Who can view the audit log
What you can view depends on your roles:- With the Admin or Auditor role on a folder or account, you can view the events for that folder or account, including the events for every account in the folder
- With the Product Admin role, you can view the events that don’t belong to a folder or account, such as changes to templates and product members
View the audit log
Go to Privileged Access Management > Audit Logs. The audit log shows the newest events first. Each event names the actor, the action, and the folder or account it affected, along with when it happened. If the actor was a machine identity, the event shows Machine Identity in place of an email address. When an AI agent connects to an account, Infisical records the event under the user or machine identity that started the agent. To filter events by date, event type, or actor, check out Filtering audit logs. For filters that answer common PAM questions, such as who accessed an account, check out Common filters.What gets logged
To review every use of break-glass access, filter for PAM Access Policy Bypassed. Each of these events records the reason the user gave, the account and folder, and how many approvers were skipped.