Access History
Access Prerequisites
- Permission (module):
manageRoles - License/Feature: None
- Menu container: GENERAL → Audit group
What it is / when to use
The Access History screen (/manage-access) lists the login and logout records of platform users. Each row shows who accessed, when they logged in, and when they logged out, allowing you to monitor session activity and identify suspicious access attempts.
Use this screen in internal/external audits, in investigations of possible account compromise (ATO — account takeover), and as input for behavioral anti-fraud of administrators (detection of access outside business hours or from a new IP).
Prerequisites
- Permission:
manageRolesmodule registered for the operator's role (remember: permission is dual — CPM enum on the backend + dynamic module in the DB; both must exist for the item to appear). - License/Feature: none required.
- Dependencies on other screens: none. The history is fed automatically on every login/logout in the AuditService.
Step by step
- Go to the GENERAL → Audit → Access History menu.
- The list loads automatically with all recorded accesses (the embedded guide button — book icon — opens contextual help).
- Use the search field to filter by the user's e-mail (filter applied on the client side, over the already-loaded list).
- Click the view icon (eye) on a row to open the corresponding User Details page (
/users/informations/details?userEmail=...).
Filters and columns
| Filter / Column | What it shows | Data source |
|---|---|---|
| User search | Filters the loaded list by the typed e-mail (case-insensitive, substring match) | Local filter over originalList, does not re-query the backend |
| User (e-mail) | E-mail of the account that performed the access | email from the access record (AuditService) |
| Login | Date/time of login | login from the record |
| Logout | Date/time of logout (empty if the session was still open or expired without an explicit logout) | logout from the record |
| Action (eye) | Opens user details | Navigates to /users/informations/details passing userEmail |
Actions and modals
- View user (eye icon): redirects to the User Details screen, already filtered by the row's e-mail. Useful for inspecting KYC, status, and account movements starting from a suspicious access.
- Embedded guide (book icon): opens the troubleshooting modal with contextual help (
helpGuide.accessHistory).
Business rules / cautions
Attention
- The user search is local: it filters only what has already been loaded on the current page. For large volumes, scroll/paginate the list before concluding that a user "did not access."
- An empty logout field does not mean the session is still active — it may indicate token expiration without an explicit logout.
- Security use: the access history is input for the administrator anti-fraud engine (rules such as
isAdminFromNewIPOrASNandisAdminOutsideWorkHours). Anomalous accesses may generate alerts in Audit Alerts.