Audit
Who did what, when, and from where. Use it to answer "who changed this?" or "did this member really do that?".
Audit keeps every change made in this console, including attempts that were refused. It also keeps what members do on the website, card payments, and each visit to the newsletter archive or the member pages. Lines are kept for 180 days. A new line shows within a second.
Find one change
- Open Settings, then Audit.
- Pick an admin under Person, or a kind of person under Who. Person lists every console admin and the website, even someone with no lines yet.
- Pick an Action, for example Edited a plan.
- Set From and To to the days you care about.
- Press a line to open it.
The open line shows the exact action, the environment, the browser, and What was sent. Open member goes to the member it touched. Log lines for this request opens Logs at the same moment. Logs is for owners only.
Older lines
Audit shows ten lines a page, newest first. Use the arrows and page numbers under the list, or choose more under Rows per page. On the last page loaded, the next arrow and Load older fetch the next batch from FMS and move on to it. Changing a filter starts again from the newest.
Reading a line
| Column | Means |
|---|---|
| Who | The admin, the member, the website acting for them, or a guest known only by email. Under an admin's name is the role they held at the time. |
| What | What happened, and the reason when it failed. |
| Channel | How it reached FMS: Console, Website, Checkout, Donate, Gift, Archive, Member pages or AI assistant. |
| From | The person's own address. A dash means FMS did not know it. |
| Result | Done, Failed, Refused, Error or Waiting. Sign-in links have their own words: In, Sent, No access or Refused. |
Refused means FMS said no. A wrong password is refused. So is a change the person's role does not allow. Waiting means a card payment is paused for the bank's security check. The Result filter also offers the sign-in link outcomes (link expired, link used twice, link for the other site) so a member's failed sign-in is easy to find. From and To are calendar days in your own time zone.
Changes to staff accounts
What owners do on Staff shows up like this:
- Added mya@frontiermyanmar.net to the console as Support
- Changed mya@frontiermyanmar.net's role from Finance to Viewer
- Set a temporary password for mya@frontiermyanmar.net
- Switched off mya@frontiermyanmar.net's console account
- Switched mya@frontiermyanmar.net's console account back on
To see only these, pick an Action that starts with Colleague, such as Colleague added.
What Claude read
When a colleague has connected Claude to FMS, every sign-in and every question is a line here. Pick AI assistant under Channel to see only those.
- Who is the colleague whose account Claude used, with their role.
- What reads Claude: and what it looked at, such as Claude: looked up a member (jane@example.org) or Claude: read the revenue report. Connected Claude to FMS is a sign-in. Open member goes to the member asked about. What was sent shows what Claude asked for, such as the email it searched.
- A copied Claude sign-in was used again — FMS ended that connection means a sign-in code or token was presented twice, which only happens if it was copied. FMS cut that connection; ask the colleague whether anything looked wrong, then have them connect again. Disconnected an AI assistant is a connection ended from Your account or Claude's own Disconnect button. Ended a colleague's AI assistant connections is Revoke all on Staff.
- If a colleague's Claude is asking too fast, the refused lines show once a minute, not one per question.
- From is empty on a question. The call comes from Claude's servers, not from the colleague, so FMS keeps no address. The browser column shows what the Claude app's request says it is. A sign-in line does show the colleague's browser address.
- Refused means FMS said no: a wrong password, a switched-off account, a sandbox in use, or too many questions.
Follow one member
Press See all in Audit on the member's page. The list then shows only that member. The member's own Activity card shows the newest 50. See Notes, login email and newsletters.
What Audit never keeps
Passwords, API keys, email relay passwords, card details and Stripe secrets are never kept. Only named, harmless fields of each change are copied. Reading screens in the console is not kept. Only changes and downloads are.
Why a member's page views show once an hour
The website looks up a member's membership, invoices and team on most pages they open. Audit keeps that once per hour for each member and each way in (website or archive). A line means "they looked at it during this hour", not "they looked once". Every change a member makes, and every look-up that failed, is still kept each time.
Searching
The search box looks through every line in the environment, so a rare word can take a moment. Pick a Person, Action or Result first when you can: those answer at once.
Why some lines have no address
The website sends a member's address only while it serves their browser. Timed jobs send none, so FMS keeps none, rather than the website's own. Archive visits have no address, because the archive asks FMS from its own server.
Sandboxes
Audit shows the environment you are in. Tick Every environment to see sandbox work too. Lines stay when a sandbox is reset or deleted.
After a restore
Restoring the live database from a backup also puts Audit back to that backup. Changes made after the backup was taken are gone from Audit. See the runbook before restoring.