# List events

Fetches events for System Admin users. This includes actions such as creating, updating, loading, deleting, and more of items such as sheets, reports, dashboards, attachments, and users in your Smartsheet organization account.

See Event types for the complete event listing, details, and example objects.

> Who can use this operation?
> 
> - Plans: Requires the Event Reporting premium add-on available for Enterprise and Advanced Work Management plans only.
> - Permissions: System Admin

> Note: You must specify exactly one of the query parameters since or streamPosition. Both are optional individually, but one is required.

Endpoint: GET /events
Version: 2.0.0
Security: APIToken, OAuth2

## Header parameters:

  - `smartsheet-integration-source` (string)
    Uses the following metadata to distinguish between human-initiated API requests and third-party service-initiated calls by AI Connectors or ITSM:

- Integration source type
- Organization name
- Integration source name 

Format:


TYPE,OrgName,SourceName


Examples: 

AI,SampleOrg,My-AI-Connector-v2

SCRIPT,SampleOrg2,Accounting-updater-script

APPLICATION,SampleOrg3,SheetUpdater
    Example: "AI,SampleOrg,My-AI-Connector-v2"

  - `Accept-Encoding` (string)
    Strongly recommended to make sure payload is compressed. Must be set to one of the following values:
* deflate
* gzip
    Enum: "deflate", "gzip"

  - `Authorization` (string)
    API Access Token used to authenticate requests to Smartsheet APIs.

## Query parameters:

  - `since` (string)
    The earliest time from which events are included in the response. Events before this time are excluded.

This parameter is required if streamPosition is not used.

The date-time value is resolved to the nearest hour. The value is interpreted as ISO-8601 format, unless numericDates is specified (see details about numericDates below).

Important: To keep event responses manageable and prevent timeouts, also specify the to query parameter.

Important: This parameter is intended for use when backfilling data at client startup or recovery--don't use it for fine-grained, date-based queries.

  - `to` (string)
    The latest time up to which events are included in the response. Events after this time are excluded.

This parameter requires using the since parameter. 

The date-time value is resolved to the nearest hour. The value is interpreted as ISO-8601 format, unless numericDates is specified (see details about numericDates below).

Logic:

- If to is a future time, the current time is used.
- If to equals the since time, an empty data value is returned.
- If to is before the since time, a validation error is returned.

Important: This parameter is intended for use when backfilling data at client startup or recovery--don't use it for fine-grained, date-based queries.

  - `streamPosition` (string)
    Indicates next set of events to return. Use value of
nextStreamPosition returned from the previous call.

This parameter is required if since is not used.
    Example: "XyzAb1234cdefghijklmnofpq"

  - `maxCount` (integer)
    Maximum number of events to return as response to this call.
Must be between 1 through 10,000 (inclusive).
Defaults to 1,000 if not specified.

  - `numericDates` (boolean)
    If true, dates are accepted and returned in Unix epoch time
(milliseconds since midnight on January 1, 1970 in UTC time).

Default is false, which means ISO-8601 format.

  - `managedPlanId` (number)
    The target managed plan for which to list events. Authorized if the
caller is a system administrator on either the target managed plan or
the main plan in EPM hierarchy.

## Response 200 fields (application/json):

  - `nextStreamPosition` (string)
    This string should be passed back to the next GET events call to obtain
subsequent events.
    Example: "XyzAb1234cdefghijklmnofpq"

  - `moreAvailable` (boolean)
    True if more results are available. This is typically due to event counts
exceeding the maxCount parameter passed in.
    Example: true

  - `data` (array) — one of:
    List of Events
    - ACCESS_TOKEN - AUTHORIZE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: "WEB_APP", "MOBILE_IOS", "MOBILE_ANDROID", "API_UNDEFINED_APP", "API_INTEGRATED_APP", "API_ODBC_DRIVER", "UNKNOWN"
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "ACCESS_TOKEN"
      - `action` (string)
        The action applied to the specified object
        Enum: "AUTHORIZE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.tokenName` (string)
        Name of the newly created access token. (Only included in cases when a name was given to the token)
        Example: "my_token"
      - `additionalDetails.tokenDisplayValue` (string)
        Four or more characters used as a mnemonic to represent this access token. Even though this value serves as a visual token differentiator, this value isn't an ID because it isn't guaranteed to be unique across all tokens. This value is the same displayed by Smartsheet UI for each access token listed under Apps & Integrations > API Access.
        Example: "AB12..."
      - `additionalDetails.tokenExpirationTimestamp` (string)
        Date and time when this access token expires.
        Example: "2026-05-24T14:15:22Z"
      - `additionalDetails.accessScopes` (string)
        Comma-delimited list of access scopes granted to this access token. See these [access scopes](/api/smartsheet/guides/advanced-topics/oauth#access-scopes) for details.
        Example: "READ_SHEETS,WRITE_SHEETS"
      - `additionalDetails.appClientId` (string)
        The client ID of the app to which this access token was granted. (Only included in cases when the access token was generated for an app)
        Example: "dheu3dmkd32fhxme"
      - `additionalDetails.appName` (string)
        The name of the app to which this access token was granted. (Only included in cases when the access token was generated for an app)
        Example: "my_app"
    - ACCESS_TOKEN - REFRESH:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCESS_TOKEN - AUTHORIZE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REFRESH"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.tokenDisplayValue` (string)
        Four or more characters used as a mnemonic to represent this access token. Even though this value serves as a visual token differentiator, this value isn't an ID because it isn't guaranteed to be unique across all tokens. This value is the same displayed by Smartsheet UI for each access token listed under Apps & Integrations > API Access.
        Example: "AB12..."
      - `additionalDetails.tokenExpirationTimestamp` (string)
        Date and time when this access token expires.
        Example: "2026-05-24T14:15:22Z"
    - ACCESS_TOKEN - REVOKE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCESS_TOKEN - AUTHORIZE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REVOKE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.tokenDisplayValue` (string)
        Four or more characters used as a mnemonic to represent this access token. Even though this value serves as a visual token differentiator, this value isn't an ID because it isn't guaranteed to be unique across all tokens. This value is the same displayed by Smartsheet UI for each access token listed under Apps & Integrations > API Access.
        Example: "AB12..."
      - `additionalDetails.tokenUserId` (string)
        The ID of the user who owns this token.
        Example: "122454719915908"
    - ACCOUNT - BULK UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "ACCOUNT"
      - `action` (string)
        The action applied to the specified object
        Enum: "BULK_UPDATE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - ACCOUNT - DOWNLOAD LOGIN HISTORY:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DOWNLOAD_LOGIN_HISTORY"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - ACCOUNT - DOWNLOAD PUBLISHED ITEMS REPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DOWNLOAD_PUBLISHED_ITEMS_REPORT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - ACCOUNT - DOWNLOAD SHEET ACCESS REPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DOWNLOAD_SHEET_ACCESS_REPORT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - ACCOUNT - DOWNLOAD USER LIST:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DOWNLOAD_USER_LIST"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - ACCOUNT - IMPORT USERS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "IMPORT_USERS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - ACCOUNT - LIST SHEETS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "LIST_SHEETS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - ACCOUNT - RENAME:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "RENAME"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newName` (string)
        New name of the organization account
        Example: "New Company Name"
      - `additionalDetails.oldName` (string)
        Previous name of the organization account
        Example: "Old Company Name"
    - ACCOUNT - UPDATE MAIN CONTACT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ACCOUNT - BULK UPDATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_MAIN_CONTACT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newContactUserId` (string)
        ID of the new main contact
        Example: "12345678901234567"
      - `additionalDetails.oldContactUserId` (string)
        ID of the former main contact
        Example: "48569348493401200"
    - AI_GOVERNANCE - ACTIVATION_CONTROL_DISABLED:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectId` (any)
        Example: -1
      - `objectIdStr` (any)
        For AI governance events, this field does not represent a meaningful object identifier.

AI governance feature flag events are not associated with a specific object ID.

This field may contain a placeholder value and should not be used for identifying
or referencing the event object.
        Example: "-1"
      - `objectType` (string)
        The name of the AI governance feature flag impacted by the event.
        Example: "AI_GOVERNANCE"
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATION_CONTROL_DISABLED"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string)
        Email address of the user who performed the action.
        Example: "admin@example.com"
      - `additionalDetails.featureName` (string)
        The name of the AI governance feature flag that was disabled.
        Example: "AI Features"
    - AI_GOVERNANCE - ACTIVATION_CONTROL_ENABLED:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectId` (any)
        Example: -1
      - `objectIdStr` (any)
        For AI governance events, this field does not represent a meaningful object identifier.

AI governance feature flag events are not associated with a specific object ID.

This field may contain a placeholder value and should not be used for identifying
or referencing the event object.
        Example: "-1"
      - `objectType` (string)
        The name of the AI governance feature flag impacted by the event.
        Example: "AI_GOVERNANCE"
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATION_CONTROL_ENABLED"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string)
        Email address of the user who performed the action.
        Example: "admin@example.com"
      - `additionalDetails.featureName` (string)
        The name of the AI governance feature flag that was enabled.
        Example: "AI Features"
    - ATTACHMENT - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "ATTACHMENT"
      - `action` (string)
        The action applied to the specified object
        Enum: "CREATE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the sheet that contains the attachment. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that directly contains the attachment. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
      - `additionalDetails.attachmentName` (string)
        Name of the attachment.
        Example: "my file"
    - ATTACHMENT - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ATTACHMENT - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DELETE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the sheet that contains the attachment. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that directly contains the attachment. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
    - ATTACHMENT - LOAD:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ATTACHMENT - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "LOAD"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the sheet that contains the attachment. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that directly contains the attachment. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
      - `additionalDetails.multiFileDownloadName` (string)
        Name of the compressed file containing the multiple attachments downloaded at once. (Only included if more than one attachment was selected to be downloaded in the same user action. Please notice that multi-attachment download action allows the user to specify the name of the zip file that should include all attachments, which is what is being provided here. The download of a single attachment uses the attachment name as the download file name and it cannot be changed, and it isn't provided in this event because it is provided in the ATTACHMENT-CREATE event or by querying Smartsheet API with the attachment ID)
        Example: "name_of_first_file.zip"
    - ATTACHMENT - SEND:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ATTACHMENT - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SEND"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.recipientEmail` (string)
        Single email address either of a user explicitly included in the recipient list or of the sender (when CC sender is requested). (This property is included only if the recipientGroupId property below isn't included)
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.recipientGroupId` (string)
        Single ID of a user group explicitly included in the recipient list. (This property is included only if the recipientEmail property above isn't included)
        Example: "4583173393803140"
      - `additionalDetails.sheetId` (string)
        ID of the sheet that contains the attachment. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that directly contains the attachment. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
    - ATTACHMENT - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "ATTACHMENT - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the sheet that contains the attachment. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that directly contains the attachment. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
    - AUTHENTICATION - ACTIVATE_DOMAIN_STRICT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "AUTHENTICATION"
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_DOMAIN_STRICT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs where domain strict is activated
      - `additionalDetails.mfaEnabled` (string)
        "true" or "false" indicating whether MFA is enabled for this policy
    - AUTHENTICATION - ACTIVATE_EMAIL_BASED_TOTP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_EMAIL_BASED_TOTP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs where email TOTP is activated
      - `additionalDetails.mfaEnabled` (string)
        "true" or "false" indicating whether MFA is enabled
    - AUTHENTICATION - ACTIVATE_MFA_EMAIL_BASED_TOTP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_MFA_EMAIL_BASED_TOTP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs affected
    - AUTHENTICATION - ACTIVATE_MFA_SYSADMIN_TOTP_FALLBACK:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_MFA_SYSADMIN_TOTP_FALLBACK"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs affected
    - AUTHENTICATION - ACTIVATE_SAML_IDP_CONFIG:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_SAML_IDP_CONFIG"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        The domains for which this policy is activated
    - AUTHENTICATION - ACTIVATE_SYSADMIN_TOTP_FALLBACK:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_SYSADMIN_TOTP_FALLBACK"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs where system admin TOTP fallback is activated
      - `additionalDetails.mfaEnabled` (string)
        "true" or "false" indicating whether MFA is enabled
    - AUTHENTICATION - ADD_SAML_IDP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_SAML_IDP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.isOkta` (string)
        "true" or "false" indicating whether this is an Okta IdP
      - `additionalDetails.displayName` (string)
        Human-readable name of the IdP
      - `additionalDetails.urlBased` (string)
        "true" or "false" indicating whether metadata is URL-based vs file-based
    - AUTHENTICATION - DEACTIVATE_DOMAIN_STRICT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_DOMAIN_STRICT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs where domain strict is deactivated
      - `additionalDetails.mfaEnabled` (string)
        "true" or "false" indicating whether MFA was enabled for this policy
    - AUTHENTICATION - DEACTIVATE_EMAIL_BASED_TOTP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_EMAIL_BASED_TOTP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs where email TOTP is deactivated
      - `additionalDetails.mfaEnabled` (string)
        "true" or "false" indicating whether MFA was enabled
    - AUTHENTICATION - DEACTIVATE_MFA_EMAIL_BASED_TOTP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_MFA_EMAIL_BASED_TOTP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs affected
    - AUTHENTICATION - DEACTIVATE_MFA_SYSADMIN_TOTP_FALLBACK:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_MFA_SYSADMIN_TOTP_FALLBACK"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs affected
    - AUTHENTICATION - DEACTIVATE_SAML_IDP_CONFIG:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_SAML_IDP_CONFIG"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        The domains for which this policy is deactivated
    - AUTHENTICATION - DEACTIVATE_SYSADMIN_TOTP_FALLBACK:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_SYSADMIN_TOTP_FALLBACK"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.domains` (string)
        Comma-separated list of FQDNs where system admin TOTP fallback is deactivated
      - `additionalDetails.mfaEnabled` (string)
        "true" or "false" indicating whether MFA was enabled
    - AUTHENTICATION - DELETE_SAML_IDP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DELETE_SAML_IDP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.displayName` (string)
        Name of the deleted IdP
    - AUTHENTICATION - LOGIN:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "LOGIN"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.loginResult` (string)
        Result of the login attempt: "success" or "failure"
      - `additionalDetails.loginMethod` (string)
        Authentication method used (e.g., "EMAIL_PASSWORD")
      - `additionalDetails.reason` (string)
        Failure reason (only included when loginResult is "failure"), e.g., "AUTH_NO_MATCHING_USER"
    - AUTHENTICATION - LOGOUT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "LOGOUT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.logoutMethod` (string)
        How the logout was initiated (e.g., "user_signout")
      - `additionalDetails.logoutResult` (string)
        Result of the logout (e.g., "success")
    - AUTHENTICATION - UPDATE_SAML_IDP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "AUTHENTICATION - ACTIVATE_DOMAIN_STRICT" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_SAML_IDP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.isOkta` (string)
        "true" or "false" (only if the Okta flag changed)
    - DASHBOARD - ADD_PUBLISH:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "DASHBOARD"
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_PUBLISH"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessibleBy` (string)
        Indicates who can use the link to view the dashboard: "ALL" (accessible to any person with the link), "ORG" (accessible only by those belonging to the org).
        Enum: "ALL", "ORG"
      - `additionalDetails.publishType` (string)
        Indicates permissions granted to users with a valid link. All dashboard publishes are read only: "read_only".
        Enum: "read_only"
      - `additionalDetails.publishFormat` (string)
        Indicates format of the published dashboard. Dashboards are published in a rich media format: "FULL",
        Enum: "FULL"
    - DASHBOARD - ADD_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_SHARE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the user. 

Note that this access level represents the access level that has been granted to the user via group membership; it is not the user's effective access level for the dashboard.
        Enum: "VIEWER", "EDITOR", "EDITOR_SHARE", "ADMIN"
      - `additionalDetails.userId` (string)
        ID of the user that was added to the group.
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group the user was added to.
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that the group is shared to. (Specific to cases where the dashboard is shared to the group via a workspace's sharing list)
        Example: "9876543210987654"
    - DASHBOARD - ADD_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_SHARE_MEMBER"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the group or user. 

Note that this access level represents the access level granted by this specific sharing action; it is not the group or user's effective access level for the dashboard.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that was added to the dashboard's sharing list. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was added to the dashboard's sharing list. (Specific to share to group actions)
        Example: "5432109876543210"
    - DASHBOARD - ADD_WORKSPACE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_WORKSPACE_SHARE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the group or user.

Note that this access level represents the access level granted by this specific sharing action; it is not the group or user's effective access level for the dashboard.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that the workspace was shared to. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that the workspace was shared to. (Specific to share to group actions)
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that was shared to the group or user.
        Example: "9876543210987654"
    - DASBHOARD - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.dashboardName` (string)
        Name of the newly created dashboard.
        Example: "2345678abc"
      - `additionalDetails.sourceGlobalTemplateId` (string)
        ID of the global template that was used to create the dashboard. (Specific to Create New actions).
        Example: "48569348493401200"
      - `additionalDetails.sourceObjectId` (string)
        ID of the source dashboard. (Specific to Save As New actions).
        Example: "48569348493401200"
      - `additionalDetails.sourceType` (string)
        The source object used to create the dashboard, currently only 'global_template' is valid.
        Example: "global_template"
    - DASHBOARD - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - DASHBOARD - LOAD:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - LOAD" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - DASHBOARD - MOVE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "MOVE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newParentContainerId` (string)
        ID of the destination folder for the move event. (Specific to actions where the dashboard was moved to a different folder).
        Example: "4365870921436587"
      - `additionalDetails.parentContainerId` (string)
        ID of the parent container of the dashboard. (Specific to move events where a folder containing the dashboard is moved to a folder in a different workspace, indicates that the dashboard has moved to a new workspace but is still within the same folder)
        Example: "3456789012345678"
      - `additionalDetails.folderName` (string)
        Name of the destination folder for the move event. (Specific to actions where the dashboard was moved to a different folder).
        Example: "Folder B"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the dashboard is currently in. If the move was between two workspaces the workspaceId will be the ID of the destination workspace.
        Example: "9876543210987654"
    - DASHBOARD - PURGE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "PURGE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - DASHBOARD - REMOVE_PUBLISH:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_PUBLISH"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - DASHBOARD - REMOVE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_SHARE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of the user that was removed from the dashboard's sharing list. (Specific to remove share from user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was removed from the dashboard's sharing list. (Specific to remove share from group actions)
        Example: "5432109876543210"
    - DASHBOARD - REMOVE_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_SHARE_MEMBER"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of user that was removed from the group.
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that the user was removed from.
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that the group is shared to. (Specific to cases where the dashboard is shared to the group via a workspace's sharing list)
        Example: "9876543210987654"
    - DASHBOARD - REMOVE_WORKSPACE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_WORKSPACE_SHARE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of the user that was removed from the workspace. (Specific to remove share from user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was removed from the workspace. (Specific to remove share from group actions)
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the group or user was removed from.
        Example: "9876543210987654"
    - DASHBOARD - RENAME:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - RENAME" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newName` (string)
        New name of the dashboard.
        Example: "New Dashboard"
      - `additionalDetails.oldName` (string)
        Previous name of the dashboard.
        Example: "Old Dashboard"
    - DASHBOARD - RESTORE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "RESTORE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - DASHBOARD - SAVE_AS_NEW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SAVE_AS_NEW"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - DASHBOARD - TRANSFER_OWNERSHIP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "TRANSFER_OWNERSHIP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldUserId` (string)
        ID of the former dashboard owner.
        Example: "12345678901234567"
      - `additionalDetails.oldAccessLevel` (string)
        New access level of the former owner: "ADMIN".
        Enum: "ADMIN"
      - `additionalDetails.newUserId` (string)
        ID of the new dashboard owner.
        Example: "21436587092143658"
      - `additionalDetails.newAccessLevel` (string)
        New access level of the new owner: "OWNER".
        Enum: "OWNER"
    - DASHBOARD - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DASHBOARD - ADD_PUBLISH" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - DISCUSSION - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "DISCUSSION"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetRowId` (string)
        ID of the sheet row containing the discussion. (this property is included only if the discussion is on a sheet row)
        Example: "7654321098765432"
      - `additionalDetails.sheetId` (string)
        ID of the sheet the discussion is on. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the discussion is directly on. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
    - DISCUSSION - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DISCUSSION - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetRowId` (string)
        ID of the sheet row containing the discussion. (this property is included only if the discussion is on a sheet row)
        Example: "7654321098765432"
      - `additionalDetails.sheetId` (string)
        ID of the sheet the discussion is on. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the discussion is directly on. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
    - DISCUSSION - SEND:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DISCUSSION - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - SEND" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.recipientEmail` (string)
        Single email address either of a user explicitly included in the recipient list or of the sender (when CC sender is requested). (This property is included only if the recipientGroupId property below isn't included)
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.recipientGroupId` (string)
        Single ID of a user group explicitly included in the recipient list. (This property is included only if the recipientEmail property above isn't included)
        Example: "345987624123"
      - `additionalDetails.sheetRowId` (string)
        ID of the sheet row containing the discussion. (this property is included only if the discussion is on a sheet row)
        Example: "7654321098765432"
      - `additionalDetails.sheetId` (string)
        ID of the sheet the discussion is on. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the discussion is directly on. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether the discussion was sent with its respective attachments.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
    - DISCUSSION - SEND_COMMENT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DISCUSSION - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SEND_COMMENT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.recipientEmail` (string)
        Single email address either of a user explicitly included in the recipient list or of the sender (when CC sender is requested). (This property is included only if the recipientGroupId property below isn't included)
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.recipientGroupId` (string)
        Single ID of a user group explicitly included in the recipient list. (This property is included only if the recipientEmail property above isn't included)
        Example: "345987624123"
      - `additionalDetails.sheetRowId` (string)
        ID of the sheet row containing the discussion. (this property is included only if the discussion is on a sheet row)
        Example: "7654321098765432"
      - `additionalDetails.commentId` (string)
        ID of the comment.
        Example: "5678901234567890"
      - `additionalDetails.sheetId` (string)
        ID of the sheet the discussion is on. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the discussion is directly on. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether the discussion comment (or discussion comment reply) was sent with its respective attachments.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
    - DISCUSSION - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "DISCUSSION - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetRowId` (string)
        ID of the sheet row containing the discussion. (this property is included only if the discussion is on a sheet row)
        Example: "7654321098765432"
      - `additionalDetails.sheetId` (string)
        ID of the sheet the discussion is on. (This property is included only if the workspaceId property below isn't included)
        Example: "6141831453927300"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the discussion is directly on. (This property is included only if the sheetId property above isn't included)
        Example: "9876543210987654"
    - FOLDER - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "FOLDER"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.folderName` (string)
        Name of the destination folder for the move event. (Specific to actions where the folder was moved to a different folder).
        Example: "Folder A"
      - `additionalDetails.sourceFolderId` (string)
        ID of folder that was copied to create the new folder. (Only included if the folder was created as a result of a save as new or copy)
        Example: "4567890123456789"
    - FOLDER - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FOLDER - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - FOLDER - EXPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FOLDER - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "EXPORT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.formatType` (string)
        The format that the folder was exported. Notice that the same value "excel" is displayed either when exporting to Microsoft Excel or when exporting to Google Sheets.
        Enum: "excel", "pdf"
    - FOLDER - RENAME:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FOLDER - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - RENAME" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldName` (string)
        Old name of the folder.
        Example: "Folder A"
      - `additionalDetails.newName` (string)
        New name of the folder.
        Example: "Folder B"
    - FOLDER - REQUEST_BACKUP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FOLDER - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REQUEST_BACKUP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether attachments should be included in the recurring backup.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
      - `additionalDetails.sendCompletionEmail` (string)
        Indicates whether an email should be sent to the workspace's owner every time a recurring backup completes.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
    - FOLDER - SAVE_AS_NEW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FOLDER - CREATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - SAVE_AS_NEW" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - FORM - ACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "FORM"
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the form's sheet.
        Example: "6141831453927300"
    - FORM - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FORM - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.formName` (string)
        Name of the form.
        Example: "Form A"
      - `additionalDetails.sheetId` (string)
        ID of the form's sheet.
        Example: "6141831453927300"
    - FORM - DEACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FORM - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the form's sheet.
        Example: "6141831453927300"
    - FORM - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FORM - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the form's sheet.
        Example: "6141831453927300"
    - FORM - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "FORM - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the form's sheet.
        Example: "6141831453927300"
    - GROUP - ADD_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "GROUP"
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_MEMBER"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.memberUserId` (string)
        ID of the user that was added to the group.
        Example: "12345678901234567"
    - GROUP - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "GROUP - ADD_MEMBER" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.groupName` (string)
        Name of the group.
        Example: "Group A"
    - GROUP - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "GROUP - ADD_MEMBER" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - GROUP - DOWNLOAD_SHEET_ACCESS_REPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "GROUP - ADD_MEMBER" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - DOWNLOAD SHEET ACCESS REPORT" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - GROUP - REMOVE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "GROUP - ADD_MEMBER" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_MEMBER"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.memberUserId` (string)
        ID of the user that was removed from the group.
        Example: "12345678901234567"
    - GROUP - RENAME:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "GROUP - ADD_MEMBER" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - RENAME" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldName` (string)
        Old name of the group.
        Example: "Group A"
      - `additionalDetails.newName` (string)
        New name of the group.
        Example: "Group B"
    - GROUP - TRANSFER_OWNERSHIP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "GROUP - ADD_MEMBER" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldOwnerUserId` (string)
        ID of the former group owner.
        Example: "12345678901234567"
      - `additionalDetails.newOwnerUserId` (string)
        ID of the new group owner.
        Example: "21436587092143658"
    - GROUP - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "GROUP - ADD_MEMBER" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - LICENSE_REQUESTS - DECLINE_LICENSE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "LICENSE_REQUESTS"
      - `action` (string)
        The action applied to the specified object
        Enum: "DECLINE_LICENSE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.userEmail` (string)
        Email address of the user who requested the license. If the email cannot be retrieved from the database, the event is published without this field (empty map)
    - LICENSE_REQUESTS - GRANT_LICENSE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "LICENSE_REQUESTS - DECLINE_LICENSE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "GRANT_LICENSE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.userEmail` (string)
        Email address of the user who requested the license. If the email cannot be retrieved from the database, the event is published without this field (empty map)
    - POLICY_DATA_EGRESS - ACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "POLICY_DATA_EGRESS"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FORM - ACTIVATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.name` (string)
        Policy name
      - `additionalDetails.restrictedActions` (string)
        Array notation string of restricted actions
      - `additionalDetails.scope` (string)
        Array notation string of asset types
    - POLICY_DATA_EGRESS - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_DATA_EGRESS - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.name` (string)
        Human-readable policy name
      - `additionalDetails.restrictedActions` (string)
        Comma-separated list in array notation, e.g., "[EXPORT, SAVE_AS_NEW]". Valid actions: EXPORT, PUBLISH, SAVE_AS_NEW, SAVE_AS_TEMPLATE
      - `additionalDetails.scope` (string)
        Comma-separated list of asset types in array notation, e.g., "[sheets, reports]". Valid types: sheets, reports, dashboards, dynamicviews
    - POLICY_DATA_EGRESS - DEACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_DATA_EGRESS - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FORM - DEACTIVATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.name` (string)
        Policy name
      - `additionalDetails.restrictedActions` (string)
        Array notation string of restricted actions
      - `additionalDetails.scope` (string)
        Array notation string of asset types
    - POLICY_DATA_EGRESS - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_DATA_EGRESS - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.name` (string)
        Name of deleted policy
      - `additionalDetails.restrictedActions` (string)
        Array notation string of restricted actions that were in effect
      - `additionalDetails.scope` (string)
        Array notation string of asset types that were covered
      - `additionalDetails.isDisabled` (boolean)
        Whether the policy was disabled at time of deletion
    - POLICY_DATA_EGRESS - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_DATA_EGRESS - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.name` (string)
        Policy name
      - `additionalDetails.restrictedActions` (string)
        Array notation string of restricted actions
      - `additionalDetails.scope` (string)
        Array notation string of asset types
      - `additionalDetails.isDisabled` (boolean)
        Whether the policy is disabled
    - POLICY_DATA_RETENTION - ACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "POLICY_DATA_RETENTION"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FORM - ACTIVATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.scope` (string)
        Array notation string of asset types subject to retention policy
    - POLICY_DATA_RETENTION - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_DATA_RETENTION - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.scope` (string)
        Comma-separated list in array notation, e.g., "[sheets, reports]". Valid types: sheets, reports, dashboards
      - `additionalDetails.isDisabled` (boolean)
        Whether the policy is created in disabled state
    - POLICY_DATA_RETENTION - DEACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_DATA_RETENTION - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FORM - DEACTIVATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.scope` (string)
        Array notation string of asset types
    - POLICY_DATA_RETENTION - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_DATA_RETENTION - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.scope` (string)
        Array notation string of asset types
      - `additionalDetails.isDisabled` (boolean)
        Current disabled state
    - POLICY_SAFE_SHARING - ACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "POLICY_SAFE_SHARING"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FORM - ACTIVATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - POLICY_SAFE_SHARING - ADD_REQUEST_FORM:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_SAFE_SHARING - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_REQUEST_FORM"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.isDisabled` (boolean)
        Current policy activation state
    - POLICY_SAFE_SHARING - DEACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "POLICY_SAFE_SHARING - ACTIVATE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FORM - DEACTIVATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - REPORT - ADD_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "REPORT"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the group or user. 

Note that this access level represents the access level granted by this specific sharing action; it is not the group or user's effective access level for the report.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that was added to the report's sharing list. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was added to the report's sharing list. (Specific to share to group actions)
        Example: "5432109876543210"
    - REPORT - ADD_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_SHARE_MEMBER" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the user. 

Note that this access level represents the access level that has been granted to the user via group membership; it is not the user's effective access level for the report.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that was added to the group.
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group the user was added to.
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that the group is shared to. (Specific to cases where the report is shared to the group via a workspace's sharing list)
        Example: "9876543210987654"
    - REPORT - ADD_WORKSPACE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_WORKSPACE_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the group or user. 

Note that this access level represents the access level granted by this specific sharing action; it is not the group or user's effective access level for the report.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that the workspace was shared to. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that the workspace was shared to. (Specific to share to group actions)
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that was shared to the group or user.
        Example: "9876543210987654"
    - REPORT - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.reportName` (string)
        Name of the new report.
        Example: "Report A"
      - `additionalDetails.sourceObjectId` (string)
        ID of report that was copied to create the new report. (Only included if the report was created as a result of a copy or save as new)
        Example: "12345678901234567"
      - `additionalDetails.sourceGlobalTemplateId` (string)
        ID of the global template that was used to create the new report (Only included if the report was created using a global template. "New Blank Report" is a global template)
        Example: "48569348493401200"
      - `additionalDetails.sourceType` (string)
        Type of object used to create the new report.
        Enum: "report", "globale_template"
    - REPORT - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - REPORT - EXPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FOLDER - EXPORT" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.formatType` (string)
        The format that the report was exported in "png_gantt" (gantt image), "mspdi" (Microsoft Project), "excel", or "pdf".
        Enum: "png_gantt", "mspdi", "excel", "pdf"
    - REPORT - LOAD:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - LOAD" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - REPORT - MOVE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - MOVE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newParentContainerId` (string)
        ID of the destination folder for the move event. (Specific to actions where the report was moved to a different folder).
        Example: "4365870921436587"
      - `additionalDetails.parentContainerId` (string)
        ID of the parent container of the report. (Specific to move events where a folder containing the report is moved to a folder in a different workspace, indicates that the report has moved to a new workspace but is still within the same folder)
        Example: "3456789012345678"
      - `additionalDetails.folderName` (string)
        Name of the destination folder for the move event. (Specific to actions where the report was moved to a different folder).
        Example: "Folder B"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the report is currently in. If the move was between two workspaces the workspaceId will be the ID of the destination workspace.
        Example: "9876543210987654"
    - REPORT - PURGE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - PURGE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - REPORT - REMOVE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of the user that was added to the report's sharing list. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was added to the report's sharing list. (Specific to share to group actions)
        Example: "5432109876543210"
    - REPORT - REMOVE_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_SHARE_MEMBER" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of user that was removed from the group.
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that the user was removed from.
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that the group is shared to. (Specific to cases where the report is shared to the group via a workspace's sharing list)
        Example: "9876543210987654"
    - REPORT - REMOVE_WORKSPACE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_WORKSPACE_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of the user that was removed from the workspace. (Specific to remove share from user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was removed from the workspace. (Specific to remove share from group actions)
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the group or user was removed from.
        Example: "9876543210987654"
    - REPORT - RENAME:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - RENAME" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newName` (string)
        New name of the report.
        Example: "Report B"
      - `additionalDetails.oldName` (string)
        Previous name of the report.
        Example: "Report A"
    - REPORT - RESTORE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - RESTORE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - REPORT - SAVE_AS_NEW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - SAVE_AS_NEW" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - REPORT - SEND_AS_ATTACHMENT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SEND_AS_ATTACHMENT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.recipientEmail` (string)
        Single email address either of a user explicitly included in the recipient list or of the sender (when CC sender is requested). (This property is included only if the recipientGroupId property below isn't included)
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.recipientGroupId` (string)
        Single ID of a user group explicitly included in the recipient list. (This property is included only if the recipientEmail property above isn't included)
        Example: "4583173393803140"
      - `additionalDetails.formatType` (string)
        The format in which the report was sent.
        Enum: "excel", "pdf", "pdf_gantt", "pdf_calendar"
    - REPORT - TRANSFER_OWNERSHIP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldUserId` (string)
        ID of the former owner.
        Example: "12345678901234567"
      - `additionalDetails.oldAccessLevel` (string)
        New access level of the former owner: "ADMIN".
        Enum: same as `additionalDetails.oldAccessLevel` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
      - `additionalDetails.newUserId` (string)
        ID of the new owner.
        Example: "21436587092143658"
      - `additionalDetails.newAccessLevel` (string)
        New access level of the new owner: "OWNER".
        Enum: same as `additionalDetails.newAccessLevel` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
    - REPORT - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "REPORT - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - SECURE_EXTERNAL_ACCESS - ACTIVATE_MFA:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "SECURE_EXTERNAL_ACCESS"
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_MFA"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.enforcementLevel` (string)
        MFA enforcement scope. Valid values: "PLAN" (enforce at plan level) or "WORKSPACE" (allow workspace admins to opt-in)
    - SECURE_EXTERNAL_ACCESS - ACTIVATE_SSO_FOR_EXTERNAL_COLLABORATORS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURE_EXTERNAL_ACCESS - ACTIVATE_MFA" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_SSO_FOR_EXTERNAL_COLLABORATORS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURE_EXTERNAL_ACCESS - DEACTIVATE_MFA:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURE_EXTERNAL_ACCESS - ACTIVATE_MFA" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_MFA"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.enforcementLevel` (string)
        MFA enforcement scope. Valid values: "PLAN" (enforce at plan level) or "WORKSPACE" (allow workspace admins to opt-in)
    - SECURE_EXTERNAL_ACCESS - DEACTIVATE_SSO_FOR_EXTERNAL_COLLABORATORS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURE_EXTERNAL_ACCESS - ACTIVATE_MFA" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_SSO_FOR_EXTERNAL_COLLABORATORS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURE_EXTERNAL_ACCESS - MFA_OPTION_ENFORCE_ALL_PLAN:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURE_EXTERNAL_ACCESS - ACTIVATE_MFA" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "MFA_OPTION_ENFORCE_ALL_PLAN"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURE_EXTERNAL_ACCESS - MFA_OPTION_WORKSPACE_OPT_IN:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURE_EXTERNAL_ACCESS - ACTIVATE_MFA" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "MFA_OPTION_WORKSPACE_OPT_IN"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "SECURITY_CONTROLS"
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_ACCOUNT_DISCOVERY"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_API_TOKEN_EXPIRATION_PERIOD:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_API_TOKEN_EXPIRATION_PERIOD"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_ATTACHMENT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_ATTACHMENT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.type` (string)
        Attachment provider type; one of: "upload" | "google_drive" | "onedrive" | "box" | "dropbox" | "evernote" | "egnyte" | "link_url"
    - SECURITY_CONTROLS - ACTIVATE_CALENDAR_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_CALENDAR_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.publicationType` (string)
        Type of calendar publishing: "iCal" or "calendarApp"
    - SECURITY_CONTROLS - ACTIVATE_DASHBOARD_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_DASHBOARD_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_DIRECTORY_INTEGRATION:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_DIRECTORY_INTEGRATION"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_IMAGES_IN_SHEET_CELLS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_IMAGES_IN_SHEET_CELLS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_OFFLINE_FORM_SUBMISSION:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_OFFLINE_FORM_SUBMISSION"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_REPORT_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_REPORT_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_SHEET_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_SHEET_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_SMARTSHEET_TENANT_ID:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_SMARTSHEET_TENANT_ID"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - ACTIVATE_WEB_CONTENT_WIDGET:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ACTIVATE_WEB_CONTENT_WIDGET"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.includeValidatedDomains` (string)
        Whether validated domains are included: "true" | "false"
    - SECURITY_CONTROLS - DEACTIVATE_ACCOUNT_DISCOVERY:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_ACCOUNT_DISCOVERY"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_API_TOKEN_EXPIRATION_PERIOD:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_API_TOKEN_EXPIRATION_PERIOD"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_ATTACHMENT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_ATTACHMENT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.type` (string)
        Attachment provider type; one of: "upload" | "google_drive" | "onedrive" | "box" | "dropbox" | "evernote" | "egnyte" | "link_url"
    - SECURITY_CONTROLS - DEACTIVATE_CALENDAR_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_CALENDAR_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.publicationType` (string)
        Type of calendar publishing: "iCal" or "calendarApp"
    - SECURITY_CONTROLS - DEACTIVATE_DASHBOARD_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_DASHBOARD_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_DIRECTORY_INTEGRATION:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_DIRECTORY_INTEGRATION"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_IMAGES_IN_SHEET_CELLS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_IMAGES_IN_SHEET_CELLS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_OFFLINE_FORM_SUBMISSION:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_OFFLINE_FORM_SUBMISSION"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_REPORT_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_REPORT_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_SHEET_PUBLISHING:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_SHEET_PUBLISHING"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_SMARTSHEET_TENANT_ID:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_SMARTSHEET_TENANT_ID"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
    - SECURITY_CONTROLS - DEACTIVATE_WEB_CONTENT_WIDGET:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DEACTIVATE_WEB_CONTENT_WIDGET"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.includeValidatedDomains` (string)
        Whether validated domains are included: "true" | "false"
    - SECURITY_CONTROLS - UPDATE_API_TOKEN_EXPIRATION_PERIOD:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_API_TOKEN_EXPIRATION_PERIOD"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldValue` (string)
        Previous expiration period in days as numeric string (e.g., "90")
      - `additionalDetails.newValue` (string)
        New expiration period in days as numeric string (e.g., "180")
      - `additionalDetails.oldInterval` (string)
        Previous interval string representation (e.g., "P90D")
      - `additionalDetails.newInterval` (string)
        New interval string representation (e.g., "P180D")
    - SECURITY_CONTROLS - UPDATE_DASHBOARD_PUBLISHING_OPTIONS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_DASHBOARD_PUBLISHING_OPTIONS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldValue` (string)
        Previous permission: "anyone_with_link" | "same_plan_users_only"
      - `additionalDetails.newValue` (string)
        New permission: "anyone_with_link" | "same_plan_users_only"
    - SECURITY_CONTROLS - UPDATE_DIRECTORY_INTEGRATION:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_DIRECTORY_INTEGRATION"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldRemoveFromSharing` (string)
        Previous "remove from sharing" flag: "true" | "false"
      - `additionalDetails.newRemoveFromSharing` (string)
        New "remove from sharing" flag: "true" | "false"
      - `additionalDetails.oldTransferSheets` (string)
        Previous "transfer sheets" flag: "true" | "false"
      - `additionalDetails.newTransferSheets` (string)
        New "transfer sheets" flag: "true" | "false"
      - `additionalDetails.oldEscrowEmail` (string)
        (optional) Email of previous escrow user (only present if user ID changed)
      - `additionalDetails.newEscrowEmail` (string)
        (optional) Email of new escrow user (only present if user ID changed)
    - SECURITY_CONTROLS - UPDATE_FORM_ACCESS_PERMISSIONS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_FORM_ACCESS_PERMISSIONS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldValue` (string)
        Previous permission: "anyone_with_link" | "smartsheet_login" | "safe_sharing"
      - `additionalDetails.newValue` (string)
        New permission: "anyone_with_link" | "smartsheet_login" | "safe_sharing"
    - SECURITY_CONTROLS - UPDATE_GROUP_MEMBERSHIP_SCOPE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_GROUP_MEMBERSHIP_SCOPE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldValue` (string)
        Previous scope: "people_in_account_and_external_contacts" | "only_people_in_account"
      - `additionalDetails.newValue` (string)
        New scope: "people_in_account_and_external_contacts" | "only_people_in_account"
    - SECURITY_CONTROLS - UPDATE_NOTIFICATIONS_AND_REQUESTS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_NOTIFICATIONS_AND_REQUESTS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldValue` (string)
        Previous permission level; one of:
      - `additionalDetails.newValue` (string)
        New permission level (same options as oldValue)
    - SECURITY_CONTROLS - UPDATE_REPORT_PUBLISHING_OPTIONS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_REPORT_PUBLISHING_OPTIONS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldValue` (string)
        Previous permission: "anyone_with_link" | "same_plan_users_only"
      - `additionalDetails.newValue` (string)
        New permission: "anyone_with_link" | "same_plan_users_only"
    - SECURITY_CONTROLS - UPDATE_SHEET_PUBLISHING_OPTIONS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_SHEET_PUBLISHING_OPTIONS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.oldValue` (string)
        Previous permission: "anyone_with_link" | "same_plan_users_only"
      - `additionalDetails.newValue` (string)
        New permission: "anyone_with_link" | "same_plan_users_only"
    - SECURITY_CONTROLS - UPDATE_WEB_CONTENT_WIDGET:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SECURITY_CONTROLS - ACTIVATE_ACCOUNT_DISCOVERY" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_WEB_CONTENT_WIDGET"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.includeValidatedDomains` (string)
        Whether validated domains are included: "true" | "false"
    - SHEET - ADD_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "SHEET"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the group or user. 

Note that this access level represents the access level granted by this specific sharing action; it is not the group or user's effective access level for the sheet.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that was added to the sheet's sharing list. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was added to the sheet's sharing list. (Specific to share to group actions)
        Example: "5432109876543210"
    - SHEET - ADD_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_SHARE_MEMBER" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the user. 

Note that this access level represents the access level that has been granted to the user via group membership; it is not the user's effective access level for the sheet.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that was added to the group.
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group the user was added to.
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that the group is shared to. (Specific to cases where the sheet is shared to the group via a workspace's sharing list)
        Example: "9876543210987654"
    - SHEET - ADD_WORKSPACE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_WORKSPACE_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the group or user. 

Note that this access level represents the access level granted by this specific sharing action; it is not the group or user's effective access level for the sheet.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that the workspace was shared to. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that the workspace was shared to. (Specific to share to group actions)
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that was shared to the group or user.
        Example: "9876543210987654"
    - SHEET - COPY_ROW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "COPY_ROW"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether the row(s) were copied with their respective attachments.
The value is a string encoded boolean - "true" or "false".
        Example: "true"
      - `additionalDetails.includeDiscussions` (string)
        Indicates whether the row(s) were copied with their respective discussion comments.
The value is a string encoded boolean - "true" or "false".
        Example: "true"
      - `additionalDetails.sourceSheetId` (string)
        ID of sheet from where the rows copied. (Only included when the objectId property contains the ID of the destination sheet)
        Example: "6141831453927300"
      - `additionalDetails.destinationSheetId` (string)
        ID of sheet to where the rows copied. (Only included when the objectId property contains the ID of the source sheet)
        Example: "3006141831453927"
      - `additionalDetails.rowsCopied` (string)
        Number of rows copied encoded as a string.
        Example: "2"
    - SHEET - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sourceObjectId` (string)
        ID of sheet that was copied to create the new sheet. (Only included if the sheet was created as a result of a copy or save as new)
        Example: "12345678901234567"
      - `additionalDetails.sourceGlobalTemplateId` (string)
        ID of the global template that was used to create the new sheet (Only included if the sheet was created using a global template)
        Example: "48569348493401200"
      - `additionalDetails.sourceTemplateId` (string)
        ID of the template used to create the sheet. (Only included if the sheet was created using a template, that is not a global template)
        Example: "8901234567890123"
      - `additionalDetails.sourceType` (string)
        Enum: "sheet", "template", "globale_template", "import"
      - `additionalDetails.sheetName` (string)
        Name of the newly created Sheets.
        Example: "Sheet A"
    - SHEET - CREATE_CELL_LINK:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "CREATE_CELL_LINK"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.cellLinkSourceSheetId` (string)
        ID of sheet referenced by the cell link.
        Example: "6141831453927300"
    - SHEET - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - SHEET - EXPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FOLDER - EXPORT" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.formatType` (string)
        The format that the sheet was exported in "png_gantt" (gantt image), "mspdi" (Microsoft Project), "excel", or "pdf".
        Enum: same as `additionalDetails.formatType` in "REPORT - EXPORT" (4 values)
    - SHEET - LOAD:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - LOAD" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - SHEET - MOVE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - MOVE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newParentContainerId` (string)
        ID of the destination folder for the move event. (Specific to actions where the sheet was moved to a different folder).
        Example: "4365870921436587"
      - `additionalDetails.parentContainerId` (string)
        ID of the parent container of the sheet. (Specific to move events where a folder containing the sheet is moved to a folder in a different workspace, indicates that the sheet has moved to a new workspace but is still within the same folder)
        Example: "3456789012345678"
      - `additionalDetails.folderName` (string)
        Name of the destination folder for the move event. (Specific to actions where the sheet was moved to a different folder).
        Example: "Folder B"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the sheet is currently in. If the move was between two workspaces the workspaceId will be the ID of the destination workspace.
        Example: "9876543210987654"
    - SHEET - MOVE_ROW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "MOVE_ROW"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether the row(s) were moved with their respective attachments.
The value us a string encoded boolean - "true" or "false".
        Example: "true"
      - `additionalDetails.includeDiscussions` (string)
        Indicates whether the row(s) were moved with their respective discussion comments.
The value us a string encoded boolean - "true" or "false".
        Example: "true"
      - `additionalDetails.sourceSheetId` (string)
        ID of sheet from where the rows moved. (Only included when the objectId property contains the ID of the destination sheet)
        Example: "6141831453927300"
      - `additionalDetails.destinationSheetId` (string)
        ID of sheet to where the rows moved. (Only included when the objectId property contains the ID of the source sheet)
        Example: "3006141831453927"
      - `additionalDetails.rowsMoved` (string)
        Number of rows moved formatted as a string.
        Example: "2"
    - SHEET - PURGE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - PURGE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - SHEET - REMOVE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of the user that was removed from the sheet's sharing list. (Specific to remove share from user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was removed from the sheet's sharing list. (Specific to remove share from group actions)
        Example: "5432109876543210"
    - SHEET - REMOVE_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_SHARE_MEMBER" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of user that was removed from the group.
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that the user was removed from.
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace that the group is shared to. (Specific to cases where the sheet is shared to the group via a workspace's sharing list)
        Example: "9876543210987654"
    - SHEET - REMOVE_WORKSPACE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_WORKSPACE_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of the user that was removed from the workspace. (Specific to remove share from user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was removed from the workspace. (Specific to remove share from group actions)
        Example: "5432109876543210"
      - `additionalDetails.workspaceId` (string)
        ID of the workspace the group or user was removed from.
        Example: "9876543210987654"
    - SHEET - RENAME:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - RENAME" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newName` (string)
        New name of the sheet.
        Example: "Sheet B"
      - `additionalDetails.oldName` (string)
        Previous name of the sheet.
        Example: "Sheet A"
    - SHEET - REQUEST_BACKUP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FOLDER - REQUEST_BACKUP" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether attachments should be included in the recurring backup.
The value is a string formatted boolean (i.e. "true" or "false").
        Example: "true"
      - `additionalDetails.sendCompletionEmail` (string)
        Indicates whether an email should be sent to the workspace's owner every time a recurring backup completes.
The value is a string formatted boolean (i.e. "true" or "false").
        Example: "true"
    - SHEET - RESTORE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - RESTORE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - SHEET - SAVE_AS_NEW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - SAVE_AS_NEW" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - SHEET - SAVE_AS_TEMPLATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SAVE_AS_TEMPLATE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - SHEET - SEND_AS_ATTACHMENT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "REPORT - SEND_AS_ATTACHMENT" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.recipientEmail` (string)
        Single email address either of a user explicitly included in the recipient list or of the sender (when CC sender is requested). (This property is included only if the recipientGroupId property below isn't included)
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.recipientGroupId` (string)
        Single ID of a user group explicitly included in the recipient list. (This property is included only if the recipientEmail property above isn't included)
        Example: "4583173393803140"
      - `additionalDetails.formatType` (string)
        The format in which the sheet was sent.
        Enum: same as `additionalDetails.formatType` in "REPORT - SEND_AS_ATTACHMENT" (4 values)
    - SHEET - SEND_ROW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SEND_ROW"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.recipientEmail` (string)
        Single email address either of a user explicitly included in the recipient list or of the sender (when CC sender is requested). (This property is included only if the recipientGroupId property below isn't included)
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.recipientGroupId` (string)
        Single ID of a user group explicitly included in the recipient list. (This property is included only if the recipientEmail property above isn't included)
        Example: "4583173393803140"
      - `additionalDetails.rowCount` (string)
        Number of rows sent formatted as a string value.
        Example: "2"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether the row(s) were sent with their respective attachments.
The value is a string formatted boolean (i.e. "true" or "false").
        Example: "true"
      - `additionalDetails.includeDiscussions` (string)
        Indicates whether the row(s) were sent with their respective discussion comments.
The value is a string formatted boolean (i.e. "true" or "false").
        Example: "true"
    - SHEET - TRANSFER_OWNERSHIP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldUserId` (string)
        ID of the former owner.
        Example: "12345678901234567"
      - `additionalDetails.oldAccessLevel` (string)
        New access level of the former owner: "ADMIN".
        Enum: same as `additionalDetails.oldAccessLevel` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
      - `additionalDetails.newUserId` (string)
        ID of the new owner.
        Example: "21436587092143658"
      - `additionalDetails.newAccessLevel` (string)
        New access level of the new owner: "OWNER".
        Enum: same as `additionalDetails.newAccessLevel` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
    - SHEET - UPDATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "SHEET - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - UPDATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - UPDATE_REQUEST - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "UPDATE_REQUEST"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sheetId` (string)
        ID of the sheet that owns the rows sent in the update request.
        Example: "6141831453927300"
      - `additionalDetails.rowCount` (string)
        Number of rows sent in the update request formatted as a string
        Example: "2"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether the row(s) were sent with their respective attachments.
The value is a string formatted boolean (i.e. "true" or "false").
        Example: "true"
      - `additionalDetails.includeDiscussions` (string)
        Indicates whether the row(s) were sent with their respective discussion comments.
The value is a string formatted boolean (i.e. "true" or "false").
        Example: "true"
    - USER - ACCEPT_INVITE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "USER"
      - `action` (string)
        The action applied to the specified object
        Enum: "ACCEPT_INVITE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.

> Note: Depending on the account's configuration, this property may instead contain the email address of the user who accepted the invitation (legacy behavior). Use impactedUserEmail to reliably identify the user who accepted the invitation.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.impactedUserEmail` (string)
        Email address of the user who accepted the invitation to join the organization account. This property is omitted if the email address isn't available.
        Example: "john.doe@smartsheet.com"
    - USER - ADD_TO_ACCOUNT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "ADD_TO_ACCOUNT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.

> Note: Depending on the account's configuration, this property may instead contain the email address of the user added to the account (legacy behavior). Use impactedUserEmail to reliably identify the user added to the account.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.impactedUserEmail` (string)
        Email address of the user added to the organization account. This property is omitted if the email address isn't available.
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.userTypes` (string)
        Comma-delimited list of user types, e.g. SYSTEM_ADMIN, LICENSED_USER, GROUP_ADMIN, RESOURCE_VIEWER, JIRA_ADMIN, JIRA_USER, SALESFORCE_ADMIN, SALESFORCE_USER. 

The full list of available user types can be seen here. Please notice that user types Unlicensed User and Free Collaborator are not applicable for this event.
    - USER - DEACTIVATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FORM - DEACTIVATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.userEmail` (string)
        Email address of the user being deactivated
    - USER - DECLINE_INVITE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DECLINE_INVITE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.

> Note: Depending on the account's configuration, this property may instead contain the email address of the user who declined the invitation (legacy behavior). Use impactedUserEmail to reliably identify the user who declined the invitation.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.impactedUserEmail` (string)
        Email address of the user who declined the invitation to join the organization account. This property is omitted if the email address isn't available.
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.declineReason` (string)
        Enum: "ACCEPT_FAILED_REMOVED_FROM_ORG", "ACCEPT_FAILED_IN_OTHER_ORG", "ACCEPT_FAILED_IS_PAID_USER", "ACCEPT_FAILED_NEEDS_LICENSE", "ACCEPT_FAILED_INSUFFICIENT_LICENSES", "ACCEPT_FAILED_NOT_ELIGIBLE_FOR_TRIAL", "ACCEPT_FAILED", "ACCEPT_FAILED_NEEDS_GROUP_ADMIN_ROLE", "ACCEPT_FAILED_UAP_VIOLATION", "DECLINE_SUCCESS"
    - USER - DOWNLOAD_SHEET_ACCESS_REPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - DOWNLOAD SHEET ACCESS REPORT" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - USER - MERGE_USERS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "MERGE_USERS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.sourceEmail` (string)
        Email address of the source user being merged (account that will be removed)
      - `additionalDetails.destinationEmail` (string)
        Email address of the destination user (account that receives merged data)
    - USER - REMOVE_FROM_ACCOUNT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_FROM_ACCOUNT"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.

> Note: Depending on the account's configuration, this property may instead contain the email address of the user removed from the account (legacy behavior). Use impactedUserEmail to reliably identify the user removed from the account.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.impactedUserEmail` (string)
        Email address of the user removed from the organization account. This property is omitted if the email address isn't available.
        Example: "john.doe@smartsheet.com"
    - USER - REMOVE_FROM_GROUPS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_FROM_GROUPS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - USER - REMOVE_SHARES:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "REMOVE_SHARES"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - USER - SEND_INVITE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SEND_INVITE"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.

> Note: Depending on the account's configuration, this property may instead contain the email address of the invited user (legacy behavior). Use impactedUserEmail to reliably identify the invited user.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.impactedUserEmail` (string)
        Email address of the user invited to the organization account. This property is omitted if the email address isn't available.
        Example: "john.doe@smartsheet.com"
      - `additionalDetails.userTypes` (string)
        Comma-delimited list of user types, e.g. SYSTEM_ADMIN, LICENSED_USER, GROUP_ADMIN, RESOURCE_VIEWER, JIRA_ADMIN, JIRA_USER, SALESFORCE_ADMIN, SALESFORCE_USER. 

The full list of available user types can be seen here. Please notice that user types Unlicensed User and Free Collaborator are not applicable for this event.
    - USER - SEND_PASSWORD_RESET:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "SEND_PASSWORD_RESET"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - USER - TRANSFER_OWNED_GROUPS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "TRANSFER_OWNED_GROUPS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldOwnerUserId` (string)
        ID of the former group owner.
        Example: "12345678901234567"
      - `additionalDetails.newOwnerUserId` (string)
        ID of the new group owner.
        Example: "21436587092143658"
    - USER - TRANSFER_OWNED_ITEMS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "TRANSFER_OWNED_ITEMS"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.oldOwnerUserId` (string)
        ID of the former group owner.
        Example: "12345678901234567"
      - `additionalDetails.newOwnerUserId` (string)
        ID of the new group owner.
        Example: "21436587092143658"
    - USER - UPDATE_USER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_USER"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - USER - VIEW_USER_ROLES_AND_REPORTS:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "USER - ACCEPT_INVITE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "VIEW_USER_ROLES_AND_REPORTS"
      - `additionalDetails` (object)
        Container object for additional event-specific properties. Properties depend upon the event type, but all events include an emailAddress property, representing the user responsible for the event as well as a sourceIpAddress property, representing the responsible's user IP address, if the source of the event is "WEB_APP". 

> Note: For the USER - ADD_TO_ACCOUNT, USER - SEND_INVITE, USER - REMOVE_FROM_ACCOUNT, USER - ACCEPT_INVITE, and USER - DECLINE_INVITE events, emailAddress may instead contain the email address of the user the event is about (legacy behavior), depending on the account's configuration. These events also include an impactedUserEmail property that always identifies that user.

See [Event types](/api/smartsheet/event-types) for event details, including event-specific additionalDetails properties and example event response objects.
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event. For the five impacted-user USER events listed above, this may instead contain the impacted user's email address (legacy behavior); use impactedUserEmail for those events.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event.
        Example: "248.253.157.32"
    - WORKSPACE - ADD_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: "WORKSPACE"
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the group or user. 

Note that this access level represents the access level granted by this specific sharing action; it is not the group or user's effective access level for the workspace.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that was added to the workspace's sharing list. (Specific to share to user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was added to the workspace's sharing list. (Specific to share to group actions)
        Example: "5432109876543210"
    - WORKSPACE - ADD_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - ADD_SHARE_MEMBER" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.accessLevel` (string)
        Indicates the access level granted to the user. 

Note that this access level represents the access level that has been granted to the user via group membership; it is not the user's effective access level for the workspace.
        Enum: same as `additionalDetails.accessLevel` in "DASHBOARD - ADD_SHARE" (4 values)
      - `additionalDetails.userId` (string)
        ID of the user that was added to the group.
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group the user was added to.
        Example: "5432109876543210"
    - WORKSPACE - CREATE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - CREATE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.workspaceName` (string)
        Name of the workspace.
        Example: "Workspace A"
      - `additionalDetails.sourceWorkspaceId` (string)
        ID of workspace that was copied to create the new workspace. (Only included if the workspace was created as a result of a save as new or copy)
        Example: "9876543210987654"
    - WORKSPACE - CREATE_RECURRING_BACKUP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "CREATE_RECURRING_BACKUP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether attachments should be included in the recurring backup.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
      - `additionalDetails.sendCompletionEmail` (string)
        Indicates whether an email should be sent to the workspace's owner every time a recurring backup completes.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
    - WORKSPACE - DELETE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ATTACHMENT - DELETE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - WORKSPACE - DELETE_RECURRING_BACKUP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "DELETE_RECURRING_BACKUP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - WORKSPACE - EXPORT:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FOLDER - EXPORT" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.formatType` (string)
        The format that the workspace was exported ("excel" or "pdf"). Notice that the same value "excel" is displayed either when exporting to Microsoft Excel or when exporting to Google Sheets.
        Enum: same as `additionalDetails.formatType` in "FOLDER - EXPORT" (2 values)
    - WORKSPACE - REMOVE_SHARE:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_SHARE" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.userId` (string)
        ID of the user that was removed from the workspace's sharing list. (Specific to remove share from user actions)
        Example: "12345678901234567"
      - `additionalDetails.groupId` (string)
        ID of the group that was removed from the workspace's sharing list. (Specific to remove share from group actions)
        Example: "5432109876543210"
    - WORKSPACE - REMOVE_SHARE_MEMBER:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - REMOVE_SHARE_MEMBER" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - WORKSPACE - RENAME:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "ACCOUNT - RENAME" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.newName` (string)
        New name of the workspace.
        Example: "Workspace B"
      - `additionalDetails.oldName` (string)
        Previous name of the workspace.
        Example: "Workspace A"
    - WORKSPACE - REQUEST_BACKUP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "FOLDER - REQUEST_BACKUP" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether attachments should be included in the recurring backup.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
      - `additionalDetails.sendCompletionEmail` (string)
        Indicates whether an email should be sent to the workspace's owner every time a recurring backup completes.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
    - WORKSPACE - SAVE_AS_NEW:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - SAVE_AS_NEW" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - WORKSPACE - TRANSFER_OWNERSHIP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: same as `action` in "DASHBOARD - TRANSFER_OWNERSHIP" (1 values)
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
    - WORKSPACE - UPDATE_RECURRING_BACKUP:
      - `eventId` (string)
        Unique event identifier.
        Example: "2.1.iI9WIpaEAhjz-0hV0eGw2lOEoKDqoRUP00NJv2RvAyKoOvyws63zsfpTBqda5tb33ylcz2JdGVC9Rfa2FRJKQg"
      - `eventTimestamp` (string)
        Date and time of the event. Defaults to ISO-8601 format. See dates and
times for more information.
        Example: "2025-05-24T14:15:22Z"
      - `requestUserId` (number)
        User whose authentication credential is embedded in the request that
initiated the event. For example, if the request is an API call with an
access token then requestUserId identifies the user whose data can be
accessed via the access token (i.e., the user who authorized the creation
of the access token). On the other hand, if the request comes from a UI
session, then requestUserId identifies the user logged-in to the UI.
        Example: 133445566778
      - `accessTokenName` (string)
        Name of the access token embedded in the request. This property is omitted
if there's no access token in the request (i.e., it isn't an API call) or
if the access token wasn't given a name when created (only access tokens
generated via the Smartsheet desktop UI can be given a name at creation
time).
        Example: "Test token"
      - `source` (string)
        Identifies the client or user agent used to initiate the action.
        Enum: same as `source` in "ACCESS_TOKEN - AUTHORIZE" (7 values)
      - `objectType` (string)
        The Smartsheet resource impacted by the event.
        Enum: same as `objectType` in "WORKSPACE - ADD_SHARE" (1 values)
      - `action` (string)
        The action applied to the specified object
        Enum: "UPDATE_RECURRING_BACKUP"
      - `additionalDetails` (object)
      - `additionalDetails.sourceIpAddress` (string)
        IP address of the user responsible for the event. This field is only present if the source of the event is "WEB_APP".
        Example: "248.253.157.32"
      - `additionalDetails.emailAddress` (string, required)
        Email address of the user responsible for the event.
        Example: "jane.doe@smartsheet.com"
      - `additionalDetails.includeAttachments` (string)
        Indicates whether attachments should be included in the recurring backup.
The value is a string formatted boolean ("true" or "false").
        Example: "true"
      - `additionalDetails.sendCompletionEmail` (string)
        Indicates whether an email should be sent to the workspace's owner every time a recurring backup completes.
The value is a string formatted boolean ("true" or "false").
        Example: "true"

## Response 400 fields (application/json):

  - `refId` (string)
    The ID of the specific error occurrence. Please include this information when contacting Smartsheet support.

  - `errorCode` (number)
    Custom error code from Smartsheet. See the complete [Error Code List](/api/smartsheet/error-codes).

  - `message` (string)
    Descriptive error message.