Teams, the audit log, and trash

Teams

A team is a named group of members, managed in Settings → Teams: create a team, add or remove members, and delete it. Team membership is what "Team" deal visibility checks against — a member of the team can see a deal set to that team's visibility.

A team manager is a separate, smaller group from its members. Managing a team grants deal.edit_team over deals owned by that team — being a plain member does not. A team can have managers who aren't members, and members who aren't managers.

Creating a team, deleting one, and managing its members or managers requires the manage.teams permission — enforced both in the UI and on the API. Manager holds it by default, so a Manager can run team administration without being the billing owner; the billing owner always can, since they hold every permission.

The audit log

Settings → Audit log lists governance events, most recent first. Viewing it requires the audit.view permission — without it, the page tells you so instead of showing anything.

Pick a time range at the top: 7 days, 30 days (the default), 90 days, or All. A chart shows how many events happened in each day, week, or month, split by area: Team & access, Finance, Campaigns, Records, Integrations, and Other. Click a bar to narrow the list to that period; click it again, or use Clear selection, to go back. A Sensitive changes panel lists the five newest role changes, member removals, ownership transfers, module grants and revokes, exports, and deletions.

The events table has a search box (it looks in the action, the detail, and the actor name) and filters for actor, action, area, record type, and sensitive changes. Select a row to see the full event, copy the record id, and open the record when it still exists — deleted records have no link.

Export downloads the events you are looking at, with the same range, search, filters, and selected period, as a CSV of up to 10,000 rows. It needs the data.export permission as well as audit.view, and each export is itself recorded in the audit log.

What gets recorded: role created, updated, or deleted; a member's role changed; a team's members or managers changed; a deal deleted or restored; CSV exports of contacts, companies, deals, talent, or commissions; and talent created, updated, archived, linked, or unlinked. Each entry is an actor, a timestamp, and a short detail string.

Trash and restore

Only deals are soft-deleted. Deleting a deal (deal.delete) hides it everywhere but keeps it recoverable in Settings → Trash & archive; restoring it (deal.restore) brings it back exactly as it was. There's no retention limit — a deleted deal stays in trash until someone restores it.

The Settings → Trash & archive page opens for anyone who holds deal.delete or deal.restore, and each button inside is gated on its own permission: Restore needs deal.restore. So a custom role granted deal.restore without deal.delete can reach the page and restore, which the two permissions imply. The same page also lists archived (not deleted) deals in an Archived section, with Unarchive, for anyone with deal.archive.

Contacts and companies don't have trash. They're archived instead (contact.archive / company.archive), and the same permission covers unarchiving — there's no separate restore step or permission for them.