openapi: 3.2.0
info:
  title: Agent Audit Trail API
  description: 'This document refers to Symphony API calls to send and receive messages

    and content.'
  version: 25.8.1
servers:
- url: youragentURL.symphony.com/agent
tags:
- name: Audit Trail
paths:
  /v1/audittrail/privilegeduser:
    get:
      tags:
      - Audit Trail
      summary: Get a list of actions performed by a privileged account acting as privileged…
      description: Get a list of actions performed by a privileged account acting as privileged user given a period of time.
      parameters:
      - name: sessionToken
        in: header
        description: Session authentication token.
        required: true
        schema:
          type: string
      - name: keyManagerToken
        in: header
        description: Key Manager authentication token.
        schema:
          type: string
      - name: startTimestamp
        in: query
        description: Start timestamp in unix timestamp in millseconds.
        required: true
        schema:
          type: integer
          format: int64
      - name: endTimestamp
        in: query
        description: End timestamp in unix timestamp in millseconds. If not specified, it assumes to be current time.
        schema:
          type: integer
          format: int64
      - name: before
        in: query
        description: Return results from an opaque “before” cursor value as presented via a response cursor.
        schema:
          type: string
      - name: after
        in: query
        description: Return results from an opaque “after” cursor value as presented via a response cursor.
        schema:
          type: string
      - name: limit
        in: query
        description: 'Max No. of violations to return. If no value is provided, 50 is the default.

          Some maximums for limit may be enforced for performance reasons.

          The maximum supported value is 500.

          '
        schema:
          type: integer
      - name: initiatorId
        in: query
        description: If present, only the initiator with this initiator <user id> will be returned.
        schema:
          type: integer
          format: int64
      - name: role
        in: query
        description: 'If present, only the audit trail initiated by s user with privileged role acting as

          privileged user will be returned.

          Privileged eliglible roles:

          User Provisioning (USER_PROVISIONING),

          Content Management (CONTENT_MANAGEMENT),

          Expression Filter Policy Management (EF_POLICY_MANAGEMENT),

          SCO (SUPER_COMPLIANCE_OFFICER),

          CO (COMPLIANCE_OFFICER),

          Super admin (SUPER_ADMINISTRATOR),

          Admin (ADMINISTRATOR),

          L1 (L1_SUPPORT),

          L2 (L2_SUPPORT),

          Scope Manager (SCOPE_MANAGEMENT)

          '
        schema:
          type: string
      responses:
        200:
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/V1AuditTrailInitiatorList'
        204:
          description: No Messages.
          content: {}
        400:
          description: Client error, see response body for further details.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        401:
          description: 'Unauthorized: Session tokens invalid.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        403:
          description: 'Forbidden: Caller lacks necessary entitlement.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        500:
          description: Server error, see response body for further details.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      operationId: getV1AudittrailPrivilegeduser
      x-operation-id-source: derived
components:
  schemas:
    V1AuditTrailInitiatorList:
      type: object
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/V1AuditTrailInitiatorResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    Error:
      type: object
      properties:
        code:
          type: integer
          format: int32
        message:
          type: string
    Pagination:
      required:
      - cursors
      type: object
      properties:
        cursors:
          type: object
          properties:
            before:
              type: string
              description: 'This is the opaque url-safe string that points to the start of the page of data

                that has been returned.

                '
              example: MTAxNTExOTQ1MjAwNzI5NDE=
            after:
              type: string
              description: 'This is the opaque url-safe string that points to the end of the page of data

                that has been returned.

                '
              example: NDMyNzQyODI3OTQw
        previous:
          type: string
          description: 'API endpoint that will return the previous page of data. If not included, this is

            the first page of data.

            '
          example: https://tenantapi.d.isym.io/v1/tenantinfo?limit=25&before=MTAxNTExOTQ1MjAwNzI5NDE=
        next:
          type: string
          description: 'API endpoint that will return the next page of data. If not included, this is the

            last page of data. Due to how pagination works with visibility and privacy, it is

            possible that a page may be empty but contain a ''next'' paging link. Stop paging when

            the ''next'' link no longer appears.

            '
          example: https://tenantapi.d.isym.io/v1/tenantinfo?limit=25&after=NDMyNzQyODI3OTQw
    V1AuditTrailInitiatorResponse:
      type: object
      properties:
        action:
          type: string
          description: The audit trail action that has peformed
        actionName:
          type: string
          description: The audit trail action name that has peformed
        timestamp:
          type: string
          description: The timestamp when the action has occurred
        initiatorId:
          type: string
          description: The user's id that has performed the action
        initiatorUsername:
          type: string
          description: The username that has performed the action
        initiatorEmailAddress:
          type: string
          description: The user's e-mail address that has performed the action
      description: 'Audit Trail Initiator object response.

        The attributes may vary according to the action.

        There are different types of action and each action could have specific attributes.

        '