Administration

Change Allowed Authentication Methods

When the allowed authentication methods are modified.

json

{
  "eventType": "administration.account.appSettings.identityManagement.changeAllowedAuthenticationMethods",
  "allowedMethods": List["apple" | "google" | "internal" | "microsoft" | "password" | "salesforce" | "saml" | "slack" | "unknown"]
}

Change Preferred Authentication Method

When the preferred authentication method is modified.

json

{
  "eventType": "administration.account.appSettings.identityManagement.changePreferredAuthenticationMethod",
  "preferredMethod": "apple" | "google" | "internal" | "microsoft" | "password" | "salesforce" | "saml" | "slack" | "unknown"
}

Change Domain Control Policy

When the domain control verification policy is modified.

json

{
  "eventType": "administration.account.appSettings.identityManagement.changeDomainControlPolicy",
  "domainPolicy": {
    "type": "email" | "google" | "microsoft" | "saml" | "unknown"
  } | {
    "type": "redirect",
    "uri": string
  },
  "allowedDomains": List[string]
}

Change Lucid AI

When the setting to enable or disable Lucid AI is modified.

json

{
  "eventType": "administration.account.lucidAi",
  "groupId": number | null,
  "change": {
    "newValue": "disabled" | "enabled" | null,
    "oldValue": "disabled" | "enabled" | null
  }
}

Change MCP Access

When the setting to enable or disable MCP access is modified.

json

{
  "eventType": "administration.account.mcpAccess",
  "groupId": number | null,
  "change": {
    "newValue": "disabled" | "enabled" | null,
    "oldValue": "disabled" | "enabled" | null
  }
}

Change Sharing Via Email

When the setting to restrict sharing documents or folders via an email invitation is modified.

json

{
  "eventType": "administration.account.sharingViaEmail",
  "change": {
    "newValue": "restrictToDomains" | "unrestricted" | "warnOnExternalDomains" | null,
    "oldValue": "restrictToDomains" | "unrestricted" | "warnOnExternalDomains" | null
  }
}

User Joined Account

When a user joins an account through any method, including JIT provision, SCIM, domain lockdown gather, admin invitations, and user requests.

json

{
  "eventType": "administration.account.userJoinedAccount"
}

User Removed From Account

When a user is removed from the account. This event may be triggered through the admin panel, by Lucid support, or through SCIM when updating a user’s account ID. This event is not logged when a user is deleted.

json

{
  "eventType": "administration.account.userRemovedFromAccount"
}

New User Created

When a user is created for an account through the admin panel, by Lucid support, through SCIM, or JIT provisioning.

json

{
  "eventType": "administration.account.newUserCreated",
  "registrationMethod": "accepted team invite" | "added by sso domain lockdown" | "added manually by admin" | "added through an integration" | "added through individual sso" | "added through saml" | "added through scim" | "domain lockdown" | "lucid support" | "new account created by user" | "unknown source"
}

Update User Role

When a new account role is added to a user.

json

{
  "eventType": "administration.user.updateUserRole",
  "role": "account-owner" | "billing-admin" | "developer" | "document-admin" | "enterprise-shield-admin" | "group-admin" | "organizational-group-admin" | "team-admin" | "team-manager" | "template-admin" | "unknown-role"
}

Delete User Role

When an account role is removed from a user.

json

{
  "eventType": "administration.user.deleteUserRole",
  "role": "account-owner" | "billing-admin" | "developer" | "document-admin" | "enterprise-shield-admin" | "group-admin" | "organizational-group-admin" | "team-admin" | "team-manager" | "template-admin" | "unknown-role"
}

User Deleted

When a user is deleted.

json

{
  "eventType": "administration.user.userDeleted"
}

User Delicensed

When a license for a product is removed from a user.

json

{
  "eventType": "administration.user.userDelicensed",
  "product": "chart" | "lucidscale" | "spark"
}

User Deactivated

When a user is deactivated.

json

{
  "eventType": "administration.user.userDeactivated"
}

Bulk Document Restoration

When an account has documents restored through Document Discovery.

json

{
  "eventType": "administration.document.bulkDocumentRestoration",
  "documentIds": List[string]
}

Reset Password

When an admin updates a user’s password.

json

{
  "eventType": "administration.user.resetPassword",
  "userId": number,
  "adminId": number
}

Force Logout and Password Reset

When an admin ends all active sessions for every user on the account and forces email/password users to reset their password.

json

{
  "eventType": "administration.account.forceLogoutAndPasswordReset"
}

Generate User Access Pin

When a user generates a technical support PIN to give a Lucid support agent access to their Lucid account.

json

{
  "eventType": "administration.user.generateUserAccessPin",
  "expiration": timestamp
}

Generate Account Documents Access Pin

When an admin generates an account-wide support PIN to give a Lucid support agent access to all documents associated with the account.

json

{
  "eventType": "administration.account.generateAccountDocumentsAccessPin",
  "expiration": timestamp
}

Generate Account Access Pin

When an admin generates an account-wide support PIN to give a Lucid support agent access to all users associated with the account.

json

{
  "eventType": "administration.account.generateAccountAccessPin",
  "expiration": timestamp
}

License Granted

When a license is granted to a user.

json

{
  "eventType": "administration.account.licenseGranted",
  "product": "chart" | "lucidscale" | "spark",
  "method": "account consolidation" | "account created" | "added by lucid support" | "approved account join request" | "auto license setting changed" | "autogranted on join" | "autogranted on request" | "billing point changed" | "granted through scim" | "manually granted by admin" | "org group changed" | "request approved by admin" | "unknown method" | "was setup in dev"
}

Auto-Purchase Licenses

When the setting to automatically purchase licenses is toggled on or off.

json

{
  "eventType": "administration.account.autoPurchaseLicenses",
  "change": {
    "newValue": "disabled" | "enabled" | null,
    "oldValue": "disabled" | "enabled" | null
  }
}

License Access

When the setting for license access is modified.

json

{
  "eventType": "administration.account.licenseAccessSetting",
  "productBundle": "coreBundle" | "lucidchart" | "lucidscale" | "lucidspark",
  "change": {
    "newValue": "automaticallyApprove" | "instantAccess" | "manuallyApprove" | "manuallyApproveAfterThreshold" | "manuallyApproveUnlessLicenseAvailable" | null,
    "oldValue": "automaticallyApprove" | "instantAccess" | "manuallyApprove" | "manuallyApproveAfterThreshold" | "manuallyApproveUnlessLicenseAvailable" | null
  }
}

Licenses Purchased

When the license quantity for an account increases.

json

{
  "eventType": "administration.account.licensesPurchased",
  "licensesPurchased": number,
  "licenseSku": string
}

Licenses Removed

When the license quantity for an account decreases.

json

{
  "eventType": "administration.account.licensesRemoved",
  "licensesRemoved": number,
  "licenseSku": string
}

KMS Break Glass Key Used

When a KMS (Key Management Service) break glass key is used.

json

{
  "eventType": "administration.account.kmsBreakGlassKeyUsed",
  "InitiatorIpAddress": string,
  "OperationSuccessful": boolean
}

Repository Setting Changed

When a repository setting changes.

json

{
  "eventType": "administration.account.repositorySettingChanged",
  "setting": "AllowViewersToDirectPublish" | "CustomApproversEnabled" | "SequentialApprovalFlow",
  "newValue": string
}

Repository Approval Request Modified

When a reviewer is added to or removed from a repository approval request.

json

{
  "eventType": "administration.account.repositoryApprovalRequestModified",
  "action": "addedReviewer" | "removedReviewer",
  "approvalRequestId": string,
  "reviewerType": "oneTimeReviewer" | "persistentReviewer" | "roleBasedReviewer",
  "actingUserRole": "Accelerator Manager" | "Account Admin" | "Account Owner" | "Asset Owner" | "Folder Owner" | "Repository Owner" | "User"
}

Accelerator Setting Changed

When an accelerator setting changes.

json

{
  "eventType": "administration.account.acceleratorSettingChanged",
  "setting": "AllowAnyUserToCreateRepository",
  "change": {
    "newValue": string | null,
    "oldValue": string | null
  }
}

Custom Infotypes Changed

When the custom information types configured for an account change.

json

{
  "eventType": "administration.account.customInfotypesChanged",
  "newInfotypes": List[string],
  "oldInfotypes": List[string]
}

Edited Repository Role

When an accelerator manager, repository owner, folder owner, or asset owner role is granted or revoked.

json

{
  "eventType": "administration.repositories.editedRole",
  "action": "Granted" | "Revoked",
  "role": "Accelerator Manager" | "Account Admin" | "Account Owner" | "Asset Owner" | "Folder Owner" | "Repository Owner" | "User"
}