The Platform Audit logs activities performed in THRON by users and applications, providing a detailed and tamper-proof trail for compliance, security, and governance requirements.

How to access the Audit

Go to Platform Settings > Security > Platform Audit.

How to read the log

Each log entry represents a single event and displays:

• Date and Time: the exact UTC timestamp of the operation

• User / Application: who executed the operation (username or application name)

• Action: the operation performed

• Target: the entity affected by the operation (e.g. content ID, folder ID, user ID)

• IP Address: the source IP address

• Details: additional context, previous values, or error codes

Filtering activities

You can refine the events list using the available filters at the top of the interface:

• Date range: select predefined ranges (today, last 7 days, last 30 days) or a custom range

• User / Application: filter events performed by a specific identity

• Category & Action: isolate specific event families (Access, Content, Users, etc.)

Exporting the log

To perform offline analysis or archive audit logs, click Export in the upper right corner to download a CSV file reflecting the current active filters.

Monitored actions

Access & Authentication

Tracks logins, logouts, failed login attempts, password changes, and SSO callbacks.

Content & Digital Assets

Tracks content creation, modifications, deletions, sharing, downloads, and metadata updates.

Applications

Tracks creation, editing, key regeneration, and deletion of custom applications and integrations.

Users

Tracks user invitations, role changes, profile modifications, suspensions, and removals.

Groups

Tracks group creation, membership updates, and group deletion.

Folders

Tracks folder creation, renaming, permission adjustments, moving, and deletion.

System

Tracks global configuration adjustments, security policy changes, and connector updates.

Need help?

For technical issues, contact support@thron.com.