- Employee removed from group
An admin user removed an employee from a group.
The unique identifier for the event. This can be used as an idempotency key.
The unique identifier of the tenant the event belongs to.
When the event occurred, formatted as a UNIX timestamp (in seconds).
This object contains information about the user that performed the action triggering the audit log.
Key/value metadata set by the partner that manages this tenant. Only present for tenants managed by a partner. When a partner manages the tenant but has set no metadata, it is present as an empty object rather than omitted or null. A partner may set at most 10 entries, with keys up to 40 characters and values up to 256 characters.
{ "customerRef": "ACME-001", "region": "emea" }
The description of the event. Note: this is subject to change and should not be used to match on this object.
{ "version": "1", "id": "c478966c-f927-411c-b919-179832d3d50c", "tenantId": "4f9d2e7a-1b3c-4d5e-8f6a-7c8b9d0e1f2a", "tenantMetadata": { "customerRef": "ACME-001", "region": "emea" }, "timestamp": 1698604061, "category": "AUDIT", "description": "user@example.com removed an employee from the group Engineers", "object": "EMPLOYEE_REMOVED_FROM_GROUP", "friendlyName": "Employee removed from group", "actor": { "source": "UI", "email": "string", "sourceIpAddress": "string", "userAgent": "string", "role": "OWNER" }, "new": { "group": "string", "employee_id": "string" } }