Operators
Activity & drift
Activity is the operations desk for “what is wrong right now?” and “what happened?” Open it from Operations → Activity in the sidebar.
At a glance
Four counters deep-link into the right tab:
| Counter | Meaning |
|---|---|
| External drift | Members present downstream whom Camper did not place (or cannot match) |
| Membership drift | Desired vs actual still disagree (including not-yet-observed after a new link) |
| Dead tasks | Provisioning ops that failed fatally and need retry or a fix |
| Events (24h) | Audit volume; hint may call out failed or partial syncs |
A badge on Activity in the sidebar means something needs attention (dead tasks and external drift).
Tabs
Drift
People Camper found on a linked resource but did not add — shown as Unexpected member (or owner). By default they stay put. If the link’s outsider policy is Enforce, the row says Link will remove them.
| Typical cause | What to do |
|---|---|
| Someone invited outside Camper | Keep pins them, Remove drops them from the resource, set outsiders to Enforce on that link, or Ignore if you do not want them listed |
| Workspace admin / bot on every resource | Exempt (person-off) on the row, or add the email under Settings → Resources |
| Email does not match the directory | Fix SCIM email / provider identity mapping |
| Contractor not in IdP | Add them to the IdP, or Keep (pin) |
Links set to Ignore outsiders are not counted as external drift. The counter and the list use the same rule.
Related policies: Link resources → Access rules.
Dead tasks
Failed provisioning operations that will not retry on their own.
- Read the error (auth, rate limit, missing permission, identity not found).
- Fix the underlying issue (reinstall a connection, invite the Slack bot, correct scopes).
- Retry from the dead-task row when ready.
Auth failures often mark the connection unhealthy at the same time — fix Connections first.
Sync
Recent reconcile / sync jobs and membership-drift context: when Camper last evaluated the tenant or a resource, and whether a run was full, partial, or failed.
Use this after a large reorg or first reconcile to confirm work completed.
Audit
Append-only event feed for the workspace: identity join/move/leave, org unit changes, resource link changes, pins, support grants, billing write pauses, and more.
Useful for “who changed what?” and for Camper support access visibility.
How drift relates to the control loop
- Desired — active people × links × pins (exempt accounts are never desired)
- Actual — connector
listMembers - Diff — adds, removes, role updates, retained-by-policy, external drift, exempt accounts, blocked bulk removals
Guardrails block oversized removal batches so a bad map does not empty a large group. Details conceptually: How Camper works.
Notifications
Optional Slack DMs when someone’s access actually changes are separate from Activity — see Access-change notifications. Activity remains the operator record.