diff --git a/docs-mintlify/admin/account-billing/ai-tokens.mdx b/docs-mintlify/admin/account-billing/ai-tokens.mdx
index a3b745eaa341c..e0cf356a2f198 100644
--- a/docs-mintlify/admin/account-billing/ai-tokens.mdx
+++ b/docs-mintlify/admin/account-billing/ai-tokens.mdx
@@ -73,6 +73,21 @@ Contact your account executive for details on purchasing token packages.
 Each user on a free plan receives an individual monthly token allowance. This
 allowance resets at the start of each calendar month.
 
+## Embedded users
+
+AI token spend by [embedded](/embedding/iframe) end users — through Analytics
+Chat, Creator Mode, or an embedded dashboard's AI features — is tracked
+separately from regular seats. Embedded users aren't billed as seats, so their
+usage isn't covered by [per-seat token grants](#per-seat-token-grants):
+
+- **Contract customers**: embedded AI spend draws from [token
+  packages](#token-packages) first, then continues as on-demand overage.
+- **On-demand customers**: embedded AI spend is billed directly as [on-demand
+  consumption](#on-demand-consumption), subject to the account's on-demand
+  spending limit if one is set.
+- **Free plan**: embedded users share the account's [free tier](#free-tier)
+  allowance, since free accounts have no seats to grant tokens against.
+
 ## Tracking usage
 
 Administrators can monitor token consumption through the **AI Tokens Usage**
diff --git a/docs-mintlify/admin/monitoring/audit-log.mdx b/docs-mintlify/admin/monitoring/audit-log.mdx
index 2bd46995bd244..a92d8c42e4e93 100644
--- a/docs-mintlify/admin/monitoring/audit-log.mdx
+++ b/docs-mintlify/admin/monitoring/audit-log.mdx
@@ -76,7 +76,7 @@ Audit Log collects the following types of events:
 | Category | Event type |
 | --- | --- |
 | Users | `Created user`<br/>`Deleted user`<br/>`Invited user`<br/>`Updated user profile`<br/>`Requested password reset`<br/>`Changed password` |
-| SCIM provisioning | `Created user via SCIM`<br/>`Updated user via SCIM`<br/>`Deleted user via SCIM`<br/>`Created group via SCIM`<br/>`Updated group via SCIM`<br/>`Deleted group via SCIM` |
+| SCIM provisioning | `Created user via SCIM`<br/>`Updated user via SCIM`<br/>`Deleted user via SCIM`<br/>`Created group via SCIM`<br/>`Updated group via SCIM`<br/>`Deleted group via SCIM`<br/>`Added group members via SCIM`<br/>`Removed group members via SCIM`<br/>`Updated group membership via SCIM` |
 | [Custom roles](/admin/users-and-permissions/custom-roles) | `Created role`<br/>`Deleted role`<br/>`Updated role`<br/>`Assigned role to user`<br/>`Assigned roles to user`<br/>`Removed role from user` |
 | Authentication | `Logged in`<br/>`Logged out`<br/>`Redirected to SAML provider for login`<br/>`Logged in via SAML` |
 | Account and [single sign-on](/admin/sso) | `Updated account settings`<br/>`Updated account authentication configuration`<br/>`Updated account SAML configuration`<br/>`Uploaded identity provider metadata file` |