Account admins can view a log of account activity — including login events, SCIM changes, group creations, and bulk imports — from the Security Audit tab in Company Settings. When complete, the log is visible on screen or downloaded as a CSV file.
Before You Begin
- You must have Account Admin access to reach Company Settings.
View the Security Audit Log
- Click Settings in the bottom-left corner of your 15Five account.
- Click Company settings in the dropdown menu.
- Click the Security Audit tab in the top navigation.
> The tab displays login events, SCIM changes, group creations, bulk imports, and other account-level action events.
- To view events for one person, click their name in the log.
- Confirm the log filters to show only that person's events.
The task is complete when the Security Audit tab is visible and populated with account events.
Download the Enhanced Security Log
- Copy the current page URL from your browser's address bar.
- Add
?format=csvto the end of the URL and press Enter. - Confirm a CSV or Excel file downloads automatically to your device.
- Open the file to view additional detail for each security audit event.
If Something Goes Wrong
| Issue | Check | Fix |
|---|---|---|
| Security Audit tab is not visible | Confirm your account has the Account Admin role | Ask your account admin to grant you Account Admin access — see Account Admin capabilities in 15Five — Feature Overview |
| Clicking a person's name does not filter the log | Confirm you clicked the person's name link, not another row element | Click directly on the person's name text in the log |
| No events appear in the log | Confirm the account has had activity since the log was last cleared | Contact 15Five Support if the log remains empty after confirmed activity |
CSV file does not download after adding ?format=csv
|
Confirm the URL ends in ?format=csv with no trailing spaces or characters |
Remove any extra characters, ensure no existing query string is present, and reload |
Not Covered Here
This article does not cover SSO configuration, password settings, or SCIM provisioning. See Set up SAML Single Sign-On (SSO) in 15Five and Configure SCIM provisioning with Azure AD.