Read the admin ledger

GET

/api/admin/ledger

Maintainer:Not configured

OperationId:list_admin_ledger

Returns a page of recorded administrative acts, newest first, on exactly one axis. subject (<kind>:<uuid>, e.g. kb_resources:<uuid>) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them except grant acts on someone else's personal context or a resource homed in one, a caller who may administer grants on the subject reads its grant acts, and an owner or maintainer of a team (kb_teams:<uuid>) reads that team's membership changes, the linking or detaching of its child teams, its lifecycle acts (created, deleted, restored, renamed, auto-join changed), and the public-within records that name it as the opened team or the anchor (opened, closed, lapsed, a change of effect, a change of its forbid) (on the gating team and temper-system, only a system admin does). actor returns the acts a profile performed: any caller may read their own, and only a system admin may read another's, without the grant acts that fall in someone else's personal space. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. epoch is when recording began; acts before it were not recorded. limit defaults to 50 and is capped at 200.

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Query Params

Header Params

Responses

🟢200OK

application/json

A page of ledger entries, with the ledger epoch

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

Request Example

Shell

JavaScript

Java

Swift

curl --location '/api/admin/ledger?subject=undefined&actor=undefined&limit=undefined&offset=undefined' \
--header 'X-Temper-Surface;' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Example 1

{
    "entries": [
        {
            "actor_handle": "string",
            "actor_profile_id": "376d854c-e930-4f12-b9bb-72095930fe08",
            "correlation_id": "807686c4-116c-44b3-a01c-b14b50e31bcc",
            "event_id": "a7a26ff2-e851-45b6-9634-d595f45458b7",
            "event_type": "string",
            "occurred_at": "2019-08-24T14:15:22.123Z",
            "payload": null,
            "references": [
                {
                    "rel": "supersedes",
                    "target": {
                        "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                        "kind": "kb_contexts"
                    }
                }
            ]
        }
    ],
    "epoch": "2019-08-24T14:15:22.123Z"
}

Modified at 2026-11-07 17:38:26

Remove a SAML group mapping

List connections