> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt.

# Auditor Guide


Enterprise Edition

**Audit reports** require JumpServer Enterprise Edition. Raw session and log evidence remains available according to your deployment configuration.

[Request 14-day free trial](https://www.jumpserver.com/free-trial)

Auditors review evidence without changing platform configuration. **System
Auditor** works across organizations; **Organization Auditor** reviews only the
organization where the role is assigned. See [Role Model](https://www.jumpserver.com/docs/roles/role-model.md) for
how the role layers combine.

## Auditor roles

| Role                 | Scope        | What it grants                     |
| -------------------- | ------------ | ---------------------------------- |
| System Auditor       | System       | Audits module across organizations |
| Organization Auditor | Organization | Audits within one organization     |

Both roles are read-oriented. Neither role grants Console administration, PAM
automation, or System Settings by default.

## What auditors review

### Sessions

- [Asset Sessions](https://www.jumpserver.com/docs/features/audits/sessions/asset-sessions.md) — online and historical sessions, replay, and download
- [Session Commands](https://www.jumpserver.com/docs/features/audits/sessions/session-commands.md)
- [File Transfer](https://www.jumpserver.com/docs/features/audits/sessions/file-transfer.md)
- [Online Devices](https://www.jumpserver.com/docs/features/audits/sessions/online-devices.md)

### Activities

- [Login Logs](https://www.jumpserver.com/docs/features/audits/activities/login-logs.md)
- [Password Change Logs](https://www.jumpserver.com/docs/features/audits/activities/password-change-logs.md)
- [Operate Logs](https://www.jumpserver.com/docs/features/audits/activities/operate-logs.md)

### Jobs and tickets

- [Job Audits](https://www.jumpserver.com/docs/features/audits/jobs/job-audits.md)
- [Job Executions](https://www.jumpserver.com/docs/features/audits/jobs/job-executions.md)
- [Tickets Audit](https://www.jumpserver.com/docs/features/audits/tickets.md)

### Reports

- [User Reports](https://www.jumpserver.com/docs/features/audits/reports/user-reports.md)
- [Asset Reports](https://www.jumpserver.com/docs/features/audits/reports/asset-reports.md)
- [Account Reports](https://www.jumpserver.com/docs/features/audits/reports/account-reports.md)

## System Auditor

System Auditor can review audit evidence across organizations and is intended
for platform-wide compliance and investigation work. Use the organization
selector and the Audits dashboard to narrow the view; the role itself is not
limited to one organization.

- [Audits Dashboard](https://www.jumpserver.com/docs/features/audits/dashboard.md)
- [Audits module](https://www.jumpserver.com/docs/features/audits/index.md)

## Organization Auditor

Organization Auditor reviews the same evidence, but only for the organization
where the role is assigned. Switch organizations to review a different scope,
provided the user also holds a role there.

Common tasks:

1. Open **Audits > Dashboard** and select the time range.
2. Open **Sessions > Asset Sessions** to replay or download a recording.
3. Open **Activities** to correlate login, operation, and password-change events.
4. Open **Reports** when a summarized export is required.

## Read-only context

System Auditor may also see read-only user and asset references needed to
interpret audit records. These are context views, not administration pages.
Organization Auditor is intended to stay within Audits for the assigned
organization.

## Assigning auditor roles

1. Assign **System Auditor** on the user's system roles for cross-organization auditing.
2. Invite the user to an organization with **Organization Auditor** for scoped auditing.
3. Confirm the user can see the expected sessions and logs after switching to the target organization.