Users, roles and plans
Who changed what?
The change log records changes with person, time and action, plus the security of user accounts, for example who switched off two-step verification or suspended someone’s access. It is visible to the Admin role; each entry is kept for 180 days.
How do I check who changed a setting?
- Changes to websites, keys, campaigns, settings and users.
- The security of user accounts: two-step verification on and off, suspension and reinstatement, requested and completed password resets. If a person belongs to several tenants, the event appears in each.
- Privacy requests including their execution.
- Support grants issued and ended.
- Not in your tenant’s log are the reading of reports and failed sign-ins.
- Each entry is kept for 180 days and deleted afterwards. The log contains people and times; keeping it indefinitely would be more than the record needs.
In the portal it sits under “Change log”, in the “More administration” group. Every row names the time, the action, the person and, where one was given, the reason; if an event concerns a person, “Affects” names them. Support access to your account is marked as such. A password reset link is sent by the system, so it appears under “System”: anyone who knows the address can request one.
Note
For agencies the log is useful in the client relationship too: it answers who changed a setting without anyone having to remember.
Last reviewed on 12 Oct 2026
In the customer portal
Also asked
- Audit log
- Who rotated the key?
- Traceability
- Who switched off two-factor authentication?
- Who suspended the access?
- How long is the change log kept?
Related articles
- Which roles exist and what may they do?
Who is allowed to do what in the portal?
There are three roles inside a tenant (Admin, Analysis and Read only) plus two platform-side roles. Every API route checks the permission server-side; hiding things in the interface is only the display of that.
- Can support see my data?
Who at Metrunio has access to my account?
Only while “Allow support access” is switched on in your settings; it is on by default. Support can then read and run diagnostics with a time-limited, justified grant, but cannot change data. If you switch it off, any running access ends immediately and no new one is possible.
- How do I handle access, deletion and objection?
A data subject exercises their rights. What do I do?
Privacy requests are handled in the portal under “Privacy”, not by ticket. Every request is recorded and logged in the change log; the data subject is located through a pseudonymous identifier.