Intercom's Teammate Activity Logs track important teammate actions for auditing and troubleshooting, such as changes to settings, data exports, and campaign launches.
Category | Event name | Description |
Security & Access | AdminImpersonationConsentApproved | Approved access to workspace for Intercom employee / admin |
| AdminImpersonationConsentRevoked | Revoked access to workspace for Intercom employee / admin |
| Admin impersonation session start | Start of a session where admin impersonation begins |
| Admin impersonation session end | End of a session where admin impersonation occurred |
| IP allowlist settings change | Change in IP allowlist settings |
| Workspace authentication method change | Your workspace's authentication methods were changed |
| Workspace Google SSO domain change | Your workspace's Google SSO domain was changed |
| Security settings change | A teammate changed security settings |
| Teammate login failure | A teammate tried to login with the wrong credentials |
| Teammate login success | A teammate logged in successfully |
| Teammate recovery code sent | Sending of a recovery code |
| Teammate logout | A teammate logged out |
| Teammate mobile login failure | Failed mobile login for a teammate |
| Teammate mobile login success | Successful mobile login for a teammate |
| Teammate password change | A teammate changed their password |
| Teammate password reset request | A teammate requested a password reset |
| Teammate password reset success | A teammate's password was successfully reset |
| Teammate two-factor authentication change | A teammate changed their two-factor authentication |
| Teammate unauthorized sign-in method | Unauthorized sign-in method for a teammate |
| Teammate account unlock | A teammate account was unlocked |
Teammate Management | Role creation | A teammate created a role |
| Role deletion | A teammate deleted a role |
| Role permission change | A teammate changed the permissions of a role |
| SCIM group creation | A new SCIM group was created. |
| SCIM group deletion | A SCIM group was deleted. |
| SCIM group membership change | A teammate’s SCIM group membership was changed. |
| SCIM group update | An existing SCIM group was updated. |
| SCIM groups bulk update | Multiple SCIM groups were updated in bulk. |
| SCIM settings change | SCIM settings were modified. |
| SCIM system disabled | The SCIM system was disabled. |
| SCIM system enabled | The SCIM system was enabled. |
| SCIM teammate bulk role assignment | Roles were assigned to teammates in bulk via SCIM. |
| SCIM teammate password update | A teammate’s password was updated via SCIM. |
| SCIM teammate profile update | A teammate’s profile was updated via SCIM. |
| SCIM teammate role change | A teammate’s role was changed via SCIM. |
| Seat change | A teammate changed the seat |
| Teammate assignment limit change | A teammate changed their assignment limit |
| Teammate away mode change | A teammate changed their away mode |
| Teammate deletion | A teammate was removed from your workspace |
| Teammate deprovisioning | A teammate was deprovisioned from your workspace via SCIM |
| Teammate invite change | The permissions for a teammate invite were changed |
| Teammate invite creation | A teammate invite was created |
| Teammate invite deletion | A teammate invite was deleted |
| Teammate email change | A teammate changed their email |
| Teammate name change | A teammate changed their name |
| Teammate permission change | The permissions for a teammate were changed |
| Teammate provisioning | A teammate was provisioned on your workspace via SCIM |
| Workspace team creation | A team was created |
| Workspace team deletion | A team was deleted |
| Workspace team membership modification | A team's membership was modified |
| Workspace teammate join | A teammate joined your workspace (i.e. accepted your invite) |
Workspace Configuration | Workspace name change | The name of your workspace was changed |
| Workspace outbound address change | The outbound email address was changed for your workspace |
| Workspace timezone change | Change in timezone for a workspace |
| Workspace deletion request | Workspace deletion has been requested by a teammate |
| Billing contact address bounced | Email to billing contact address bounced |
| Billing contact changes | Changes in billing contact information |
| Inbound conversations change | Change in inbound conversations |
| Inbox access change | Change in inbox access |
Messenger configuration | Workspace messenger security change | Your workspace's messenger security setting was changed |
| Messenger security reminder disabled | Disabling of Messenger security reminder |
| Creation of Messenger API secret | A new Messenger API secret was created |
| Deletion of Messenger API secret | A new Messenger API secret was deleted |
| Messenger availability changed | Change to Messenger availability |
| Messenger look and feel change | Change to Messenger look and feel |
| Messenger spaces change | Change to Messenger spaces |
| Office hours change | Change in office hours |
| Require an email for new conversations change | Change in the requirement for email in new conversations |
| Special notice change | Change in special notices |
| Welcome message change | Change in welcome message |
Fin | AI Agent identity settings change | Changes to Fin AI Agent's identity settings (name and avatar) |
| AI Agent personality settings change | Changes to Fin AI Agent's personality settings (tone of voice, answer length and pronoun formality |
| Fin AI Agent opt-in | A teammate opted your workspace into Fin AI Agent |
Apps & Developer Hub | App token regeneration | An app token was regenerated |
| Oauth Token Revocation | Oauth token revoked |
| Developer Hub secret copied | The client secret for an app is copied by a teammate |
| Developer Hub secret revealed | The client secret for an app is revealed by a teammate |
| App installation | An app was installed in your workspace |
| App uninstallation | An app was uninstalled from your workspace |
| Custom Authentication Token Creation | Creation of custom authentication token |
Data | Bulk deletion | User or lead data was deleted from your workspace |
| Bulk export | User or lead data was exported from your workspace |
| Data export created | Creation of a data export |
| Data export run | Execution of a data export |
| Teammate creates a report | When a teammate creates a report in your workspace |
| Teammate updates a report | When a teammate updates a report in your workspace |
| Teammate deletes a report | When a teammate deletes a report in your workspace |
| Workspace webhook creation | A webhook subscription was created |
| Workspace webhook deletion | A webhook subscription was deleted |
| Workspace data deletion | A user or lead was deleted from your workspace |
| Workspace data export | Message or conversation data was exported from your workspace |
Phone | Call recording deletion | A teammate deleted a call recording from a conversation |
|
|
|
Articles | Help Center settings change | Your Help Center was turned on or off |
| Search for Articles Enabled / Disabled | Enable/Disable search for articles |
| Search for Articles Required change | Change in requirement for articles in search |
| Article content created | Creation of article content |
| Article content deleted | Deletion of article content |
| Article content published | Publication of article content |
| Article content unpublished | Unpublishing of article content |
| Article content updated | Update of article content |
| Article created | Creation of an article |
| Article deleted | Deletion of an article |
Channels | Strip links from emails | Changing strip inbound email links |
| Message deletion | Deletion of a message |
| Message state change | A teammate changed the state of a message |
| Ruleset creation | Creation of a ruleset |
| Ruleset deletion | Deletion of a ruleset |
| Ruleset live status change | Change in live status of a ruleset |
| Campaign deletion | Deletion of a campaign |
| Campaign state change | Change in the state of a campaign |
Inbox | Creation of macro | Creation of macro |
| Update of macro | Update of macro |
| Deletion of macro | Deletion of macro |
| Content suggestions settings change | A teammate enabled/disabled Custom Answer suggestions in the composer |
| Conversation part deletion | Deletion of a conversation part |
| Conversation topic change | A teammate changed a conversation topic |
| Conversation topic creation | A teammate created a conversation topic |
| Conversation topic deletion | A teammate deleted a conversation topic |
For more information about Teammate Activity Logs, please see our main help article: Review actions taken in your workspace with Teammate Activity Logs
Need more help? Get support from our Community Forum
Find answers and get help from Intercom Support and Community Experts