Plan requirement
| Subscription | Suite Enterprise or higher, Support Enterprise |
| Access | Admin |
No. The audit log covers updates to existing users, and creating a user is explicitly not captured. Usually nobody created it anyway.
Can I see who created a user?
Not from the audit log. It lists changes to existing users and states plainly that activities related to creating new users are not among them.
The question also rests on an assumption worth dropping: most records create themselves. Anybody who emails an address Zendesk watches gets one, with no admin involved and nobody to attribute it to. That is the overwhelming majority of the users in any account, which is the real answer to "why do we have so many".
What dates a record instead
Their first ticket. An odd-looking record is usually an import, an integration or a spam message, and the first ticket tells you which.
What the audit log does answer
Who changed an existing user, and when. Filter on Activity type is Updated, Item > Type is Customer for end users or Team member for agents and admins, and Item > Names for the person. Role changes appear there, which is what an access review or an incident needs.
Two gaps to know about
Suspension is filed under the type User Setting with an ID that is no longer the user's, so the filter above misses it. Updates to custom fields are not supported in the audit log at all.
Where it lives, and how far back
Admin Center, then Account, then Logs, then Audit log, readable by admins and by agents with permission, and available through the API. It keeps every recorded change since the account was created, indefinitely.
Comments
0 comments
Article is closed for comments.