Edit this page
Learn how to track and analyze your account's activities by using the audit logs.
Audit logs are available for Enterprise plan customers.
Audit logs record actions made with Expo Application Services (EAS) by accounts. Recorded data includes information about the affected entities, the type of modification made to them, who performed the action, and when the activity occurred.
Audit logs can track user invitations and permission changes within your organization. An example security event could include a compromised employee account that invites an attacker into an organization and changes their permission to Admin.
In this scenario, audit logs would record which employee account invited the attacker and modified permissions. Since audit logs are immutable, the attacker would not be able to delete this recorded history. Other organization members will be able to review the audit logs to determine which account was compromised, take action to revoke the attacker's permissions and secure the employee's account.
An Expo organization account can include many projects where development access is controlled by distribution certificates assigned to individual teams. When devices are granted to join these teams, it is important to track when access is granted and removed for historical record keeping. While a device may not currently be included in an Apple team, it may be useful to see who previously had access to the team in the event of an internal security incident.
The Apple devices listed within the Expo team's settings will only show devices that are currently registered to an account, but with the creation of audit logs, historical modifications of Apple teams and devices can be viewed.
While we are working on adding more entities in future, the following entities are already enabled:
Audit log entries include the following fields:
| Field | Description |
|---|---|
| Actor | The account actor that performed the particular action. |
| Entity Type | The object that was modified with one of the modification types: CREATE, UPDATE, DELETE. |
| Mutation Type | The type of modification: CREATE, UPDATE, DELETE. |
| Created At | When the particular action was performed. |
Additionally, clicking on an Audit log row, you can view the metadata relevant to that log.
Export is available with a time range of up to 30 days. The exported file will include all the fields shown on the Audit logs page except for the Message field.