Audit
Review Envault changes in your workspace.
Open Audit from the Console navigation after selecting a workspace. Workspace
Owners and Administrators can read the history. The Audit → Viewer role grants
audit.records.read without granting access to secret values.
The list shows the time, actor ID, action, target, outcome and event details. Use the outcome filter to narrow the list, Refresh to fetch recent activity and Load more to browse older records. Records belong to the selected workspace. They remain identifiable by ID after a secret, environment or user is deleted.
Recorded activity
Envault records creation and deletion of groups/environments, secret creation, updates, deletion, imports, inheritance and container links. Update events include previous and new revision numbers. Imports record each imported key; previewing an import does not create success events.
Applying secrets to a container is recorded as DELIVER. This records the outcome
of applying values, not whether the application started or a deployment succeeded.
Secret lists, individual and bulk reveals, downloads, runtime exports and value resolution do not create audit records, including failed or denied reads. Previously recorded read events remain in the history.
Failed or denied mutations are recorded separately as FAILURE or DENIED.
Requests rejected before sign-in are not included. Other RDC products do not yet
produce events in Audit.
Secret protection and limits
Audit contains key names, identifiers and revisions, never secret values, encrypted payloads, encryption keys or access tokens. It cannot restore a prior secret value. Restoring previous secret values is not supported.
If saving a secret fails, retry the operation. A failed application of container secrets may have applied some values; check the operation status before retrying. Contact support with the resource ID if the error continues. Historical activity from before this feature was enabled is not reconstructed.