Audit Logs

Concepts

Designs, folders, and assets Teams, groups, and users Canva Apps and Integrations

Actions reference

Apps Brands Content Designs Exports Folders Groups Organizations Permissions Teams Users

Teams

Update team

An actor triggers this event when they update the details of a Canva Team⁠(opens in a new tab or window), such as the team's display name.

We only log the team properties that the actor requested changes for. The changed fields are listed in the changed_fields array.

typestring

The value for this can only be UPDATE_TEAM.

changed_fieldsstring[]

Fields requested to be changed in this update. This can be an array of the following:

TEAM_NAME: The team name.
DISPLAY_NAME: The team's display name as shown in the Canva UI.
THIRD_PARTY: Whether this team represents a third party integration.
BILLING_INFO: Billing information for the team.
WEBSITE_URL: The website URL for the team.
ADDRESS: The team's address.
EXTERNAL_LINKS: Links to teams or other entities within external identity providers.
BRAND_COLORS_ONLY: Whether the team is restricted to brand colors.
BRAND_FONTS_ONLY: Whether the team is restricted to brand fonts.

team_namestring

OPTIONAL

The team name.

display_namestring

OPTIONAL

The team's display name. This is used to represent the team with text in a UI.

third_party_integratedboolean

OPTIONAL

Whether this team represents a third-party integrated application.

billing_infoobject

OPTIONAL

Billing information for the team.

Properties of billing_info

company_namestring

OPTIONAL

company_addressstring

OPTIONAL

billing_contactsstring[]

OPTIONAL

team_addressobject

OPTIONAL

Address for the team.

Properties of team_address

street1string

OPTIONAL

street2string

OPTIONAL

citystring

OPTIONAL

subdivisionstring

OPTIONAL

country_codestring

OPTIONAL

postcodestring

OPTIONAL

external_linksTeamExternalLink[]

OPTIONAL

Represents a link to teams or other entities within external identity providers.

Properties of external_links

sourcestring

OPTIONAL

The source of the external link. This can be one of the following:

ONE_ROSTER: A OneRoster system.
MANUAL: Manual imports, such as Canva customer support performing the import.

managing_teamobject

OPTIONAL

Represents the managing team with the associated external configuration. When source is MANUAL, users managed by the managing team are provisioned into this team as a fallback.

Properties of managing_team

idstring

The managing team ID.

external_idstring

OPTIONAL

Included when source is not MANUAL. Otherwise, this is the SSO identity provider or OneRoster external ID associated with the team.

website_urlstring

OPTIONAL

The website URL for the team.

brand_fonts_onlyboolean

OPTIONAL

Whether the team is restricted to brand fonts.

brand_colors_onlyboolean

OPTIONAL

Whether the team is restricted to brand colors.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "UPDATE_TEAM",
    "changed_fields": "ADDRESS",
    "team_address": {
      "street1": "110 Kippax street",
      "city": "Surry Hills",
      "subdivision": "AU-NSW",
      "country_code": "AU",
      "postcode": 2010
    }
  },
  "outcome": ...,
  "context": ...
}

JSON

Delete team

An actor triggers this event when they delete a Canva Team. For details on deleting a Canva team, see Canva Help: Managing and deleting teams — Deleting a team⁠(opens in a new tab or window).

typestring

The value for this can only be DELETE_TEAM.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "DELETE_TEAM"
  },
  "outcome": ...,
  "context": ...
}

JSON

Undelete team

An actor triggers this event when they cancel or undo the deletion of a Canva Team. For details on deleting a Canva team, see Canva Help: Managing and deleting teams — Canceling or undoing team deletion⁠(opens in a new tab or window).

typestring

The value for this can only be UNDELETE_TEAM.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "UNDELETE_TEAM"
  },
  "outcome": ...,
  "context": ...
}

JSON

Add user to team

An actor triggers this event when they add a Canva user to a Canva team. For details on adding users to a Canva team, see Canva Help: Adding or removing people in a team or class — Inviting users to join your team⁠(opens in a new tab or window).

The reason field contains the reason the user was added to the team. For example, they accepted a team invitation or they were provisioned by a SCIM provider.

typestring

The value for this can only be ADD_USER_TO_TEAM.

userAuditLogUser

A Canva user.

Properties of user

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

rolestring

The user's role within a team. This can be one of the following:

MEMBER: Team member.
DESIGNER: Team designer.
ADMIN: Team administrator.
OWNER: Team owner.

reasonTeamMembershipChangeReason

OPTIONAL

The reason for the change.

Properties of reason

typestring

This can be one of the following:

INVITATION_ACCEPTED: An invitation to join team was accepted
JOIN_POLICY_ALLOWED: The change was permitted by your Team discovery and settings⁠(opens in a new tab or window).
REQUEST_TO_JOIN_APPROVED: A user request to join your team was approved.
SCIM: The change was made through your team's configured SCIM Identity Provider⁠(opens in a new tab or window).
SAML_JIT_PROVISIONING: SAML Just-In-Time provisioning. This event can be triggered by events like a user linking their Canva account with your SSO provider⁠(opens in a new tab or window) or when you set up Single Sign-On (SSO)⁠(opens in a new tab or window) for your team.

inviterAuditLogUser

OPTIONAL

A Canva user.

Properties of inviter

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "ADD_USER_TO_TEAM",
    "user": {
      "id": "UXoqDbwwSbQ",
      "display_name": "Ash Doe",
      "email": "[email protected]"
    },
    "role": "MEMBER",
    "reason": {
      "type": "INVITATION_ACCEPTED",
      "inviter": {
        "id": "USwwQbbxoqD",
        "display_name": "Jane Doe",
        "email": "[email protected]"
      }
    }
  },
  "outcome": ...,
  "context": ...
}

JSON

Update user in team

An actor triggers this event when they update a Canva user's membership within a Canva team, such as changing the user's role from ADMIN to MEMBER. For details on the different team roles, see Canva Help: Team roles and permissions⁠(opens in a new tab or window).

The reason field contains the reason the user was updated in the team. For example, their details were updated by a SCIM provider.

typestring

The value for this can only be UPDATE_USER_IN_TEAM.

userAuditLogUser

A Canva user.

Properties of user

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

new_rolestring

OPTIONAL

The user's role within a team. This can be one of the following:

MEMBER: Team member.
DESIGNER: Team designer.
ADMIN: Team administrator.
OWNER: Team owner.

old_rolestring

OPTIONAL

The user's role within a team. This can be one of the following:

MEMBER: Team member.
DESIGNER: Team designer.
ADMIN: Team administrator.
OWNER: Team owner.

reasonTeamMembershipChangeReason

OPTIONAL

The reason for the change.

Properties of reason

typestring

This can be one of the following:

INVITATION_ACCEPTED: An invitation to join team was accepted
JOIN_POLICY_ALLOWED: The change was permitted by your Team discovery and settings⁠(opens in a new tab or window).
REQUEST_TO_JOIN_APPROVED: A user request to join your team was approved.
SCIM: The change was made through your team's configured SCIM Identity Provider⁠(opens in a new tab or window).
SAML_JIT_PROVISIONING: SAML Just-In-Time provisioning. This event can be triggered by events like a user linking their Canva account with your SSO provider⁠(opens in a new tab or window) or when you set up Single Sign-On (SSO)⁠(opens in a new tab or window) for your team.

inviterAuditLogUser

OPTIONAL

A Canva user.

Properties of inviter

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "UPDATE_USER_IN_TEAM",
    "user": {
      "id": "UXoqDbwwSbQ",
      "display_name": "Jane Doe",
      "email": "[email protected]"
    },
    "new_role": "DESIGNER",
    "old_role": "MEMBER",
    "reason": {
      "type": "SCIM"
    }
  },
  "outcome": ...,
  "context": ...
}

JSON

Remove user from team

An actor triggers this event when they remove a Canva user from a Canva team. This includes users removing themselves from a team⁠(opens in a new tab or window).

The reason field contains the reason the user was removed from the team. For example, they were removed by a SCIM provider.

typestring

The value for this can only be REMOVE_USER_FROM_TEAM.

userAuditLogUser

A Canva user.

Properties of user

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

old_rolestring

The user's role within a team. This can be one of the following:

MEMBER: Team member.
DESIGNER: Team designer.
ADMIN: Team administrator.
OWNER: Team owner.

reasonTeamMembershipChangeReason

OPTIONAL

The reason for the change.

Properties of reason

typestring

This can be one of the following:

INVITATION_ACCEPTED: An invitation to join team was accepted
JOIN_POLICY_ALLOWED: The change was permitted by your Team discovery and settings⁠(opens in a new tab or window).
REQUEST_TO_JOIN_APPROVED: A user request to join your team was approved.
SCIM: The change was made through your team's configured SCIM Identity Provider⁠(opens in a new tab or window).
SAML_JIT_PROVISIONING: SAML Just-In-Time provisioning. This event can be triggered by events like a user linking their Canva account with your SSO provider⁠(opens in a new tab or window) or when you set up Single Sign-On (SSO)⁠(opens in a new tab or window) for your team.

inviterAuditLogUser

OPTIONAL

A Canva user.

Properties of inviter

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "REMOVE_USER_FROM_TEAM",
    "user": {
      "id": "UXoqDbwwSbQ",
      "display_name": "Alex Doe",
      "email": "[email protected]"
    },
    "old_role": "MEMBER",
    "reason": {
      "type": "SAML_JIT_PROVISIONING"
    }
  },
  "outcome": ...,
  "context": ...
}

JSON

Create a request to join a team

An actor triggers this event when they request to join a team and the team's settings require an administrator to approve before they can join. For information on users joining teams, see Canva Help: Joining teams⁠(opens in a new tab or window).

typestring

The value for this can only be CREATE_TEAM_JOIN_REQUEST.

userAuditLogUser

A Canva user.

Properties of user

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "CREATE_TEAM_JOIN_REQUEST",
    "user": {
      "id": "UXoqDbwwSbQ",
      "display_name": "Jane Doe",
      "email": "[email protected]"
    }
  },
  "outcome": ...,
  "context": ...
}

JSON

Update a request to join a team

An actor triggers this event when they update a user's request to join a team. For example, an administrator approved another user's request to join a team.

typestring

The value for this can only be UPDATE_TEAM_JOIN_REQUEST.

userAuditLogUser

A Canva user.

Properties of user

idstring

The user ID.

display_namestring

OPTIONAL

The display name of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

emailstring

OPTIONAL

The email address of the user.

For privacy reasons, this field is redacted for users outside of your organization. Rarely, it may also be unavailable for technical reasons.

approval_statusstring

The status of a request or invite to join a team. This can be one of the following:

PENDING: The request is pending.
APPROVED: An administrator approved the request.
REJECTED: An administrator rejected the request.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "UPDATE_TEAM_JOIN_REQUEST",
    "user": {
      "id": "UXoqDbwwSbQ",
      "display_name": "Jane Doe",
      "email": "[email protected]"
    },
    "approval_status": "PENDING"
  },
  "outcome": ...,
  "context": ...
}

JSON

Create a request to invite a user into a team

A non-administrator actor triggers this event when they create a request to invite user to join a team.

typestring

The value for this can only be CREATE_TEAM_INVITATION_REQUEST.

emailsstring[]

A list of emails invited to join the team. These emails might not be linked to existing Canva accounts.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "CREATE_TEAM_INVITATION_REQUEST",
    "emails": [
      "[email protected]",
      "[email protected]"
    ]
  },
  "outcome": ...,
  "context": ...
}

JSON

Update a request to invite a user into a team

An actor triggers this event when they update a non-administrator's request to invite a user to join a team. For example, an administrator approved a user's request to invite another user to join a team.

typestring

The value for this can only be UPDATE_TEAM_INVITATION_REQUEST.

emailstring

The email invited to join the team.

approval_statusstring

The status of a request or invite to join a team. This can be one of the following:

PENDING: The request is pending.
APPROVED: An administrator approved the request.
REJECTED: An administrator rejected the request.

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "UPDATE_TEAM_INVITATION_REQUEST",
    "email": "[email protected]",
    "approval_status": "PENDING"
  },
  "outcome": ...,
  "context": ...
}

JSON

Create downloadable team activity report

An actor triggers this event when they create a downloadable team activity report. For details on these reports, see Canva Help: Checking team analytics and reports⁠(opens in a new tab or window).

typestring

The value for this can only be CREATE_DOWNLOADABLE_TEAM_REPORT.

report_typestring

The type of team activity report. This can be one of the following:

USER: User report.
TEMPLATE: Template report.
BRAND_KIT: Brand Kit report.
BRAND_KIT_DESIGNS: Brand Kit designs report.

start_timestampinteger

The start of the report's time window, as a Unix timestamp (in milliseconds since the Unix Epoch).

end_timestampinteger

The end of the report's time window, as a Unix timestamp (in milliseconds since the Unix Epoch).

Example

{
  "id": ...,
  "timestamp": ...,
  "actor": ...,
  "target": ...,
  "action": {
    "type": "CREATE_DOWNLOADABLE_TEAM_REPORT",
    "report_type": "USER",
    "start_timestamp": 1709751447000,
    "end_timestamp": 1720292247000
  },
  "outcome": ...,
  "context": ...
}

JSON