Setup Audit Trail
Key Takeaway
Setup Audit Trail shows who changed what in Setup, and when. It logs configuration changes, not changes to the values of fields on records, and its history goes back 180 days.
Setup Audit Trail is a log of the recent configuration changes that you and other admins make in Setup, such as changes to profiles, permission sets, fields, and security settings. For each change, it records when the change happened, who made it, and what changed. It helps most when several admins work in the same org, or when you need to find out who made a risky or unexpected change.
What Setup Audit Trail tracks
Setup Audit Trail tracks changes across most of Setup. Examples include:
- Users, roles, profiles, and permission sets, including permission set assignments
- Object permissions, field-level security, and "View All Data" or "Modify All Data" on profiles
- Custom fields, page layouts, and validation rules
- Sharing rules and org-wide sharing
- Password policies and password resets
- Flows, approval processes, and Apex classes and triggers
- AppExchange packages that were installed or uninstalled
Setup Audit Trail also tracks setup changes made by delegated administrators, along with changes to delegated administration groups and the items delegated administrators can manage.
Setup Audit Trail tracks session settings such as session timeout, but two profile settings are excluded: "Session times out after" and "Session security level required at login". Changes to login hours on a profile are tracked.
Setup Audit Trail tracks only some connected app and external client app policy and setting updates, so not every change to these apps will appear in the log.