About Canva audit logs
Who can use this feature?
- Available to Canva Enterprise
- Accessible by organization admins
Keep your organization secure and accountable with Canva Enterprise audit logs. Track user actions like design creation, sharing, export, users added to teams, logins and Admin API client activity. These help monitor unauthorized activities and investigate incidents.
Organization admins can directly view audit logs in Canva settings or externally store log data to integrate with preferred monitoring tools.
View audit logs
From Settings
- From the homepage, go to Settings.
- Select the Audit logs tab.
- Select Activity to view audit logs directly in Canva.
- You can filter the audit logs by selecting Search period.
- Click on each audit log row to view more information.
From your external storage
- From the homepage, go to Settings.
- Select the Audit logs tab.
- Select External Storage.
- Follow the steps here to set up your S3 bucket and start receiving raw audit logs data for your SIEM system to read events.
Activity is logged from the time an organization is added to Canva Enterprise and stored for 90 days:
- If an organization upgrades to Canva Enterprise from Canva Teams, the events will be logged from the time of upgrade.
- If a new team is added to the Canva Enterprise organization, their events will be logged from the time they join the Enterprise organization.
Activity details
- Timestamp - time is displayed in localized long date and time format.
- Actor - represents who performed the action. For Admin API client activity, this displays the Admin API client name and client ID to help identify which integration performed the request.
- Action - represents any key change or interaction made by a user or a system.
- Impacted - the user, group, team, organization, app or design that is impacted by the action.
- For more details, see here.
Export audit logs
You can export audit logs in a CSV file format via Export.
Admin API client activity is also included in CSV exports. Where applicable, exported logs include the Admin API client name and client ID to help identify which integration performed the request.
Select Download and your audit logs will take a few seconds to export into a CSV file. Your file will then automatically download in your browser.
Audit event coverage
The following user actions are covered as audit log events. For more detail, see our developer docs.
Resources | User actions |
|---|---|
Apps | Install app, Uninstall app, Update app, Deauthorize user with an app, and Authorize user with an app. |
Admin API | Admin API client activity, including Admin API client management events, denied Admin API requests, and successful changes made through Admin API clients. |
Content | Transfer ownership of user content within a Team, Create a copy of assets, folders, or designs, and Receive a copy of assets, folders, or designs. |
Designs | Create design, View design, Accept a design share, Import a file into Canva as a design, Trash a design, Restore a design from the trash, Delete a design, Restore a design, Update a design's access controls, Create design share message, Create design invite message, Request access to a design, and Grant access to a design. Note: Audit logs do not record information related to changes in designs. |
Exports | Exported design, Request to download a user's data and content in bulk, and Download a user's data and content in bulk. |
Folder | Request access to folder, and Grant access to folder. |
Groups | Create group, Update group, Delete group, Add user to group, Update user in group, and Remove user from group. |
Organizations | Update organization, Create organization user role, Update organization user role, Remove organization user role, Add team to organization, and Remove team from organization. |
Permissions | Update minimum team role setting. |
Teams | Update team, Delete team, Undelete team, Add user to team, Update user in team, Remove user from team, Create a request to join a team, Update a request to join a team, Create a request to invite a user into a team, Update a request to invite a user into a team, and Create downloadable team activity report. |
User | Create user, Update user, Delete user, Undelete user, Create multi-factor authentication (MFA) backup codes, User login, and User logout. |
FAQ
Why do I see an Admin API client instead of a user in Audit logs?
You see an Admin API client in Audit logs because some administrative actions are performed through API clients instead of directly by a user. For these events, Audit logs display the Admin API client name and client ID in the Actor field so you can identify which integration performed the action.
For more information, reach out to your Canva Customer Success Manager if you have one, or get in touch with the Sales team.
Was this helpful?
Helpful
Unhelpful