Description
The Atlassian Organization Audit solution for Microsoft Sentinel enables ingestion of organization audit events from Atlassian Cloud into Microsoft Sentinel through the Codeless Connector Framework (CCF). It provides comprehensive security monitoring and compliance auditing across Atlassian Cloud products including Jira, Confluence, Bitbucket, Trello, Opsgenie, Statuspage, and Loom. Audit events cover user management, authentication activity, group changes, product access modifications, administrative actions, and policy changes. For more information about the Atlassian Organization Events API, see the official Atlassian documentation: https://developer.atlassian.com/cloud/admin/organization/rest/
Underlying Microsoft Technologies used:
- Microsoft Sentinel
- Azure Monitor Logs
- Data Collection Rules (DCR)
- Codeless Connector Framework (CCF)
Dependencies:
- A valid Atlassian Cloud organization
- An Atlassian API key with the read-only `read:events:admin` OAuth scope
- API access to the Atlassian Organization Events API
- Version
- 3.0.2
- Declared author / publisher
- Microsoft - support@microsoft.com
- Support tier
- Microsoft
Related content
Links established from declared identifiers and solution manifests.
Source provenance
GitHubDisplayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.
- Commit
9800e51↗- Source identifier
azure-sentinel-solution-atlassianorganizationaudit
GSTEP / CATALOG TRACKING
Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC