---
title: "Access Logs"
description: "The record of every access decision: who asked, for which resource, and whether it was allowed or denied."
canonical: "https://docs.cm.com/governance/guides/audit-logs/access-logs"
---

# Access Logs

> The record of every access decision: who asked, for which resource, and whether it was allowed or denied.

Source: https://docs.cm.com/governance/guides/audit-logs/access-logs

The access log records each access decision Governance makes: who asked, what for, and whether it was allowed or denied.

## What each entry shows

| Field | Meaning |
| - | - |
| Time | When the decision was made. |
| Principal | The user, team or token that asked. |
| Application | The application the request was for. |
| Permission | What was requested. Shown without its namespace prefix. |
| Decision | Allowed or denied. |

## Use it to

- See who asked for what, and whether it was allowed or denied. To understand a decision, see [How access decisions work](https://docs.cm.com/governance/guides/how-access-decisions-work).

## Good to know

- You need the Governance **Editor** permission to view it.
- Entries are kept for 3 months. See [Data retention](https://docs.cm.com/governance/guides/data-retention).

## Related

- [View access and change logs](https://docs.cm.com/governance/guides/customers/view-logs)
- [Change logs](https://docs.cm.com/governance/guides/audit-logs/change-logs)