Introduction
The Activity tab under Workspace is the audit record for workspace-level events: sign-ins, tag changes, and changes to custom fields, team, and permissions. It's the global Activity record, filtered to your workspace.
For the full feature, including the global table and the other scoped views, see Activity.
Workspace Activity
Go to Workspace → Activity. Entries are grouped by date: Today, Yesterday, then individual dates. Entries with a chevron expand to show detail.
Entries read like:
"Level Team signed in via 2FA"
"Level Team applied tag RAT to Avengers"
"Level Team removed tag JACOB from Avengers"
"Level Team created tag NO REBOOT"
💡 TIP: Filter Workspace Activity to sign-in events when you're reviewing access during a security check. To see access events across the whole organization in one table, use the global Activity page, add the Category filter, and select Access.
FAQ
Why do tag changes show up here and also on a device? Workspace Activity records the tag event at the workspace level. The same event appears in the affected device's Activity, scoped to that device. Same event, two scopes.
Who can see Workspace Activity? Technicians who can reach the Workspace section. The records are scoped to what their permissions allow. See Workspace → Permissions.