Action types

Below are the action types you can find under the action field in the API response:

Action name	Properties
ai_content_training_disable AI content training was disabled for the organization.
ai_content_training_enable AI content training was enabled for the organization.
ai_features_disable AI features were disabled for the organization.
ai_features_enable AI features were enabled for the organization.
autogen_password_controls_setting_change Choose what type of passwords can be added to files -- autogenerated only or custom passwords.	old_autogen_password_controls_settingBoolean The old autogen password enforcement setting new_autogen_password_controls_settingBoolean The new autogen password enforcement setting
branch_archive A particular branch within a file was archived.	main_file_keyString Key of the file that the branch was created from.
branch_create A new branch was created within a file.	main_file_keyString Key of the file that the branch was created from.
branch_delete A particular branch within a file was deleted.	main_file_keyString Key of the file that the branch was deleted from.
branch_member_add A user was invited to a branch.	resource_typeString The type of the resource. Can only be branch for this event. resource_id_or_keyString The ID of the branch. permissionString The permission level for the user on the branch.
branch_member_permission_change A user's permission level in a branch changed.	resource_typeString The type of the resource. Can only be branch for this event. resource_id_or_keyString The ID of the branch. old_permissionString The old permission level for the user on the branch before the change. new_permissionString The new permission level for the user on the branch after the change.
branch_member_remove A user was removed from a branch.	permissionString The permission level for the user on the file. resource_typeString The type of the resource. Can only be branch for this event. resource_id_or_keyString The ID of the branch.
branch_unarchive A particular branch within a file was restored from archive.	main_file_keyString Key of the file that the branch was created from.
buzz_unsplash_disabled_change Unsplash in Buzz setting was changed for the organization.	old_buzz_unsplash_disabledBoolean Whether Unsplash in Buzz was disabled (false = enabled, true = disabled). new_buzz_unsplash_disabledBoolean Whether Unsplash in Buzz is disabled after the change (false = enabled, true = disabled).
community_hub_file_delete A specific file published to the Figma Community was deleted.
community_hub_file_publish A specific file was published to the Figma Community.
community_hub_file_update A specific file published to the Figma Community was updated.
community_plugin_delete A specific plugin published to the Figma Community was deleted.
community_plugin_publish A specific plugin was published to the Figma Community.
community_plugin_update A specific plugin published to the Figma Community was updated.
community_widget_delete A specific widget published to the Figma Community was deleted.
community_widget_publish A specific widget was published to the Figma Community.
community_widget_update A specific widget published to the Figma Community was updated.
configurable_upgrade_request_message_change The message for configured upgrade request flow was changed.	old_configured_upgrade_request_messageString Old message sent to users in the configured upgrade request flow. new_configured_upgrade_request_messageString New message sent to users in the configured upgrade request flow.
configurable_upgrade_request_setting_change The audience for configured upgrade request flow was changed.	old_configured_upgrade_request_settingString Old audience for the configured upgrade request flow, defined as members or all_users. new_configured_upgrade_request_settingString New audience for the configured upgrade request flow.
cursor_chat_setting_change Cursor chat setting was changed for the organization.	cursor_chat_disabledBoolean If cursor chat is disabled for the organization.
external_collaboration_controls_setting_change External collaboration setting was updated.	external_collaboration_controls_settingBoolean Updated external collaboration controls setting for the organization.
fig_file_create A Figma or FigJam file was created.
fig_file_duplicate A Figma or FigJam file was duplicated.
fig_file_export The contents of a Figma or FigJam file were exported.
fig_file_image_download An image from a Figma file was downloaded.
fig_file_link_access_change The permissions for a Figma or FigJam file changed.	old_link_accessString The link access policy for the file before the change. Can be edit, view, org_edit, org_view or inherit. new_link_accessString The link access policy for the file after the change. old_org_browsableBoolean The org access policy for the file before the change. new_org_browsableBoolean The org access policy for the file after the change.
fig_file_link_expiration_change Expiration was changed or added for a Figma file's public link access.	old_expires_atString Timestamp when public link access expires and the file's link access is returned to a private setting. Timestamp is before the expiration change. new_expires_atString Timestamp when public link access expires and the file's link access is returned to a private setting. Timestamp is after the expiration change.
fig_file_member_add A user was invited to a Figma or FigJam file.	resource_typeString The type of the resource. Can only be file for this event. resource_id_or_keyString The key of the file. permissionString The permission level for the user on the file.
fig_file_member_permission_change A user's permission level in a Figma or FigJam file changed.	resource_typeString The type of the resource. Can only be file for this event. resource_id_or_keyString The key of the file. old_permissionString The old permission level for the user on the file before the change. new_permissionString The new permission level for the user on the file after the change.
fig_file_member_remove A user was removed from a Figma or FigJam file.	permissionString The permission level for the user on the file. resource_typeString The type of the resource. Can only be file for this event. resource_id_or_keyString The key of the file.
fig_file_move A Figma or FigJam file was moved to a specific project.	old_project_idString The ID of the file's project before it was moved. new_project_idString The ID of the file's project after it was moved.
fig_file_permanent_delete A Figma or FigJam file was permanently deleted from trash.
fig_file_permanent_undelete A previously deleted Figma or FigJam file was restored.
fig_file_proto_link_access_change The permissions for a Figma design prototype file changed.	old_proto_link_accessString The link access policy for the file prototype before the change. Can be view, org_view or inherit. new_proto_link_accessString The link access policy for the file prototype after the change.
fig_file_rename A Figma or FigJam file was renamed.	old_nameString The name of the file before it was renamed. new_nameString The name of the file after it was renamed.
fig_file_restore A previously trashed Figma or FigJam file was restored.
fig_file_save_as A Figma or FigJam file was downloaded as a local .fig file.
fig_file_set_password A new password was set on a Figma or FigJam file.
fig_file_trash A Figma or FigJam file was trashed.
fig_file_unset_password A password was removed from a Figma or FigJam file.
fig_file_view A Figma or FigJam file was viewed.	accessString The viewer's access to the file. Can be edit, view or view_prototypes.
fig_file_view_external A Figma or FigJam file external to the organization was viewed. Only logged for Enterprise organizations with Domain Capture enabled.	org_nameString The name of the external org that the user viewed a file in, or null if it is not part of an org. team_nameString The name of the external team that the user viewed a file in, or null if it is part of an org or another user's drafts.
fig_file_view_prototype A Figma or FigJam file prototype was viewed.
fig_file_view_prototype_external A Figma or FigJam file prototype external to the organization was viewed. Only logged for Enterprise organizations with Domain Capture enabled.	org_nameString The name of the external org that the user viewed a prototype in, or null if it is not part of an org. team_nameString The name of the external team that the user viewed a prototype in, or null if it is part of an org or another user's drafts.
fig_file_viewer_access_change A change was made to permissions that allows/disallows viewers to copy, share or export a particular file.	viewer_export_restrictedBoolean If viewers are disallowed to copy, share or export the file.
file_export_controls_setting_change The org level file export setting for the file was changed.	file_export_settingString The org level file export setting (allowed, banned, or members_only).
google_sso_auth_change Org members authentication method through Google SSO was changed.	google_sso_settingBoolean If org members must or must not login with Google SSO.
idle_timeout_setting_change The amount of time that a user can be idle before automatically being logged out was changed.	old_idle_timeout_settingNumber The old idle timeout setting. new_idle_timeout_settingNumber The new idle timeout setting.
idp_config_create A new IdP configuration was created.	sp_tenant_idString The tenant id of the idp configuration. idp_nameString The name of the idp configuration. idp_entity_idString The entity id of the idp configuration.
idp_config_delete An IdP configuration was deleted.	sp_tenant_idString The tenant id of the idp configuration. idp_nameString The name of the idp configuration. idp_entity_idString The entity id of the idp configuration.
idp_config_update An IdP configuration was updated.	sp_tenant_idString The tenant id of the idp configuration. idp_nameString The name of the idp configuration. idp_entity_idString The entity id of the idp configuration.
idp_group_connection_add A workspace or billing group was added to an idp group.	connection_typeString The type e.g workspace or billing group that was added to the idp group. connection_nameString The workspace or billing group name that was added to the idp group. idp_group_nameString The name of the idp group the connection was added to.
idp_group_connection_remove A workspace or billing group was removed from an idp group.	connection_typeString The type e.g workspace or billing group that was added to the idp group. connection_idString The workspace or billing group id that was added to the idp group. idp_group_nameString The name of the idp group the connection was removed from.
idp_group_create A new idp group was created via SCIM.	nameString The name of the idp group.
idp_group_delete A new idp group was deleted via SCIM.	nameString The name of the idp group.
idp_group_rename An idp group was renamed via SCIM.	nameString The current name of the idp group. old_nameString The previous name of the idp group.
idp_user_activate An org user was activated via SCIM.	user_nameString The username of the idp user that was activated. This is the email address. display_nameString The display name of the idp user that was activated.
idp_user_create A new user was added to an organization via SCIM.	user_nameString The username of the idp user that was created. This is the email address. display_nameString The display name of the idp user that was created.
idp_user_deactivate An org user was deactivated via SCIM.	user_nameString The username of the idp user that was deactivated. This is the email address. display_nameString The display name of the idp user that was deactivated.
idp_user_delete A user was deleted from an organization via SCIM.	user_nameString The username of the idp user that was deleted. This is the email address. display_nameString The display name of the idp user that was deleted.
idp_user_update An org user's paid status was updated via SCIM.	user_nameString The username of the idp user that was updated. This is the email address. display_nameString The display name of the idp user that was updated. old_figma_paid_statusString The paid status of the user's Figma Design seat before the change. new_figma_paid_statusString The paid status of the user's Figma Design seat after the change. old_figjam_paid_statusString The paid status of the user's FigJam seat after the change. new_figjam_paid_statusString The paid status of the user's FigJam seat after the change.
ip_allowlist_range_create An IP address was added to the allowlist of networks which Figma can be accessed on.	ip_addressString The IP range that was allowlisted.
ip_allowlist_range_delete An IP address was removed from the allowlist of networks which Figma can be accessed on.	ip_addressString The IP range that was removed from the allowlist
ip_allowlist_rejected A user was rejected from accessing Figma due to an IP address not being in the allowlist.
ip_allowlist_setting_change Blocking access to Figma on non-corporate networks was enabled or disabled.	ip_allowlist_settingBoolean Whether or not the org has the IP allowlist feature enabled.
ip_restriction_change Limiting personal accounts on the corporate network was enabled or disabled.	ip_restriction_settingBoolean If orgs are limiting or not limiting personal accounts on the corporate network.
license_group_admins_add A new billing group admin was added to the organization's billing group. Note: due to a data structure change, this action may also include legacy workspace events before mid-December 2023.	new_admin_emailsString[] The emails of the users added to the billing group as admins.
license_group_admins_remove A billing group admin was removed from the organization's billing group. Note: due to a data structure change, this action may also include legacy workspace events before mid-December 2023.	removed_admin_emailsString[] The emails of the admins removed from the billing group.
license_group_create A new billing group was created in the organization. Note: due to a data structure change, this action may also include legacy workspace events before mid-December 2023.	admin_emailsString[] The emails of the users added to the billing group as admins.
license_group_delete A billing group was deleted from the organization. Note: due to a data structure change, this action may also include legacy workspace events before mid-December 2023.
license_group_library_setting_change A legacy workspace changed a library's settings. Note: due to a data structure change, this action does not include new workspace events. See workspace_library_setting_change.	library_file_keyString File key of the library the workspace is changing the setting for. library_file_nameString File name of the library the workspace is changing the setting for. license_group_idNumber The ID of the workspace that is changing a library setting. workspace_nameString The name of the workspace that is changing a library setting. old_figma_enabledBoolean Library was previously enabled in the workspace for Figma design files. old_figjam_enabledBoolean Library was previously enabled in the workspace for FigJam files. old_use_org_settingsBoolean Library's previous setting on the workspace was inherited from the org. new_figma_enabledBoolean Library is now enabled in the workspace for Figma design files. new_figjam_enabledBoolean Library is now enabled in the workspace for FigJam files. new_use_org_settingsBoolean Library's new setting on the workspace will be inherited from the org.
license_group_membership_change A user was moved to a new billing group in the organization. Note: due to a data structure change, this action may also include legacy workspace events before mid-December 2023.	old_license_group_idNumber The ID of the user's old billing group before it was changed. new_license_group_idNumber The ID of the user's new billing group after it was changed. new_idp_group_idString The ID of the idp group linked to the new billing group old_idp_group_idString The ID of the idp group linked to the old billing group
license_group_membership_self_select A user chose to join a particular workspace in the organization. Note: due to a data structure change, this action does not include new workspace events. See workspace_membership_self_select for newer events.	license_group_idNumber The ID of the workspace that the user selects when they join the org.
license_group_rename A billing group was renamed. Note: due to a data structure change, this action may also include legacy workspace events before mid-December 2023.	old_nameString The name of the billing group before it was renamed. new_nameString The name of the billing group after it was renamed.
mfa_required_setting_change An org admin changed the setting for requiring multi-factor authentication for users.	old_mfa_required_settingString The old MFA required setting. new_mfa_required_settingString The new MFA required setting.
network_access_restriction_range_create An IP address was added to the list of corporate networks that prevent access to personal Figma accounts.	ip_addressString The IP range that was added for network access restrictions.
network_access_restriction_range_delete An IP address was removed from the list of corporate networks that prevent access to personal Figma accounts.	ip_addressString The IP range that was removed from network access restrictions.
network_access_restriction_range_update An IP address was enabled or disabled for preventing access to personal Figma accounts.	ip_addressString The IP range that was enabled or disabled for network access restrictions. enabledBoolean Whether the IP range for network access restriction was enabled or disabled.
oauth_token_grant A user granted a new OAuth token to a Figma application.	client_idString The ID of the app that this token is granted to. client_nameString The name of the app that this token is granted to. is_org_level_tokenBoolean If the token is granted on behalf of an org instead of a user. scopeString The type of access that this token has.
oauth_token_revoke A user revoked an OAuth token previously granted to a Figma application.	client_idString The ID of the app that owns the token. client_nameString The name of the app that owns the token. is_org_level_tokenBoolean If the token is granted on behalf of an org instead of a user.
open_sessions_end An Open Session was ended manually.
open_sessions_setting_change The settings for open sessions were turned on or off for an organization.	workshop_disabledBoolean If open session is disabled for the org.
open_sessions_start An Open Session was started.
org_default_license_type_change The settings for default roles changed for Figma design or FigJam files.	editor_typeString The product type whose default paid status changes. Can be figma, figjam, or dev_mode. old_paid_statusString The default paid status of the product before the change. Can be editor for a full seat, viewer, or viewer_restricted. new_paid_statusString The default paid status of the product after the change.
org_domain_add A domain was added to an organization.	domainString The domain that was added to the org.
org_domain_capture_change Domain capture was updated in an organization.	domain_captureBoolean Domain capture enabled in org.
org_domain_idp_mapping_change An IdP mapping was changed for a domain.	domainString The domain that was mapped to the idp configuration old_idp_mappingString The idp mapping that was changed from new_idp_mappingString The idp mapping that was changed to
org_domain_remove A domain was removed from an organization.	domainString The domain that was removed from the org.
org_domain_verify A domain was verified in an organization.	domainString The domain that was verified within the org.
org_guest_invite_setting_change The settings for org guest invite policy changed.	old_guest_invite_settingString Org guest setting before the change. Can be banned, require_approval or null. new_guest_invite_settingString Org guest setting after the change.
org_invite_create A user was invited to join a particular organization.	invitee_emailString Email of the user invited to the org
org_join_request_approve An admin approved a user's request to join an organization in order to access a particular file.	resource_typeString Type of the resource that the user can view once they join the org. resource_id_or_keyString ID of the resource that the user can view once they join the org.
org_join_request_create A user requested to join an organization so they can access a particular file.	resource_typeString Type of the resource that the user requests to join the org to view. resource_id_or_keyString ID of the resource that the user requests to join the org to view.
org_library_approve A library was marked as approved for an organization.
org_library_setting_change The org changed an enabled library's settings.	org_nameString The name of the Org that is changing a library setting. library_file_keyString File key of the library the org is changing the setting for. library_file_nameString File name of the library the org is changing the setting for. old_figma_enabledBoolean Library was previously enabled in the org for Figma design files old_figjam_enabledBoolean Library was previously enabled in the org for FigJam files new_figma_enabledBoolean Library is now enabled in the org for Figma design files new_figjam_enabledBoolean Library is now enabled in the org for FigJam files
org_library_unapprove A library is marked as not approved for an organization.
org_merge An org was converted into a team under another org.	child_org_idNumber ID of the org that gets merged into the target org
org_team_creation_controls An org's setting for who can create teams was changed.	new_team_creation_controls_settingString The new setting of team creation controls setting old_team_creation_controls_settingString The old setting of team creation controls setting
org_team_csv_exported The teams list of an organization was exported as a CSV file.
org_user_account_type_change A user's paid status for a product was changed.	editor_typeString The product type whose default paid status changes. Can be figma, figjam, or dev_mode. old_figma_paid_statusString The paid status of the user's Figma Design seat before the change. new_figma_paid_statusString The paid status of the user's Figma Design seat after the change. old_figjam_paid_statusString The paid status of the user's FigJam seat after the change. new_figjam_paid_statusString The paid status of the user's FigJam seat after the change. old_seat_typeString The seat type the user was previously occupying. new_seat_typeString The seat type the user now occupies.
org_user_account_type_change_to_full A user was upgraded to the editor role in an org.	editor_typeString The product type whose default paid status changes. Can be figma, figjam, or dev_mode. reasonString The triggering condition that upgrades the user to a paid seat. old_paid_statusString The paid status of the user's seat before the change.
org_user_account_type_upgrade_approved An admin approved a request for someone to upgrade to an editor role.	editor_typeString The product type whose default paid status changes. Can be figma, figjam, or dev_mode. seat_typeString The seat type that the user had requested and was now approved for. Can be Full, Collab or Dev.
org_user_account_type_upgrade_denied An admin denied a request for someone to upgrade to an editor role.	editor_typeString The product type whose default paid status changes. Can be figma, figjam, or dev_mode. seat_typeString The seat type that the user had requested and was rejected for. Can be Full, Collab or Dev.
org_user_account_type_upgrade_requested A user requested to have their role upgraded to an editor role.	editor_typeString The product type whose default paid status changes. Can be figma, figjam, or dev_mode. requested_user_license_group_idNumber Workspace id of the user who requested the upgrade, or null if the user is not assigned to any workspace. seat_typeString The seat type that the user requested an upgrade for. Can be Full, Collab or Dev.
org_user_create A user was added to an organization.	permissionString The permission level of the user in the org. Can be guest, member or admin. seat_typeString The user's seat type. Can be full, collab, or dev. reasonString The reason the user joined the org. actor_idNumber The user that was responsible for the user joining the org. resource_typeString The type of resource that was responsible for the user joining the org. resource_id_or_keyString The ID or key of resource that was responsible for the user joining the org. figma_paid_statusString The paid status of the user's Figma Design seat. Can be editor for a full seat, viewer, or viewer_restricted. figjam_paid_statusString The paid status of the user's FigJam seat. Can be editor for a full seat, viewer, or viewer_restricted.
org_user_create_external A user was added to an external organization as a guest. Only logged for Enterprise organizations with Domain Capture enabled.	org_nameString The name of the external organization that the user joined.
org_user_delete A user was removed from an organization.
org_user_delete_external A user was removed from an external organization. Only logged for Enterprise organizations with Domain Capture enabled.	org_nameString The name of the external organization that the user left.
org_user_permission_change A user's permission level (guest, member, admin) within an org was changed.	old_permissionString The old permission level of the user in the org before the change. Can be guest, member or admin. new_permissionString The new permission level of the user in the org after the change.
personal_access_token_create A user created a new personal access token to access their data via public API.
personal_access_token_delete A user deleted a personal access token.
plan_access_token_create An admin created a new plan access token.	scopesString The types of access that this token has.
plan_access_token_refresh An admin refreshed a plan access token by generating a new secret with an extended lifetime.	token_nameString The name of the plan access token that was refreshed. scopesString The types of access that this token has.
plan_access_token_revoke An admin revoked a plan access token.	scopesString The types of access that this token had.
plan_access_token_scopes_change An admin changed the scopes of a plan access token.	token_nameString The name of the plan access token whose scopes were changed. old_scopesString The types of access that this token had before the change. new_scopesString The types of access that this token has after the change.
plugin_approvelist_add A plugin was added to the approved plugin list.
plugin_approvelist_add_workspace A plugin was added to the approved plugin list for a specific workspace.
plugin_approvelist_disable An admin turned off a setting where only plugins on the approved plugin list can be used in that organization's files.
plugin_approvelist_enable An admin turned on a setting where only plugins on the approved plugin list can be used in that organization's files.
plugin_approvelist_remove A plugin was removed from the approved plugin list.
plugin_approvelist_remove_workspace A plugin was removed from the approved plugin list for a specific workspace.
plugin_approvelist_request_approve_org A plugin request for the org was approved for the approved plugin list.
plugin_approvelist_request_approve_workspace A plugin request for a specific workspace was approved for the approved plugin list.
plugin_approvelist_request_org A plugin was requested for the approved plugin list.
plugin_approvelist_request_reject_org A plugin request for the org was rejected for the approved plugin list.
plugin_approvelist_request_reject_workspace A plugin request for a specific workspace was rejected for the approved plugin list.
plugin_install A plugin was installed for everyone in the organization to use.
plugin_ownership_transfer A plugin was transferred to another owner.
plugin_publisher_accept_invite A publisher invite for a plugin was accepted.
plugin_publisher_invite A plugin publisher was invited.
plugin_publisher_remove A plugin publisher was removed.
plugin_publisher_remove_invite A publisher invite for a plugin was removed.
plugin_uninstall A plugin that was previously installed for everyone in the organization to use has been uninstalled.
policy_acknowledge A user acknowledged a policy.	policy_idString The ID of the acknowledged policy. policy_titleString The title of the acknowledged policy.
policy_create A new policy was created for the organization.	policy_idString The ID of the policy. policy_titleString The title of the policy. policy_audienceString The audience the policy applies to. policy_cadenceString The cadence at which the policy must be re-acknowledged. Either 31536000 (one year, in seconds) or an empty string (once per user lifetime).
policy_update A policy's enabled/disabled status was changed.	policy_idString The ID of the policy. policy_titleString The title of the policy. enabled_statusString The new enabled status of the policy.
private_plugin_delete A plugin published privately to an organization was deleted.
private_plugin_publish A plugin was published privately to an organization.
private_plugin_update A plugin published privately to an organization was updated.
private_widget_delete A widget published privately to an organization was deleted.
private_widget_publish A widget was published privately to an organization.
private_widget_update A widget published privately to an organization was updated.
project_create A project was created in a particular team.
project_delete A project was deleted.
project_export The contents of a project were exported somewhere outside of the organization.
project_import The contents of a project were imported into an organization.
project_member_add A user was invited to a project.	resource_typeString The type of the resource. Can only be project for this event. resource_id_or_keyString The ID of the project. permissionString The permission level for the user on the project.
project_member_permission_change A user's permission level in a team changed.	resource_typeString The type of the resource. Can only be project for this event. resource_id_or_keyString The ID of the project. old_permissionString The old permission level for the user on the project before the change. new_permissionString The new permission level for the user on the project after the change.
project_member_remove A user was removed from a project.	permissionString The permission level for the user on the project. resource_typeString The type of the resource. Can only be project for this event. resource_id_or_keyString The ID of the project.
project_move A project was moved to another team.	old_team_idNumber The ID of the project' old parent team before it was moved. new_team_idNumber The ID of the project' new parent team after it was moved.
project_rename A project was renamed.	old_nameString The old name of the project before it was renamed. new_nameString The new name of the project after it was renamed.
project_restore A project was restored.
project_team_access_change Team members' access to a project was changed.	old_team_accessString Team members' access to the project before the change. Can be invite_only, view_only, and edit. new_team_accessString Team members' access to the project after the change.
project_transfer_approved A request to transfer a project to a team in another organization was approved.
project_transfer_copy_approved A request to transfer a copy of a project to a team in another organization was approved.
project_transfer_copy_received A request was received to transfer a copy of a project to a team in another organization.	team_idString ID of the team the project currently belongs to and initiated the request.
project_transfer_copy_sent A request was sent to transfer a copy of a project to an external pro or org team.	destination_team_idString ID of the team the user is trying to transfer the copy of the project to.
project_transfer_received A request was received to transfer a project to a team in another organization.	team_idString ID of the team the project currently belongs to and initiated the request.
project_transfer_sent A request was sent to transfer a project to an external pro or org team.	destination_team_idString ID of the team the user is trying to transfer the project to.
project_trash A project was trashed.
provisional_access_end_new_request A user requested a new provisional access, ending their previous provisional access.	seat_typeString What seat type the provisional access was for before it was ended because the user created a new request. auto_approval_settingString What the auto approval settings were at the time this activity log occurred
provisional_access_end_request_approved An admin approved a user's request to upgrade, ending their provisional access.	seat_typeString What seat type the provisional access was for before it was approved. auto_approval_settingString What the auto approval settings were at the time this activity log occurred
provisional_access_end_request_denied An admin denied a user's request to upgrade, ending their provisional access.	seat_typeString What seat type the provisional access was for before it was denied. auto_approval_settingString What the auto approval settings were at the time this activity log occurred
provisional_access_start A user requested an upgrade, which started their provisional access.	seat_typeString What seat type the provisional access was started for. auto_approval_settingString What the auto approval settings were at the time this activity log occurred
public_link_setting_change An admin changed the public link setting policy for the org.	public_links_bannedBoolean If org members cannot share files via public links. public_links_require_passwordBoolean If org members cannot share files via public links without passwords public_links_require_expirationBoolean If org members cannot share files via public links without expiration public_links_max_expiration_in_hoursNumber The max expiration in hours org members can set on public links
repo_merge_from_source A particular branch within a file was updated.	main_file_keyString Key of the file that the branch was created from.
repo_merge_to_source A particular branch within a file was merged with another branch.	main_file_keyString Key of the file that the branch was created from.
resource_connection_disconnected A user disconnected a project connection.	folder_nameString Name of the resource that is being connected folder_idString ID of the resource that is being connected host_plan_typeString Type of the plan that is initiating the connection host_plan_nameString Name of the plan that is initiating the connection connected_plan_typeString Type of the plan that is being connected connected_plan_nameString Name of the plan that is being connected
rest_api_plan_access_tokens_disabled_change REST API plan access tokens were enabled or disabled for the organization.	rest_api_plan_access_tokens_disabledBoolean Whether REST API plan access tokens were disabled after the change.
roster_exported The members list of an organization was exported as a CSV file.
saml_sso_auth_change Org members authentication method through SAML SSO was changed.	saml_sso_settingBoolean If org members must or must not login with SAML SSO.
scim_token_generate A token was generated for an IdP service to call Figma SCIM endpoints.
scim_token_revoke A token which an IdP service used to call Figma SCIM endpoints was revoked.
seats_renew An admin confirmed this organization's annual renewal.
sites_custom_domain_activate A custom domain was verified and activated for a site.	domainString The custom domain that was verified and activated for a site.
sites_custom_domain_removal A custom domain was removed from a site.	domainString The custom domain that was removed from a site.
sites_disable_sso SSO enforcement was disabled for an app or site.
sites_enable_sso SSO enforcement was enabled for an app or site.
sites_publish A site was published to make it publicly accessible.	domainString The domain where the site was published.
sites_publishing_setting_change Web publishing disabled setting was changed for the org.	web_publishing_disabledBoolean If web publishing has been disabled for this org.
sites_set_password A password was set on an app or site.
sites_subdomain_changed A subdomain was changed for a site.	old_domainString The previous subdomain before the change. new_domainString The new subdomain after the change.
sites_unpublish A site was unpublished and is no longer publicly accessible.	domainString The domain where the site was unpublished.
sites_unset_password A password was removed from an app or site.
supabase_project_connected Connected a Supabase project
supabase_project_disconnected Disconnected a Supabase project
supabase_setting_change Supabase disabled setting was changed for the org	supabase_disabledBoolean If supabase has been disabled for this org
team_create A team was created in an organization with specific access settings to files and resources.	org_accessString Org member's access to the team. Can be public, private, or secret. sharing_audience_controlString Org member's access to the team. Can be org_view, org_edit, or invite_only. org_browsableString Discoverability of the team in search. Applicable for invite_only teams. If not browsable, it won't show up in search and users have to be explictily invited.
team_delete A team was deleted from an organization.
team_export A team was exported to another organization.
team_import A team was imported into an organization.
team_license_group_change A team was moved to another workspace. Note: due to a data structure change, this action does not include new workspace events. See team_workspace_change for newer events.	old_workspace_idNumber ID of the workspace that the team was assigned to before the change. new_workspace_idNumber ID of the workspace that the team is assigned to after the change.
team_member_add A user was added to a team.	resource_typeString Type of the resource that the user is added to. Can only be team for this event. resource_id_or_keyString ID of the team. permissionString User's permission level in the team.
team_member_add_external A user was added to an external team. Only logged for Enterprise organizations with Domain Capture enabled.	team_nameString The name of the external team that the user joined.
team_member_permission_change A user's permission level in a team changed.	resource_typeString Type of the resource that the user has a different permission on. Can only be team for this event. resource_id_or_keyString ID of the team. old_permissionString User's permission level in the team before the change. new_permissionString User's permission level in the team after the change.
team_member_remove A user was removed from a team.	permissionString User's permission level in the team. resource_typeString Type of the resource that the user is removed from. Can only be team for this event. resource_id_or_keyString ID of the team.
team_member_remove_external A user was removed from an external team. Only logged for Enterprise organizations with Domain Capture enabled.	team_nameString The name of the external team that the user left.
team_org_access_change Org members' access to a team is changed.	old_org_accessString Org member's access to the team before the change. Can be public, private, or secret. new_org_accessString Org member's access to the team after the change.
team_rename A team's name was changed.
team_restore A previously deleted team was restored.
team_sharing_audience_control_change Org members' access to a team is changed.	new_sharing_audience_controlString Org member's access to the team. Can be org_view, org_edit, or invite_only. old_sharing_audience_controlString Org member's access to the team. Can be org_view, org_edit, or invite_only.
team_transfer_approved A request to transfer a team into an organization was approved.	approver_nameString Name of the user in the destination org that approved the team transfer request.
team_transfer_received A request was received to transfer a team into an organization	source_org_nameString Name of the org the team currently belongs to and initiated the request.
team_transfer_sent A request was sent to transfer a team to another organization	destination_org_nameString Name of the org the user is trying to transfer the team to.
team_workspace_change A team was moved to another workspace. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see team_license_group_change.	old_workspace_idNumber The ID of the workspace that the team was assigned to before the change. new_workspace_nameString The name of the workspace that the team was assigned to before the change. workspace_idNumber The ID of the workspace that the team was assigned to after the change. workspace_nameString The name of the workspace that the team was assigned to after the change.
user_idle_session_timeout A user was automatically signed out of their account for inactivity.
user_sign_in A user signed in to their account.
user_sign_out A user signed out of their account.
voice_call_join_req A user requested to join a voice call.
webhook_create A webhook is created for a resource.	webhook_event_nameString The event this webhook is subscribing to. webhook_endpointString The endpoint this webhook will be calling.
webhook_delete A webhook is deleted for a resource	webhook_event_nameString The event this webhook is subscribing to. webhook_endpointString The endpoint this webhook will be calling.
webhook_update A webhook is updated for a resource	webhook_event_nameString The event this webhook is subscribing to. webhook_endpointString The endpoint this webhook will be calling.
widget_approvelist_add A widget was added to the approved widget list.
widget_approvelist_add_workspace A widget was added to the approved widget list for a specific workspace.
widget_approvelist_remove A widget was removed from the approved widget list.
widget_approvelist_remove_workspace A widget was removed from the approved widget list for a specific workspace.
widget_approvelist_request_approve_org A widget request for the org was approved for the approved widget list.
widget_approvelist_request_approve_workspace A widget request for a specific workspace was approved for the approved widget list.
widget_approvelist_request_org A widget was requested for the approved widget list.
widget_approvelist_request_reject_org A widget request for the org was rejected for the approved widget list across the entire org.
widget_approvelist_request_reject_workspace A widget request for a specific workspace was rejected for the approved widget list.
widget_install A widget was installed for everyone in the organization to use.
widget_ownership_transfer A widget was transferred to another owner.
widget_publisher_accept_invite A publisher invite for a widget was accepted.
widget_publisher_invite A widget publisher was invited.
widget_publisher_remove A widget publisher was removed.
widget_publisher_remove_invite A publisher invite for a widget was removed.
widget_uninstall A widget that was previously installed for everyone in the organization to use has been uninstalled.
widgets_disable An admin turned off a setting where only widgets on the approved widget list can be used in that organization's files.
widgets_enabled An admin turned on a setting where only widgets on the approved widget list can be used in that organization's files.
workspace_admins_add A new workspace admin was added to the organization's workspace. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_admins_add.	new_admin_emailsString[] The emails of the users added to the workspace as admins.
workspace_admins_remove A workspace admin was removed from the organization's workspace. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_admins_remove.	removed_admin_emailsString[] The emails of the admins removed from the workspace.
workspace_ai_setting_change A workspace in an org had its AI setting changed	new_settingString The new AI setting for the workspace. old_settingString The old AI setting for the workspace. workspace_nameString The name of the workspace. workspace_idNumber The ID of the workspace.
workspace_create A new workspace was created in the organization. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_create.
workspace_delete A workspace was deleted from the organization. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_delete.
workspace_file_export_controls_setting_change The workspace level file export setting for the file was changed.	file_export_settingString The workspace level file export setting (allowed, banned, or members_only). workspace_nameString The name of the workspace. workspace_idNumber The ID of the workspace.
workspace_library_approve A library was marked as approved for a workspace	workspace_nameString The name of the workspace that is marking a library as approved. workspace_idNumber The ID of the workspace that is marking a library as approved.
workspace_library_setting_change A workspace changed a library's settings. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_library_setting_change.	library_file_keyString The file key of the library the workspace was changing the setting for. library_file_nameString The file name of the library the workspace was changing the setting for. workspace_idNumber The ID of the workspace that was changing a library setting. workspace_nameString The name of the workspace that was changing a library setting. old_figma_enabledBoolean If the library was previously enabled for the workspace for Figma design files. old_figjam_enabledBoolean If the library was previously enabled for the workspace for FigJam files. old_use_org_settingsBoolean If the library's previous setting on the workspace was inherited from the org. new_figma_enabledBoolean If the library is now enabled in the workspace for Figma design files. new_figjam_enabledBoolean If the library is now enabled in the workspace for FigJam files. new_use_org_settingsBoolean If the library's new setting on the workspace will be inherited from the org.
workspace_library_unapprove A library is marked as not approved for a workspace.	workspace_nameString The name of the workspace that is marking a library as not approved. workspace_idNumber The ID of the workspace that is marking a library as not approved.
workspace_member_add A user was added to the organization's workspace. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_membership_change.	workspace_idNumber The ID of the workspace the user was added to. workspace_nameString The name of the workspace the user was added to. idp_group_idString The ID of the idp group linked to the workspace
workspace_member_remove A user was removed from the organization's workspace. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_membership_change.	workspace_idNumber The ID of the workspace the user was removed from. workspace_nameString The name of the workspace the user was removed from. idp_group_idString The ID of the idp group linked to the workspace
workspace_membership_self_select A user chose to join a particular workspace in the organization. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_membership_self_select.	workspace_idNumber The ID of the workspace the user chose to join. workspace_nameString The name of the workspace the user chose to join.
workspace_public_link_setting_change A workspace in an org had its public link controls setting changed.	public_links_bannedBoolean If workspace members cannot share files via public links. public_links_require_passwordBoolean If workspace members cannot share files via public links without passwords. public_links_require_expirationBoolean If workspace members cannot share files via public links without expiration. public_links_max_expiration_in_hoursNumber The max expiration in hours workspace members can set on public links.
workspace_rename A workspace was renamed. Note: due to a data structure change, this action is only included for newer workspace events. For legacy workspace events, see license_group_rename.	old_nameString The name of the workspace before it was renamed. new_nameString The name of the workspace after it was renamed.
workspace_team_csv_exported The teams list of a workspace was exported as a CSV file.
workspace_visibility_setting_change A workspace's visibility setting was modified.	old_org_accessString Org member's access to the workspace before the change. Can be hidden or visible. new_org_accessString Org member's access to the workspace after the change. Can be hidden or visible.