For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt, and this page is available as Markdown at https://www.jumpserver.com/docs/roles/auditor.md.
🎉 JumpServer v5.1.1 is available. See what's new →
  • v5

    • Auditor Guide

    Enterprise Edition

    Audit reports require JumpServer Enterprise Edition. Raw session and log evidence remains available according to your deployment configuration.

    Request 14-day free trial

    Auditors review evidence without changing platform configuration. System Auditor works across organizations; Organization Auditor reviews only the organization where the role is assigned. See Role Model for how the role layers combine.

    Auditor roles

    RoleScopeWhat it grants
    System AuditorSystemAudits module across organizations
    Organization AuditorOrganizationAudits within one organization

    Both roles are read-oriented. Neither role grants Console administration, PAM automation, or System Settings by default.

    What auditors review

    Sessions

    Activities

    Jobs and tickets

    Reports

    System Auditor

    System Auditor can review audit evidence across organizations and is intended for platform-wide compliance and investigation work. Use the organization selector and the Audits dashboard to narrow the view; the role itself is not limited to one organization.

    Organization Auditor

    Organization Auditor reviews the same evidence, but only for the organization where the role is assigned. Switch organizations to review a different scope, provided the user also holds a role there.

    Common tasks:

    1. Open Audits > Dashboard and select the time range.
    2. Open Sessions > Asset Sessions to replay or download a recording.
    3. Open Activities to correlate login, operation, and password-change events.
    4. Open Reports when a summarized export is required.

    Read-only context

    System Auditor may also see read-only user and asset references needed to interpret audit records. These are context views, not administration pages. Organization Auditor is intended to stay within Audits for the assigned organization.

    Assigning auditor roles

    1. Assign System Auditor on the user's system roles for cross-organization auditing.
    2. Invite the user to an organization with Organization Auditor for scoped auditing.
    3. Confirm the user can see the expected sessions and logs after switching to the target organization.