Guard - special Alerts

[Frank Drozdowski]

Hello!
Can I set up my own alert in Guard that notifies me when the permissions for an area are changed?
I would like the same for adding or removing users from an area.
Does anyone have any suggestions on how to set this up?

Thanks and best regards
Frank

[Ali Umut Terzi]

Hi @Frank Drozdowski 👋

Here’s what’s possible and how you can approach it:

1️⃣ Alerts for permission changes

Currently, Guard (Access) doesn’t provide a direct “alert” configuration for permission or group membership changes in Confluence areas/spaces.
However, you can achieve a similar result in a few ways depending on your setup:

• Using Atlassian Guard → Audit Log notifications:
  Go to admin.atlassian.com → Security → Audit log.
  You can filter events related to “permission changes” or “group membership updates” and export or review them regularly.
  (Pro tip: You can integrate this log with external monitoring tools via API or scheduled exports to generate notifications.)
• If you’re on Cloud Enterprise:
  Atlassian offers organization-level audit event streaming — you can connect it to Splunk, Datadog, or AWS CloudWatch and set up real-time alerts whenever a permission or group membership event occurs.

2️⃣ For adding/removing users

If your goal is to track when someone is added or removed from a Confluence space or group:

• In Guard, navigate to Directory → Groups
• Use the Audit log filter Membership changed
• Again, this can be exported or monitored using event streaming as above.

3️⃣ Alternative workaround

If you’re mainly managing access within Confluence (not Guard):

• You can use Confluence’s Space Permissions Audit Log (under Space Settings → Permissions → View change history)
• While it doesn’t send alerts, it’s the fastest native way to check who changed what, and when.

Hope this will helpfull.

[Benedetta Russo]

Hi Frank,

Yes — you can create a custom Guard alert for permission or user changes by monitoring audit logs for those specific events. In Guard, set up a rule that triggers when:

A permission change occurs in an area (event type like permission.updated), or

A user is added or removed (event types user.added_to_area or user.removed_from_area).

Then, configure your preferred notification channel (email, Slack, etc.) for that rule.

If your Guard version doesn’t directly support these triggers, you can integrate with the audit log API and use an external script or automation tool (e.g. Power Automate, Zapier) to send alerts.