Is there a way to get an alert on admin actions?

Inna S

Hi, 

I had a user created in the subscription allegedly under my account. As I do not recall doing this, I wonder which of the operations I did perform could cause this. 

Unlike with other operations in the audit log, this user addition states the actor location as 'unavailable'.

I also see the Atlassian support engineer has created a user for himself without informing me, the subscription admin.

This all looks very troubling, especially in the cloud service.

So I'm looking for a way to receive real time alerts on any activity related to user creation, role assignment and group allocation.

Please share your experience and solutions to this situation.

Thank you,

Inna 

Bill Sheboy

Hi @Inna S 

In my opinion, there are definitely gaps in the information and reliability of the built-in admin logging of events with Jira Cloud.  For example some of the site admin actions in the log do not indicate who performed the action; some are not logged at all.

Until these functions are improved by our vendor, some possible options are:

• Contact Atlassian support to learn about that user which was created
• Investigate the marketplace to learn if there are better audit reporting addons
• Use a webhook to push out site changes to another tool.  We experimented with that second option to review the logs in SumoLogic; it helped but there were still gaps.
• Disciplined change management:
  • Limit the number of site admins,
  • Use a change-control project or Confluence page to log all planned site-admin-level changes, and
  • Have admins pair-program on all such changes.

Kind regards,
Bill