Permissions
This page covers the role required to use the Platform Audit page and call the underlying activity endpoints.
Workspace-level only
The Audit page is a global platform feature. It is not scoped to individual datastores or teams. Unlike datastore features that use two permission layers (user roles + team permissions), the Audit page is controlled exclusively by user roles. Team permissions do not apply.
User roles (workspace-level)
User roles determine who can access the Audit page and which actions they can perform there.
| Action | Member | Manager | Admin |
|---|---|---|---|
| Access the Audit page (view all sections) | |||
| View summary metrics and activity chart | |||
| Browse and filter the activity log | |||
| Export the current page as CSV |
How permissions work
The Audit tab is hidden from the Settings page for any user who does not hold the Admin role. Managers continue to see the other Settings tabs available to them, but Audit does not appear in their Settings menu. Members see only the limited subset of Settings tabs available to them, which does not include Audit.
Admin full access
Users with the Admin role have unrestricted access to every part of the Audit page: filters, summary cards, the activity chart, the day-grouped log, and the CSV export.
What each role sees
| Scenario | What the user sees |
|---|---|
| User has Member role | The Audit tab is not present in Settings. Navigating directly to the audit URL does not load the page. |
| User has Manager role | The Audit tab is not present in Settings. Navigating directly to the audit URL does not load the page. |
| User has Admin role | Full access to the page and all of its controls. |
API permissions
The activity endpoints that power the page require the Admin user role. Calls made with a non-Admin token return 403 Forbidden.
| Endpoint | Method | Required role | Description |
|---|---|---|---|
/activity |
GET | Admin | Paginated activity log. |
/activity/insights |
GET | Admin | Aggregated activity statistics for the timeframe (summary cards and chart data). |
Full permissions reference
For the complete user roles matrix across all Qualytics features, see the User Roles page.