Review audit and permission history

Use recorded events to investigate changes in their proper context.

Open Audit when your account has the required Operations and audit access. Use its available filters to narrow the records to the action, actor, resource, and period relevant to your investigation.

For project permission changes, also use View permission history from Share & permissions. Keep the resource and event context when escalating an issue.

An audit log is a record of the events the application captures. Do not assume it contains every read, every provider-side change, or unlimited history. Check the event type and timestamp before drawing conclusions.

Audit access is scoped in the current permission model. A qualifying Operations Member can have audit view scope; role and area restrictions still apply.