View protected activity-log data
How the special decrypt permission reveals protected audit values.
Reading an Activity Log does not grant access to its encrypted personal or sensitive values. Decryption requires the separate Decrypt Activity Log permission.
Decrypt a log
- Open the Activity Log detail with Read Activity Log.
- Confirm that protected values are necessary for the investigation and that the case permits access.
- Select Decrypt Protected Data.
- Review the decrypted before/after, diff, metadata, and custom fields only for the authorized purpose.
The server checks Decrypt permission independently even when the UI shows the button. A decryption request is itself written synchronously as a high-sensitivity Activity Log before the protected response is returned. A failed or denied decrypt attempt is also auditable.
Do not copy decrypted data into tickets, messages, or exports unless the same data-handling authority applies there. Leaving the detail or reloading without the decrypt request returns to the protected representation.