The tracked user activity events display under the User filter in Audit.

We track these user activity events:

Event CodeEvent MessageAssociated Object IDNotes
USR-1
User createdThe ID of the created user.(In Anaplan)
USR-2User activatedThe ID of the created user.(In Anaplan)
USR-3User enabledThe associated user ID.(In the tenant)
USR-4User disabledThe associated user ID.(In the tenant)
USR-5User updatedThe ID of the updated user.
USR-8
User login successThe ID associated with the user login.
USR-9User login failureThe ID associated with the user login.
USR-10
User logout successThe ID associated with the user logout.
USR-11User logout failureThe ID associated with the user logout.
USR-12User session time-outThe ID associated with the user who timed out.
USR-13User access to model, successThe associated model ID.

This message applies when a user successfully:

  • Opens a model in the Manage Models interface
  • Opens a bookmarked model through a web browser
  • Selects a model name in Anaplan Home or in the Administration console
  • Navigates to the source model in the user experience.
USR-14User access-to-model failureThe associated model ID.

This message applies when a user fails to:

  • Opens a model in the Manage Models interface
  • Opens a bookmarked model through a web browser
  • Selects a model name in Anaplan Home or in the Administration console
  • Navigates to the source model in the user experience.
USR-15User assigned to tenant successThe associated user ID.
USR-16User assigned to tenant failureThe associated user ID.
USR-17User removed from tenant successThe associated user ID.
USR-18User removed from tenant failureThe associated user ID.
USR-19User accessed dashboardThe associated model ID.
USR-20User executed actionThe associated model ID.
USR-21User added to workspaceThe ID of the added user.
USR-22User removed from workspaceThe ID of the removed user.

USR-23User assigned to a model roleThe ID of the user assigned the model role.This includes the No Access role. If someone assigns or removes No Access, it's recorded in the audit log.
USR-24User unassigned from a model roleThe ID of the user unassigned from a role.This includes the No Access role. If someone assigns or removes No Access, it's recorded in the audit log.
USR-25User assigned or unassigned the Workspace Administrator roleThe ID associated with the user whose role has changed.If someone assigns or removes the Workspace Administrator role, it's recorded in the audit log..
USR-26User email updatedThe associated user ID.
USR-27User first name updatedThe associated user ID.
USR-28User last name updatedThe associated user ID.
USR-29User DeletedThe associated user ID.
USR-30Visitor added to workspaceThe ID of the added visiting user.
USR-31
Visitor removed from workspaceThe ID of the removed visiting user. 
USR-32Miscelleaneous Data ExportThe associated model ID.
USR-33AssignThe associated model ID.An object was associated to a corresponding list.
USR-34Copy branchThe associated model ID.
USR-35CreateThe associated model ID.A create action was made.
USR-36Data export from actionThe associated model ID.(Within Anaplan)
USR-38Delete from list using Selection action has been executedThe associated model ID.
USR-39Model imported via Manage models The associated model ID.
USR-40An optimizer action has been executed.The associated model ID.
USR-41A process action has been executedThe associated process ID.
USR-42Line Items updated from an importThe associated model ID.  
USR-50Users updated from an import The associated model ID.
USR-51List items updated from an importThe associated model ID.
USR-52Module data updated from an importThe associated model ID. 
USR-53Versions items updated from an importThe associated model ID.
USR-54Model updated from an importThe associated model ID.
USR-55User password changeThe associated user ID.
USR-57User granted Exception access.The associated user ID.
USR-58Revocation of Exception access.The associated user ID.

Note: 

  • User access model success displays the IP address as: ipAddress=NA
  • User access model failure displays the IP address as: userAgent=NA displays the IP address as: userAgent=NA