Audit log

Who did what, and when, including sign in and security events. Financial overrides and role changes are marked.

This screen answersUS-13 US-13b OP-5 OP-6 OP-10 DS-7

Acceptance criteria

US-13 Audit Logging (base) HIGHEST NEW SCREEN

As a compliance/admin user, I want user actions logged, so that we have traceability for regulatory and internal review.

Submit/edit/approve → log entry with user, timestamp, action, record ID.
Filter by user/date/action within agreed SLA.
Financial overrides (US-01) logged distinctly. (Role/permission-change auditing extends this in US-13b)

US-13b Audit Extension: Role/Permission Changes HIGHEST NEW SCREEN

As a compliance/admin user, I want role and permission changes logged, so that we can audit who changed whose access and when.

Role assignments and permission changes logged (who/what/when).
Org-settings changes (US-49) captured in the audit trail.

OP-5 Viewer and Auditor roles P1 OPERATIONAL REVIEW

As an administrator, I need two read-only roles, so management and compliance can look without acting.

Viewer is the go-live default for users nobody mapped (US-46). It never gets create, update, delete or run.
Auditor reads the audit log, users, roles and security settings at group scope, and nothing else is changed by it.
The legacy viewer role maps to Viewer, not to Receptionist.

OP-6 CSV export and print P1 OPERATIONAL REVIEW

As a desk user, I need to export a list to CSV and print a result, so I can hand it to finance or file it with the patient.

Every list has Export with CSV. The export says how many rows it holds and is logged.
Eligibility, authorization and claim results have Print or save as PDF.
A role that cannot read a list cannot export it.

OP-10 Audit coverage and break-glass P1 OPERATIONAL REVIEW

As a compliance owner, I need every sensitive action logged and a sealed emergency account, so nothing happens unseen.

The audit log also records cancel, quarantine replay, assign, take over, export and an administrator opening a clinical or finance record.
An administrator cannot change their own role. The attempt is blocked and logged.
Signing in with the break-glass account raises a security alert and an email to the other administrators.

DS-7 Guarded change of mode, with audit P1 ADDED BY SCOPE: DATA SOURCES

As a Super admin, I need to change a mode safely once data exists, so no transaction loses its patient or its code.

With no data the change is free. With data, a case screen shows the records already imported and the transactions that reference them, the allowed paths (keep a snapshot and switch, migrate references, or wait until open transactions close) and requires a typed confirmation and a reason.
Every change is audited and readable by the Auditor in the data source change trail.

Wireframe state

DefaultEmptySecurity eventsWider coverageAuditor viewExported

Read only. You are an Auditor: read only. Entries cannot be edited or deleted. You can filter and export, and every export is itself logged.

Wider coverage. The log now also records cancelling a transaction, replaying a quarantined response, assigning and taking over a case, every CSV export, an administrator opening a record, break-glass sign ins and blocked role changes.

CSV downloaded. audit-log-2026-10-05.csv is ready: 1,284 rows, with the filters you set. The export is logged in the audit log.

When	Who	What happened	Record	Org node
Today 06:12	Break-glass administratorSealed by Compliance	Break-glass sign inBreak-glass	Session	Group	Details
Today 09:14	Hadeel Al-QahtaniAdministrator	Applied roles to 17 usersRole change	MIG-2026-0007	Group	Details
Today 09:02	Hadeel Al-QahtaniAdministrator	Changed Claims officer permissionsRole change	Role: Claims officer	Group	Details
Today 08:47	Dalal Al-RashidReceptionist	Soft locked after 5 wrong passwords	User: Dalal Al-Rashid	Facility B	Details
Today 08:40	Omar Al-ZahraniApproval officer	Sent prior authorization	PA-10977	Facility A / Consultation	Details
Today 08:31	Reem Al-OtaibiClaims officer	Sent claim	CL-20366	Facility A / Claims	Details
Today 08:12	Hadeel Al-QahtaniAdministrator	Signed in	Session	Group	Details
Yesterday 17:44	Turki Al-AnaziClaims officer	Hard locked, 3rd soft lock in 24 hours	User: Turki Al-Anazi	Facility A	Details
Yesterday 16:20	Faisal Al-DosariA/R	Viewed reconciliation RC-3301	RC-3301	Facility A / Finance	Details
Yesterday 14:05	Hadeel Al-QahtaniAdministrator	Changed organization type to Hospital	Organization	Group	Details
30 Sep 16:40	Reem Al-OtaibiClaims officer	Overrode net amount on a lineFinancial override	CL-20418	Facility A / Claims	Details

When	Who	What happened	Record	Org node
Today 09:30	Hadeel Al-QahtaniAdministrator	Two-step reset by adminSecurity	User: Reem Al-Otaibi	Group	Details
Today 09:12	Layla Al-HarbiReceptionist	Password reset requestedSecurity	User: Layla Al-Harbi	Facility A	Details
Today 08:52	Dalal Al-RashidReceptionist	Sign in refused, account soft lockedSecurity	User: Dalal Al-Rashid	Facility B	Details
Today 08:47	Dalal Al-RashidReceptionist	Soft locked after 5 wrong passwordsSecurity	User: Dalal Al-Rashid	Facility B	Details
Today 08:20	Omar Al-ZahraniApproval officer	Two-step code failedSecurity	User: Omar Al-Zahrani	Facility A	Details
Today 08:12	Hadeel Al-QahtaniAdministrator	Signed in	Session	Group	Details
Today 08:05	Sami Al-GhamdiReceptionist	Concurrent session refused, older session signed outSecurity	Session	Facility B	Details
Yesterday 18:20	Maha Al-MutairiApproval officer	Session ended by timeout after 20 minutesSecurity	Session	Facility B	Details
Yesterday 17:58	Omar Al-ZahraniApproval officer	Signed out	Session	Facility A	Details
Yesterday 17:44	Turki Al-AnaziClaims officer	Password reset completedSecurity	User: Turki Al-Anazi	Facility A	Details

When	Who	What happened	Record	Org node
Today 06:12	Break-glass administratorSealed by Compliance	Break-glass sign inBreak-glass	Session	Group	Details
Today 09:36	Hadeel Al-QahtaniAdministrator	Role change blocked: cannot change own roleBlocked	User: Hadeel Al-Qahtani	Group	Details
Today 09:22	Hadeel Al-QahtaniAdministrator	Admin viewed recordOperations	CL-20418	Facility A / Claims	Details
Today 09:05	Faisal Al-DosariA/R	Export CSV, 38 rowsOperations	Rejected claims queue	Facility A	Details
Today 08:58	Omar Al-ZahraniApproval officer	Take over from Layla Al-HarbiOperations	EL-30551	Facility A	Details
Today 08:52	Hadeel Al-QahtaniAdministrator	Assign to Reem Al-OtaibiOperations	CL-20418	Facility A	Details
Today 08:44	Hadeel Al-QahtaniAdministrator	Replay quarantined responseOperations	Bundle a41f7c02	Group	Details
Today 08:31	Omar Al-ZahraniApproval officer	Cancel transaction, reason givenOperations	PA-10977	Facility A	Details
Yesterday 17:10	Reem Al-OtaibiClaims officer	Export CSV, 62 rowsOperations	Ready to bill queue	Facility A	Details

Nothing matches these filters

Try a wider date range or clear the user filter.

Clear filters