How can I review activity and audit logs of users in FYI?

Practices can review user and document activity directly in FYI by filtering the relevant lists for specific users and dates. This helps identify document edits, exports, deletions, and device registrations associated with each user.

When reviewing activity, there are three main workspaces to consider:

• Practice Activity
• Documents
• Devices

Practice Activity

Practice Activity allows FYI Admins or users with Activity permissions to review overall user activity across your platform. This assists with identifying when exports or key list actions have occurred, which can assist with investigating data access or monitoring compliance within your practice.

1. Navigate to Practice Activity.
    
2. Apply filters to narrow results by User and Date.
    
3. Review any lists that have been exported as CSV. These will show when an export occurred, but not the specific data exported.

Note: If you find an export that appears unauthorised, contact FYI Support with the relevant user and date details.

Refer to Practice Activity for detailed information.

Documents

Review the Documents list to track any edits, report runs or deletions made by specific users.

1. Navigate to the Documents list in FYI.
    
2. Apply filters to review by User and Create Date.
3. Check for any document edits.
   Tip: For Practices on the Elite plan, check reports that have been run. For example, client or job reports.
    
4. Open the Deleted view to check if documents have been deleted.
   Tip: An FYI Admin can view all deleted documents for the practice.
    
5. Filter again by User and Modification Date to track changes.

Note: FYI tracks document and client activity practice-wide, including views and downloads. This information is currently available in the document or client activity log. This feature is being considered as a future enhancement to provide more detailed audit insights across the practice.

For detailed information on reviewing documents, refer to Viewing Activity on a Document and Deleting Documents and Recovering Deleted Documents.

Devices

FYI Admins can check the Devices workspace in Practice Settings to monitor which devices have been registered to user accounts. Reviewing this list regularly helps detect unfamiliar or suspicious registrations and supports your practice's data security processes.

1. Navigate to Practice Settings - General. Click the Devices tab.
    
2. Filter by User and Registered Date.
    
3. Review any registered devices during the selected date range.
    
4. For any suspicious entries, use your Microsoft Entra account to check the device IP address.

Refer to Managing Devices for detailed information.