Audit logs

The initial release of SonarQube Cloud's audit logs provides you with the essential data you need to meet your immediate compliance and security needs.

This feature is available with the Enterprise plan.

As an Enterprise admin, you can access audit logs through the Audit logs API. To authenticate to the Web API, see Web API.

Audit logs are retained for 180 days.

List of logged events

Event type	Description	For more details
authentication.user_login	An SSO user logs in to SonarQube Cloud.
authentication.user_logout	An SSO user logs out of SonarQube Cloud.
user.create	An SSO user account is created.
user.remove	An SSO user account is removed.
permission_template.create	An organization admin creates a permission template.	Using permission templates
permission_template.delete	An organization admin deletes a permission template.	Using permission templates
org.add_user	A user is added to an organization.
org.remove_user	A user is removed from an organization.
org.add_group	A group is created in the organization.	User group concept
org.remove_group	A group is removed from the organization.	User group concept
org.add_permission	An organization-related permission is added to a user or group.	Permissions related to an organization
org.remove_permission	An organization-related permission is removed from a user or group.	Permissions related to an organization
org.membersync_enabled	An organization admin enables the GitHub member synchronization.	GitHub member synchronization
org.membersync_disabled	An organization admin disables the GitHub member synchronization.	GitHub member synchronization
portfolio.add_permission	A portfolio admin adds a portfolio-related permission to a user or group.	Permissions
portfolio.remove_permission	A portfolio admin removes a portfolio-related permission from a user or group.	Permissions
project.apply_permission_template	A project admin applies a permission template to their project.	Updating the permissions of your project
project.add_permission	A project admin adds a project-related permission to a user or group.	Permissions related to a project
project.remove_permission	A project admin removes a project-related permission from a user or group.	Permissions related to a project
group.create	A group is created in an organization.	User group concept
group.remove	A group is removed from an organization.	User group concept
enterprise.master_key_added	CMK added	Code encryption
enterprise.master_key_rotation_started	CMK rotation started	Code encryption
enterprise.master_key_rotation_completed	CMK rotation completed	Code encryption
enterprise.projects_encryption_started	Projects encryption started	Code encryption
enterprise.projects_encryption_completed	Projects encryption completed	Code encryption
enterprise.data_key_rotation_started	Data key rotation started	Code encryption
enterprise.data_key_rotation_completed	Data key rotation completed	Code encryption

Related pages

IP allow lists SSO and provisioning