Who created the user

Hello ​@Ingo Brenner 
Thank you for reaching out, and welcome to the Docusign Community! We appreciate your question and assure you that we are fully committed to providing you with the best service possible.
I tried to reproduce the issue on my end, and here’s what I found:

• Event Date shows when the change or update was made.
• User displays the admin who performed the action (for example, adding a user).
• Description explains what change was made. If a user was added, their name will appear here.
• The Field column indicates the status.
• Old Value and New Value reflect the update—for example, changing from Activation Required to Activation Sent.

According to the article, audit logs capture key events for changes to an organization made from within the organization. The organization audit log provides an easy way for administrators to view changes to the accounts linked to the organization and user management actions (such as adding, removing, and editing users), and updates to Docusign administrators.
The audit logs provide an easy way for account administrators to see changes to account settings, billing information, plan type, and users. Administrators can filter the information by date range and download the selected information to a comma-separated value (CSV) file for further processing.

Types of changes

The audit logs provide a record of the following types of changes to an account:

• Account settings
• User settings
• Billing credit card and billing address information
• Account plan changes
• Permission profiles (does not include creation or deletion of permission profiles)
• Envelope sharing settings
• Branding changes
• Electronic Record and Signature Disclosure changes
• Document Custom Fields
• Envelope Custom Fields

A maximum of 100 events are shown on the Audit Logs page. To view any additional events, export the CSV file.

Information displayed

The information displayed in the audit logs includes the following:

• Event Date: The date and time the account change was made. The date and time shown uses the time zone setting for your browser and will vary depending on your browser settings.
• User: The name and email address of the user who changed the setting. Usually, this is an administrator. This column shows the user as "Docusign System" to indicate a change made to your account by a Docusign technical process. This occurs when a new user activates their account, or if there is a change in your account plan where features are added or changed. This column shows the user as "Docusign System User" to indicate a change made by an internal Docusign employee if you requested a change to your account. Contact Docusign Support if you have any questions about a change completed by one of these users.
• Description: The category for the changed setting. For categories that have multiple entries, such as Users, the name of the entry is also included in the description.

  Example: If you change something for user John Jones, the description will show "User Setting Change - John Jones".

• Field: The name of the field that was changed.

• Old Value and New Value: The old and new values for the field.

  In some cases, the Old Value field might be blank. This is expected and only means that there was no old value for the field.

  For fields that use a check box, a value of True means that the check box is selected. False means that the check box is not selected.

Related articled:
Organization-Level Audit Log Events
Audit Logs

If you found the response to be a useful solution to your question, please “like” and mark it as the best answer by clicking “Select as Best” to make it easier for other users to find. Thank you!

Sincerely,

Ma. Cassandra | Docusign Community Moderator
If this helped, feel free to Like👍and click "Best Answer"

​@Ma.Cubio 

Thanks for the information, but my problem is that there are several users I can’t find in the audit tool, so I can’t figure out who created them.
Even when I narrow down the timeframe (+/- one day), the users don’t appear in the tool.
If anyone has any idea what might be causing this, or if there’s another way to access this data, I’m open to suggestions :)

Regardless of this, I’ve now also opened a ticket with DocuSign support.

 Best Ingo

Hello ​@Ingo Brenner 
I’m sorry that the issue is still unresolved. As you mentioned that you have already created a support case for this matter, could you share the case number via private message, so we can check and follow up on your behalf?
 

Sincerely,

Ma. Cassandra | Docusign Community Moderator
If this helped, feel free to Like👍and click "Best Answer"