HERE’S WHY
When managing multiple workspaces in Drata, some system events are only applied to those specific workspaces, or business units. For example, you may want to find a specific failed test for Workspace A vs Workspace A, B, and C.
Additionally, it's imperative that users with the ‘Workspace Manager’ role have access to raw test results through the Event Tracking page for their specific workspace(s).
BEFORE DIVING IN
You must have an Admin, Information Security Leads, or Workspace Manager role
You cannot have the Risk Manager role
Some events and ‘Categories’ on the Event Tracking page will remain ‘company-wide’ as they are not applicable to be specific to a single workspace.
HERE’S HOW
As one of the system roles listed above, users are able to navigate to the Event Tracking page as they normally would. Workspace Managers, also have access to this section of the application. As mentioned above, there will be certain events and ‘Categories’ that will be ‘workspace-aware’. Examples are given below:
Workspace Example
Event Tracking: Reviewing a failed test event for a Workspace
Authorized users will be able to view specific events for their workspace and download raw evidence as needed
Company-wide Example
Event Tracking: Reviewing an event where a Policy was created for the company
Workspace-aware Categories
Below you will find a list of workspace-aware categories that you should find specific to the workspace you are in. Categories are the first filter that you can use to filter out specific event categories on the Event Tracking page.
Autopilot
⚠️ Important Note: The Autopilot Category can have both company-wide and workspace-aware events. The events that are workspace-aware are Event Types that have to do anything with Tests (E.g. a failed Test)
Monitor
Audit
Report
GRC
Custom Frameworks
ℹ️ Note: Events that have the categories that are workspace aware, but auditor logs are not. This includes an Auditor logging into the platform directly or when they are granted other accesses with Auditor View.
Sorting
Sorting will remain the same and consistent across all workspaces. The ‘Timestamp’ column will be used to sort events with the most recent event displayed at the top.