---
title: "List all User Audit Logs"
method: GET
path: "/user-audit-logs"
tags: ["userAuditLogs"]
---

# List all User Audit Logs

`GET /user-audit-logs`

## Request

- Base URL: `https://api.withpersona.com/api/v1`
- URL: `https://api.withpersona.com/api/v1/user-audit-logs`
- Auth: HTTP bearer

Returns a list of your organization’s user audit logs for up to the most recent 6 months.

Note: You must use a production API key to access this endpoint. For security reasons, we do not expose organization-level resources like user audit logs in Sandbox via API. Results are returned in reverse chronological order, with the most recently created objects first.

## Query parameters

- `page` UserAuditLogsGetParametersPage
  - `after` string: Object ID for pagination cursor
  - `before` string: Object ID for pagination cursor
  - `size` number, double: Limit on the number of objects returned
- `fields` object

## Headers

- `Key-Inflection` 'camel' | 'kebab' | 'snake'
- `Idempotency-Key` string
- `Persona-Version` '2026-09-29' | '2025-12-08' | '2025-10-27' | '2023-01-05' | '2022-09-01' | '2021-08-18' | '2021-07-05' | '2021-02-21' | '2020-05-18': Server API version. More info on versioning can be found [here](https://docs.withpersona.com/versioning).

## Response `200`

This endpoint returns a collection of User Audit Logs objects.

- UserAuditLogsListAllUserAuditLogsResponse200
  - `data` UserAuditLog[], required
    - `type` 'user-audit-log'
    - `id` string
    - `attributes` UserAuditLogAttributes
      - `path` string
      - `method` string
      - `get-params` union: The GET params of the request. Schema depends on the action taken. Note: For large payloads, the value may appear as [FILTERED] to indicate redaction or truncation.
        - object
        - string
      - `post-params` union: The POST params of the request. Schema depends on the action taken. Note: For large payloads, the value may appear as [FILTERED] to indicate redaction or truncation.
        - object
        - string
      - `ip-address` string
      - `user-agent` string
      - `response-status` integer
      - `created-at` string, date-time
      - `impersonator-email-address` string, nullable
      - `context` UserAuditLogAttributesContext: Context of the audit log. Currently, this property is only present for dashboard inquiry creation audit logs -- when path is /api/internal/dashboard/v1/inquiries and method is POST.
        - `inquiry-id` string: ID of the inquiry created -- this property is only present when path is /api/internal/dashboard/v1/inquiries and method is POST
    - `relationships` UserAuditLogRelationships
      - `user` UserAuditLogRelationshipsUser
        - `data` UserAuditLogRelationshipsUserData
          - `type` 'user'
          - `id` string
      - `user-session` UserAuditLogRelationshipsUserSession
        - `data` UserAuditLogRelationshipsUserSessionData
          - `type` 'user-session'
          - `id` string
  - `links` UserAuditLogsGetResponsesContentApplicationJsonSchemaLinks, required
    - `prev` string, nullable, required
    - `next` string, nullable, required
  - `included` User[]: Objects that will be returned by default unless otherwise specified using the `include` query parameter in the request.
    - `id` string
    - `attributes` WorkflowRunIncludedObjectsItemsDiscriminatorMappingUserAttributes
      - `email-address` string
      - `name-first` string
      - `name-last` string

## Other responses

- `400`: The request was unacceptable, often due to invalid parameters.
- `401`: An invalid API key was provided.
- `403`: The given API key doesn’t have permissions to perform the request or a quota has been exceeded.
- `404`: The requested resource doesn’t exist.
- `429`: Your organization’s rate limit has been exceeded. We recommend an exponential backoff on requests.

---

[API](https://skmtc.dev/withpersona/apis/withpersona-8.md) - [All operations](https://skmtc.dev/withpersona/apis/withpersona-8/llms.txt) - [OpenAPI document](https://skmtc.dev/withpersona/apis/withpersona-8/revisions/3683a7f9e1fe?raw)