From f6e520a9c860089c28e42ebeddf363c796dec282 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 12 Aug 2026 00:22:23 +0000
Subject: [PATCH] docs: document embedded-user AI billing and correct SCIM
 audit log events
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- AI Tokens: embedded users (Analytics Chat, Creator Mode, embedded
  dashboards) aren't billed as seats, so as of CUB-3784 their AI token
  spend is no longer covered by per-seat grants — it draws from token
  packages / on-demand overage instead. Document this so admins aren't
  surprised by embedded usage showing up as overage on their bill.
- Audit Log: SCIM group writes used to log a single generic
  "Updated group via SCIM" event. Membership changes now get specific
  titles (Added/Removed/Updated group membership via SCIM); add the
  three new event names to the event types table.
---
 docs-mintlify/admin/account-billing/ai-tokens.mdx | 15 +++++++++++++++
 docs-mintlify/admin/monitoring/audit-log.mdx      |  2 +-
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/docs-mintlify/admin/account-billing/ai-tokens.mdx b/docs-mintlify/admin/account-billing/ai-tokens.mdx
index a3b745eaa341c..e0cf356a2f198 100644
--- a/docs-mintlify/admin/account-billing/ai-tokens.mdx
+++ b/docs-mintlify/admin/account-billing/ai-tokens.mdx
@@ -73,6 +73,21 @@ Contact your account executive for details on purchasing token packages.
 Each user on a free plan receives an individual monthly token allowance. This
 allowance resets at the start of each calendar month.
 
+## Embedded users
+
+AI token spend by [embedded](/embedding/iframe) end users — through Analytics
+Chat, Creator Mode, or an embedded dashboard's AI features — is tracked
+separately from regular seats. Embedded users aren't billed as seats, so their
+usage isn't covered by [per-seat token grants](#per-seat-token-grants):
+
+- **Contract customers**: embedded AI spend draws from [token
+  packages](#token-packages) first, then continues as on-demand overage.
+- **On-demand customers**: embedded AI spend is billed directly as [on-demand
+  consumption](#on-demand-consumption), subject to the account's on-demand
+  spending limit if one is set.
+- **Free plan**: embedded users share the account's [free tier](#free-tier)
+  allowance, since free accounts have no seats to grant tokens against.
+
 ## Tracking usage
 
 Administrators can monitor token consumption through the **AI Tokens Usage**
diff --git a/docs-mintlify/admin/monitoring/audit-log.mdx b/docs-mintlify/admin/monitoring/audit-log.mdx
index 2bd46995bd244..a92d8c42e4e93 100644
--- a/docs-mintlify/admin/monitoring/audit-log.mdx
+++ b/docs-mintlify/admin/monitoring/audit-log.mdx
@@ -76,7 +76,7 @@ Audit Log collects the following types of events:
 | Category | Event type |
 | --- | --- |
 | Users | `Created user`<br/>`Deleted user`<br/>`Invited user`<br/>`Updated user profile`<br/>`Requested password reset`<br/>`Changed password` |
-| SCIM provisioning | `Created user via SCIM`<br/>`Updated user via SCIM`<br/>`Deleted user via SCIM`<br/>`Created group via SCIM`<br/>`Updated group via SCIM`<br/>`Deleted group via SCIM` |
+| SCIM provisioning | `Created user via SCIM`<br/>`Updated user via SCIM`<br/>`Deleted user via SCIM`<br/>`Created group via SCIM`<br/>`Updated group via SCIM`<br/>`Deleted group via SCIM`<br/>`Added group members via SCIM`<br/>`Removed group members via SCIM`<br/>`Updated group membership via SCIM` |
 | [Custom roles](/admin/users-and-permissions/custom-roles) | `Created role`<br/>`Deleted role`<br/>`Updated role`<br/>`Assigned role to user`<br/>`Assigned roles to user`<br/>`Removed role from user` |
 | Authentication | `Logged in`<br/>`Logged out`<br/>`Redirected to SAML provider for login`<br/>`Logged in via SAML` |
 | Account and [single sign-on](/admin/sso) | `Updated account settings`<br/>`Updated account authentication configuration`<br/>`Updated account SAML configuration`<br/>`Uploaded identity provider metadata file` |