Target tenant id. Admins may filter by any tenant; other callers are always restricted to their own tenant and its children.

Target user id (Cognito sub); stable across username reuse. Use this to pull one user's full history, including after they are deleted and the name is reused.

Target username

Target email

Actor username (who performed the action)

Action type