Oliver Siebenmarck {Polymetis Apps} Community Champion

@Emre Toptancı _OBSS_ It's really been a long time, but I'm 99% sure that we used HTTP API to set things up. It typically takes some time for the first events to show up. I would set it up and give it a couple of hours before checking again. Hope that helps, Oliver

Hi Clara, Atlassian has one page describing the integration with Segment here: https://developer.atlassian.com/platform/marketplace/marketplace-integration-with-segment/#marketplace-integration-with-segment They also have sample payloads there, which should give you a good indication of what's possible. Segment itself is…

Hi @Clara Davis , Segment works really well and the setup on MPAC is relatively quick: Just add your write key to receive events. Events do contain UTM tags, referrers and more. A common approach might be gather events using Segment and then sending those of to Amplitude our whatever tool your team likes to use.

Hi @Clara Davis , There's no page on the marketplace that shows actual rankings. What we are talking about here is the order in which apps are listed when you search for any terms. Say you are looking for an app that helps you deal with sensitive data. You might type 'PII' into the search box, hit enter and you'll be…

Hi @Alejandra Martin , You're actually already looking at the solution, it's Issue Security Levels (or Work Item Security Levels). The way to set things up, is to have a security level for these requests, let's say you call it "Closed". You can then manage who can access work items with that level set. Jira does actually…

Hi @Kim Howitt , Hi @David Cross , Thank you for this, that's an amazing feature to add! Like @Jared Schmitt I am wondering about the third parties you mentioned. We, and I believe others, too, are pretty particular about GDPR and InfoSec in general, so my first stop was Atlassian's list of…

Hi @Miriam Bailey , Welcome to the Community! Of course, the answers already given by @Rohitha Devi Pullepu , @Prachi Bolar, and @pawarsachin84 are correct – labels are just free text fields that users can fill with whatever label they want. However, in contrast to regular text fields, labels come with suggestions based on…

Hi @Kid Bachan , Welcome to the Community! This (Data Leak Prevention or DLP) is one of my favorite topics, so let me jump with a slightly longish answer. (Quick disclaimer: The company I work for (Polymetis Apps) has some experience in this, as we have a couple of apps dedicated to DLP on Jira & Confluence.) So, first of…

Wow, that's a big new feature! Will the backups include the data from any installed Runs-on-Atlassian apps? 

Hi @eduardo , As you might already have guessed, you have multiple options here. I'll try my best to give you an unbiased overview of what's possible, but pleas note that I work for Polymetis Apps, one of the vendors in this space. First of all, the Atlassian product in this space is Guard Premium. It's unfortunately not…

Hi @bmamlin , So, you've created one of those new, scoped API tokens. These are a great addition from a security perspective, but unfortunately not very well documented. Which is why you're struggling here. So far the un-scoped tokens used an endpoint like the one you tried, but the new scoped tokens need endpoints…

Hi @Joost Landgraf , Welcome to the community! The new scopes come in two flavors: classic and granular. The first scope in your list (read:jira-work) should already be enough to hit the new search endpoint at: /rest/api/3/search/jql When you use the scoped token, what kind of error message are you seeing? Or is does the…

Hi @Luis Blanche , Welcome to the community! The scoped API tokens are relatively new and unfortunately not well-documented. One particular difference to the unscoped tokens is how the endpoint URL is constructed. Whereas unscoped tokens use an endpoint like the one you tried, the scoped tokens need endpoints constructed…

Hi @Roman , Out of the box, there is no option to use Jira Expressions in validators – this has nothing to do with being on the free plan. What you'll need is an app that brings custom validators. I'll unashamedly recommend our own app Cloud Workflows, but to be honest, there are quite a few out there, so pick one that you…

Hi @Natalia_Kovalchuk_SaaSJet_ , Some weeks (maybe months) ago, Atlassian switched the search engine used the marketplace. The most visible change should be the search suggestions when you type in a keyword, but I would not be surprised if the ranking parameters also changed. Without having checked this recently: I believe…

Hi @NEGAR JALALIAN , You are not alone in this, that's actually a quite common problem. There are a bunch of possible approaches to this, but currently the only 100% safe and secure solution to remove private information is to delete the issues in question. However, depending on the tradeoffs you are willing to make or are…

Hey @Yatish Madhav , There are two statements in that announcement that I would look at. First is this one: Forge will become Atlassian’s only app development platform, and we will progressively phase out support for Connect over an extended period of time. Which to me suggests that at some point in the future Connect will…

Quick clarification: While the default for Forge is that apps run on Atlassian's infrastructure, Forge Remote allows developers to build apps that run on their own servers. In that way, they can act similarly to Connect apps, although they still are Forge apps. Basically, you can decouple the part of the app that you…

Hi @Jay Shah , Welcome to the community! The length of API tokens on Atlassian Cloud is a security feature that you have no control over. It also makes sense, as it reduces the risk of the tokens being guessed (ex. someone using a brute-force attack). In most cases this is a welcome thing and you should try to make it…

Hi @Laura Morgan , The good news is, that in cloud labels are case-insensitive, ie 'refactor' and 'Refactor' would be the same label anyway. But what about cases where is not just a matter of capitalization? When you have something like 'refactor' and 're-factor'? There's multiple approaches you can take here – with or…

Hi @Gerben Heinen , I don't believe there's an ideal solution out there right now, but if you have access to Rovo, that would be my first stop. The way to go about this, would be to experiment with a prompt like this: Given the following categories [LIST_OF_YOUR_LABELS], which category would you say this issue belongs in?…

Hi @Krishnan , Since my last reply on this topic, Atlassian have publicly posted an RFC on the developer community that might be an interesting read. While RFC-60 (or any other RFC) is by no means a guaranteed roadmap entry, it does provide some insight into Atlassian thinking around a topic. The TL;DR of the RFC is that…

Hi @Ananth Kamaraj , Welcome to the community! So, @Marc -Devoteam- is right, once an admin deactivates API tokens, the standard way of authentication will not work any more. However, there are still options! Whether that's a good idea or a workable approach in your case, I cannot say – you should discuss that with your…

Hi @GLK Indrani , Welcome to the community! First of all, you should avoid posting your cookie headers here. It's way too easy for a malicious actor to take over your session that way. Now, when working with the REST API, it's typically much easier to use an API token and basic auth. However, if you are dead set on using…

Hi @Denis Rousselle , I cannot resist a good GraphQL puzzle, so I spent some time with this. I believe you're not doing anything wrong really, much rather it could be that this particular mutation is not working currently. To quote the documentation: The field is extremely unstable. It can go through changes at any moment,…

Hi @Mayur Gaikwad/Tech PMO , As always, there's multiple ways to do this. My personal favorite is using Jira Expressions, as you can get a lot of information in a single call. For example, to get all subtasks you could just send this expression to the endpoint: issue.subtasks The fun starts when you combine Jira…

Hi @Mick Szucs , Hi @Jennifer D Smith , As @April Chi pointed out, there is the Teams REST API. Unfortunately, that does not include a way to get a list of teams, which is a bit sad. However, there's also the GraphQL Teams API, which you can actually use to search for Teams. One simple way to get all the teams in a given…

Hi @Mei Tang , TL;DR Yes, if you have exposed your credentials, you should revoke those immediately and create new ones. But as we are talking risks here, let's go through things in detail. If you're on reputable website, it is unlikely that someone sits on the other side and scans for credentials or passwords constantly.…

Hi @janic.siegenthaler , Indeed, there seems to have been an update since I first answered this question. It is now possible to block the creation/use of API tokens, at least with Atlassian Access. To quote the documentation: Admins can control whether managed users are allowed to create new user API tokens or use existing…

Hi @Andreas Friberg - TP , I believe this is now generally available – we have been using it for months now. Snyk have an onboarding video to help you set it up here: https://www.youtube.com/watch?v=CiAJfxuqOGk You will definitely need to install their app from the marketplace, so make sure you have the correct permissions…