Get Subprofile User Activity

Returns a paginated list of audit log entries for a specific subprofile (authorized user) associated with a business customer account. Each entry records an action taken, its details, the prior value before the change, and the actor who performed it. This endpoint is useful for compliance auditing, support investigations, and monitoring access or configuration changes made by or to authorized users.

Endpoint

GET /api/subProfiles/USERID/activity

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token} Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Use this endpoint when a business account owner or administrator needs to review the activity history of an authorized user, such as after a suspected unauthorized change or as part of a periodic compliance review. It is also useful for support teams investigating disputes or configuration discrepancies related to a specific subprofile, financial account, payment card, or spend rule.

Path Parameters

Query Parameters

Allowed values for auditType:

• AdminPanel_ModuleAccess
• AdminPanel_Localization
• AdminPanel_UserAccess
• AdminPanel_FAQ
• AdminPanel_TicketTopic
• AdminPanel_MCC
• Teams_Department
• Teams_Subprofile
• Teams_Subprofile_Restore
• Teams_Subprofile_Department
• Teams_Subprofile_Address
• Teams_Subprofile_Phone
• Teams_Subprofile_FinancialAccount
• Teams_Subprofile_PaymentCard
• PaymentCard
• PaymentCard_Name
• PaymentCard_Pin
• PaymentCard_Status
• PaymentCard_Order
• FinancialAccount
• SpendRules_AmountLimits
• SpendRules_AmountLimitMonthly
• SpendRules_AtmDailyLimit
• SpendRules_MerchantCategory
• SpendRules_MerchantCategory_Blocked
• SpendRules_MerchantCountry
• SpendRules_MerchantCountry_Blocked
• SpendRules_Detach
• SpendRules_Detach_All

Response

200 OK

Returns an array of audit log activity objects.

[
  {
    "createdDate": "2024-11-15T10:32:00Z",
    "action": "Teams_Subprofile_PaymentCard",
    "details": "Payment card XXXX-XXXX-XXXX-4321 attached to subprofile",
    "oldValue": null,
    "user": "[email protected]"
  },
  {
    "createdDate": "2024-11-14T08:15:00Z",
    "action": "SpendRules_AmountLimits",
    "details": "Daily spend limit updated to $500",
    "oldValue": "$200",
    "user": "[email protected]"
  },
  {
    "createdDate": "2024-11-13T14:05:00Z",
    "action": "PaymentCard_Status",
    "details": "Card status changed to Suspended",
    "oldValue": "Active",
    "user": "[email protected]"
  }
]

Error Codes

Common Mistakes

• Providing a dateFrom value that is later than dateTo will return an empty result set rather than an error — always verify the date range is logically ordered.
• The userId refers to the subprofile's internal numeric ID, not a username or email address; using any other identifier type will result in a 404 or incorrect results.
• Omitting both skip and take returns up to the default of 100 records — for accounts with a long audit history, use pagination to retrieve all entries.
• The auditType filter is case-sensitive; use the exact enum string values listed above.
• Tokens expire after 10 minutes — refresh via POST /api/auth/refresh before making calls if the token may have expired.

Related Endpoints

• GET /api/subProfiles — List all subprofiles for a business account
• GET /api/subProfiles/USERID — Retrieve details for a specific subprofile
• POST /api/subProfiles — Create a new authorized user (subprofile)
• PUT /api/subProfiles/USERID — Update an existing subprofile

Example

curl -X GET "https://api.banking.netevia.dev/api/subProfiles/4821/activity?dateFrom=2024-11-01T00%3A00%3A00Z&dateTo=2024-11-30T23%3A59%3A59Z&auditType=PaymentCard_Status&skip=0&take=50" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json"