RequestFormModified` * `GroupInviteeRemoved` * `GuestReviewerInvited` * `TaskArchived` * `AccountBackupCreated` * `FeedCreated` * `AccessCodeGenerated` * `UserDeactivated` * `AttachCopied` * `GroupParentAdded` * `GuestReviewerChanged` * `TimelogUnlocked` * `TaskCreated` * `WhiteboardRemoved` * `OneTimePasswordRevoked` * `ApprovalFinished` * `TaskAssigned` * `OneTimePasswordCreated` * `GroupCreated` * `TimesheetCreated` * `UsersAndGroupsExported` * `AttachMoved` * `CustomFieldCreated` * `AutomatedIntegrationsExecution` * `PowerBIPublicLinkAccessed` * `AttachUnmarkAsFinal` * `AnalyzePublicLinkAccessed` * `TimesheetTimeframeSettingsModified` * `GroupDeleted` * `CustomFieldModified` * `TaskCommentDeleted` * `AnalyzePublicLinkDeleted` * `UserTypeDeleted` * `TimesheetTimeframeSettingsCreated` * `Oauth2AccessGranted` * `UserGrantAdmin` * `PublicLinksAccountSettingsChanged` * `WorkflowUnarchived` * `TaskDeleted` * `InvitationAccepted` * `AccountDataExportGenerated` * `SamlSSOEnabled` * `PublicLinkPasswordChanged` * `TaskParentAdded` * `ApprovalDecisionMade` * `GuestReviewAccepted` * `UserCustomFieldValueChanged` * `UserActivated` * `AttachUploaded` * `AttachDownloaded`
    - `userId` string
    - `objectId` string — Object ID
    - `eventDate` string — Date and time when operation was performed<br>Format: yyyy-MM-dd'T'HH:mm:ss'Z'
    - `objectType` 'Account' | 'Group' | 'AnalyzeReportWidget' | 'Task' | 'User' | 'WorkspaceSnapshot' | 'TimesheetTimeframeSettings' | 'CalendarExternalLink' | 'Attachment' | 'Folder' | 'DataExport' | 'PowerBIEntity' | 'Whiteboard' | 'Space' | 'Comment' | 'RequestForm' | 'AccessRole' | 'Timesheet' | 'Invitation' | 'Workflow' | 'AnalyzeReport' | 'Oauth2Client' | 'Project' | 'PublicLink' | 'UserRole' | 'CustomField' | 'UserType' — * `Account` * `Group` * `AnalyzeReportWidget` * `Task` * `User` * `WorkspaceSnapshot` * `TimesheetTimeframeSettings` * `CalendarExternalLink` * `Attachment` * `Folder` * `DataExport` * `PowerBIEntity` * `Whiteboard` * `Space` * `Comment` * `RequestForm` * `AccessRole` * `Timesheet` * `Invitation` * `Workflow` * `AnalyzeReport` * `Oauth2Client` * `Project` * `PublicLink` * `UserRole` * `CustomField` * `UserType`
  - `kind` 'accounts' | 'users' | 'contacts' | 'assets' | 'eDiscoveryReport' | 'folders' | 'folderTree' | 'tasks' | 'taskIds' | 'timelogs' | 'timelogCategories' | 'timelogLockPeriods' | 'timetrackerTimers' | 'comments' | 'attachments' | 'url' | 'version' | 'dataExport' | 'dataExportSchema' | 'auditLog' | 'accessRoles' | 'stream' | 'changes' | 'posts' | 'mailSettings' | 'integrationInfo' | 'gmailIntegrationSettings' | 'workTypesForIntegrations' | 'ids' | 'backups' | 'domains' | 'dependencies' | 'workflows' | 'workschedules' | 'workscheduleExclusions' | 'workscheduleUserExclusions' | 'customfields' | 'customfieldIds' | 'customstatuses' | 'invitations' | 'notifications' | 'jobroles' | 'placeholders' | 'groups' | 'session' | 'dashboards' | 'widgets' | 'taskCreationSettings' | 'colors' | 'experiments' | 'topics' | 'topicComments' | 'webhooks' | 'reviews' | 'boards' | 'textSearch' | 'chatChannels' | 'chatMessages' | 'forms' | 'requestForms' | 'request' | 'report' | 'platformWidgets' | 'platformWidgetInstances' | 'spaces' | 'pdf' | 'customerSatisfaction' | 'asyncJob' | 'approvals' | 'highlights' | 'highlightsList' | 'highlightsSettings' | 'highlightsCard' | 'timesheet' | 'timesheetRow' | 'timesheetSubmissionRule' | 'mobileFeatures' | 'mobileSettings' | 'folderBlueprintTree' | 'taskBlueprintTree' | 'feedback' | 'timeline_snapshot' | 'contactIds' | 'bookings' | 'integrateThreshold' | 'hourlyRatesProvision' | 'hourlyRates' | 'projectTeamMembers' | 'contactsHistory' | 'tasksHistory' | 'foldersHistory' | 'activityDigest' | 'workItemTemplates' | 'workTemplates' | 'workItemMetadata' | 'workItem' | 'customItemTypes' | 'verificationCode' | 'views' | 'listView' | 'tableView' | 'userTypes' | 'reactions' | 'externalRequesters' | 'workscheduleCapacityOverrides' | 'userCapacityOverrides' | 'userCapacityExclusions' | 'rollups' | 'requestFormPrefill' | 'userAggregatedCapacity' | 'cascadingFieldSettings'

## Other responses

- `4XX` — client-side error response
- `5XX` — server-side error response

---

[API](https://skmtc.net/wrike/apis/wrike-api.md) · [All operations](https://skmtc.net/wrike/apis/wrike-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wrike/wrike-api/revisions/f1c1279c29d6/schema)
