How to monitor/Audit access to sensitive projects in Jira

[Ashley Honeycutt]

We have a couple of projects that contain sensitive information and are subject to compliance requirements. We have a small handful of Jira administrators, but even their access to these projects should only be as-needed and needs to be auditable.

Due to this, I have two questions:

1. Is there anyway to set up monitoring on if admins grant themselves or others access to the content of a particular project?

2. Is there a way to audit if an admin has granted themselves or others access to a project?

I know there's the Audit section, but it doesn't appear to give the level of detail needed in compliance scenario.

Thank you!

[Bhanu]

Hi @Ashley Honeycutt

Jira does not have anything for detailed logging apart from the audit section events. You will need to add an external add-on to get the detailed monitoring for audit purposes.

For one off audit events, you can use script listeners for Jira which supports wide variety of events and get a email probably with the event details.

Default audit activities logged by Jira can be found here:

https://support.atlassian.com/jira-cloud-administration/docs/audit-activities-in-jira-applications/