Disable Atlassian CLI

[Dreymann_ Thomas]

Hi,

I tested acli in our environment and yes, you can do quite a lot with it.

But unfortunately, I also saw that you can make bulk changes, which were disabled in our configuration. 

Anyway, I would like it if we could disable the acli functionality in our environment altogether.

Are there any options for this?

Best Regards
Thomas

[Aaron Pavez _ServiceRocket_ · Accepted solution]

Hi @Dreymann_ Thomas 

Since anyone with an account can create an API token to access the REST API, you could Block user API token access as mentioned here:

https://support.atlassian.com/security-and-access-policies/docs/set-api-token-access/

But you need an Atlassian guard

https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-guard/

You can also revoke user APIs. But that will take time. It might be worth creating a script for this.

Revoke a user’s API tokens

https://support.atlassian.com/user-management/docs/make-changes-to-a-managed-user-account/

Regards

[Dreymann_ Thomas]

Hi @Aaron Pavez _ServiceRocket_ 

thanks for your message and the hit for deactivating this possibilities!

Best Regards

[Nikola Perisic]

Hello @Dreymann_ Thomas 

1. Go to Atlassian Administration.

2. If you have multiple organizations, select the one you have installed Rovo Dev Agents in.

3. Select Apps (may also be called Products) from the top navigation.

4. Under Sites and products on the left sidebar, select your site.

5. Under Application settings on the left sidebar, select Rovo Dev Agents.

6. Under Rovo Dev CLI, select Set up Rovo Dev CLI.

7. Toggle the feature on or off.

[Dreymann_ Thomas]

Hej @Nikola Perisic ,

are you sure that I have to turn off Rovo Dev CLI for the new tool names atlassian CLI (ACLI). I mean this here: https://www.atlassian.com/blog/jira/atlassian-command-line-interface.

[Nikola Perisic]

@Dreymann_ Thomas 

There isn't a specific documentation for the Atlassian CLI uninstall.Since the command 

brew install acli

was used to install it, try with brew uninstall acli. 

[Dreymann_ Thomas]

@Nikola Perisic : Well, what's important to me is that no users should be able to use ACLI without us administrators noticing. 

I think that would be necessary, especially since I saw that there is a bulk function that I had disabled as a permission for users, but with ACLI you could use it.

[Nikola Perisic]

@Dreymann_ Thomas 

I understand but the last comment is not matching with the original post. Which operation you would like to accomplish?

[Dreymann_ Thomas]

@Nikola Perisic 

Well, I tried ACLI and saw that I can perform BULK changes even though I have disabled this function for users. I think that's dangerous!
Therefore, I would like to completely disable the use of ACLI for all users.
So my main point is to disable ACLI.

[Nikola Perisic]

@Dreymann_ Thomas 

Which operating system are you using?

Depending on that commands will be different.

For macOS it's brew uninstall atlassian-cli.

[Dreymann_ Thomas]

@Nikola Perisic 
I know how to uninstall acli from the computer - but the thing is, that all users could install acli and build up a connection to our system. That's that what I want to prevent.

by the way - thanks for understanding me ;-) 

[Nikola Perisic]

@Dreymann_ Thomas 

There isn't really a way to prevent the users to install the CLI or even limit to a certain number of users. Ideally a data security policy would be created, but this doesn't exist within Atlassian. 

[Dreymann_ Thomas]

@Nikola Perisic 

OK, thank you for the information and your patience. 

Have a nice day and take care!