Maintaining the security and integrity of your PayMongo account is paramount, especially when multiple team members have access. The Security Logs module serves as a vital tool for Account Owners and designated managers, providing a detailed audit trail of significant actions performed within your account. This article will guide you through understanding what Security Logs are, how to access and navigate them, and the various events and actions that are recorded to help you monitor activity, lower risk, and enhance accountability.
What are Security Logs and Why are they Important?
The PayMongo Security Logs module is a dedicated feature designed to enhance the security and accountability of your PayMongo account. It functions as an audit log, recording specific security-related actions and events performed by users within your dashboard.
Purpose:
Lower Risk: By providing visibility into user activities, it helps identify suspicious or unauthorized actions.
Enhance Security: Acts as a deterrent for misuse and aids in investigating security incidents.
Improve Accountability: Clearly shows which team member performed a specific action, along with the date and time.
Monitor Operations: Offers insight into significant changes or activities within your account, especially beneficial when adding new team members.
Information Recorded: For each logged event, you can typically see:
The "Event/Action Name": What specific action was performed (e.g., "Created a link," "Edited the bank information").
The "Date and Time": When the event occurred.
The "Email of Team Member": Which user's email address is associated with the action.
Who Can Access the Security Logs Module?
Access to the Security Logs module is restricted to ensure sensitive audit information is viewed only by authorized personnel:
Account Owner: The primary individual who created the PayMongo account automatically has full access to Security Logs.
Users with "Manage User" Role: Any team member who has been granted the "Manage users" permission will also have access to view the Security Logs.
Accessing and Navigating the Security Logs Module
Accessing your Security Logs is straightforward from your PayMongo Dashboard:
Log in to your PayMongo Dashboard using an Account Owner or "Manage user" role.
Navigate to the 'Security Logs' tab in the sidebar menu. Click on it to open the module.
Viewing Logs: The module will display a list of recorded events. You can typically:
Sort by date and time to see the most recent activities.
Filter by specific event types or by the email of a team member (if such options are available in the UI) to narrow down your search for specific activities.
Note: While in ongoing development, not all actions may be viewable in the test environment. For comprehensive logging, always refer to your live account's Security Logs.
Comprehensive List of Logged Events and Actions
The Security Logs module records a wide array of significant actions performed across various functionalities within your PayMongo account. This list helps you understand what activities are being tracked:
Links:
Created a link
Unarchived a link
Archived a link
Pages:
Created a page
Edited a page URL
Edited a page type
Edited a page's products
Edited a page image
Edited a page description
Edited a page's custom fields
Edited a page's accepted payment methods
Deleted a page
Payments:
Exported payments (both via the payments module and reports overview)
Refunded a payment
Payouts:
Exported payouts
Changed the payout generation schedule
Settings:
Edited their user info (e.g., password, personal details)
Edited their email
Changed their password
Edited the bank information
Team members (User Management related):
Invited a team member
Resent an invite
Deleted an invite
Edited a team member's permissions
Deleted a team member
Joined (accepted invite - when a team member accepts an invitation)
Joined (created organization - for the initial account owner creation)