Skip to main content

Atlassian Support

  • Apps
  • Documentation
  • Resources
  • Contact us
  • Sign in
  • Sign in
Security and access policies
Security and access policies

Documentation

  • Learn about security solutions and standards
    • How to keep my organization secure?
    • Understand Atlassian Guard
    • Atlassian Guard app and plan availability
    • Supported security protocols for Atlassian cloud apps
  • Configure authentication policies for your organization
    • Understand authentication policies
    • What is a default authentication policy?
    • What is a non-billable policy?
    • Edit authentication settings and members
    • Authentication policy settings for your organizations
    • Automation for authentication policies
    • Configure single sign-on for your organization
      • Configure SAML single sign-on
        • Configure SAML single sign-on with an identity provider
        • Configure SAML single sign-on for Okta
        • Configure SAML single sign-on with AD FS
        • Configure SAML single sign-on for portal-only customers
        • Configure SAML single logout for Microsoft Entra
        • Configure SAML single logout for Okta
        • What is SAML single logout?
      • Require users to log in with Google
    • Configure settings for secure user login
      • Manage your password policy
      • Enforce two-step verification
      • Update idle session duration
      • Configure your organization’s login page
      • Set mobile app session expiration
      • Report and track data across your organization
        • Gain insights into app usage and security practices
        • Track storage and move data across apps
        • Export user accounts
          • Export users from a site
          • Export managed accounts
          • Export accounts from domains
        • Track user API tokens in your organization
          • Understand user API tokens
          • View API token activity
          • Revoke user API tokens
      • Manage data residency
        • Understand data residency
        • Move Atlassian app data to another location
        • Move your Marketplace apps data to another location
      • Maintain secure access to apps
        • Specify IP addresses for app access
        • Manage your organization's Marketplace and third-party apps
        • Manage third-party contacts
        • Mobile App Management for Atlassian mobile apps
          • Security settings in a mobile app policy
          • Create a mobile app policy
          • Edit a mobile app policy
          • Delete a mobile app policy
          • Test a mobile app policy
          • What will my users experience when I set a mobile policy?
          • Integrate Intune security in mobile app policy
        • Mobile Device Management (MDM) for Atlassian mobile apps
          • Create an AppConfig JSON string for iOS
          • What are the AppConfig settings for my MDM?
          • MDM security controls and supported apps
        • What happens when installed apps access third-party websites?
        • Manage Atlassian Rovo MCP server
          • Understand Atlassian Rovo MCP server
          • Monitor Atlassian Rovo MCP server activity
          • Control Atlassian Rovo MCP server settings
          • Available Atlassian Rovo MCP server domains
      • Classify your organization’s data
        • What is data classification?
        • What can users classify?
        • Manage classification levels
          • Create a classification level
          • Customize a classification level
          • Publish a classification level
          • Archive a classification level
          • Restore a classification level
        • Understand default classification levels
          • What is a default data classification level?
          • Set a default data classification level
      • Control how users outside your organization access apps
        • Understand external user security
          • Who are external users?
          • What is external user security?
          • What is an external user security policy?
          • What is API token access?
          • Available external user security policy settings
        • Edit external user security settings
          • Add test policy
          • Edit an external user security policy
          • Apply authorization method
          • Block user API token access
          • Control email content and notifications
          • Reset sessions for external users
          • Export external users
          • Make external user policy non-billable
          • Update session expiration
          • Create new external user security policy
          • Delete an external user security policy
      • Detect, investigate, and respond to threats
        • What is Guard Detect?
        • Add Guard Detect to your organization
        • Add people to Guard Detect
        • Manage detections
          • What user activity is detected?
          • What sensitive data is detected?
          • Exclude a page from a detection
          • Exclude a user from a detection
          • Create a custom detection
          • Request a new system detection
        • Manage alerts
          • View an alert
          • Get more or fewer alerts
          • Track the status of an alert
        • Send alerts to your own tools
          • Send alerts to Slack
          • Send alerts to Microsoft Teams
          • Send alerts to a SIEM or other tool
          • Send alerts to Jira
          • Send alerts to Opsgenie
          • Send alerts to Splunk
        • Investigate and remediate an alert
        • Respond to alerts
          • Create an automation rule
          • How does automation work with Guard Detect?
          • Redact sensitive data from Confluence
          • Redact sensitive data from Jira
          • What happens when data is redacted?
        • Guard Detect frequently asked questions
      • Manage your encryption
        • Use Customer-managed keys (CMK) encryption
          • What is CMK encryption?
          • Set up AWS account and create a KMS key policy
          • Enroll in CMK encryption policy
          • Set up CMK-enabled Atlassian apps
          • Update AWS KMS key policy for your Atlassian cloud organization
          • Revoke Atlassian access to your KMS encryption keys
          • Restore access to your CMK encryption keys
          • Request CMK re-encryption
          • Changelog for AWS KMS key policies
        • Use Bring Your Own Key (BYOK) encryption
          • What is BYOK encryption?
          • Set up an AWS account and create an IAM role
          • Set up BYOK encryption
          • Revoke access to your BYOK encryption keys
          • Restore access to your BYOK encryption keys
          • Request BYOK re-encryption
          • BYOK encryption limitations
        • Data managed with encryption
        • Encryption frequently asked questions
      • Monitor and audit activity in your organization
        • What activities does the audit log include?
        • View audit log activities
        • Audit log activities database
        • Export audit log
        • In-app data settings
        • Send audit log activities to another tool using webhooks
        • Use advanced search with Audit Log Query Language ALQL
          • What is advanced search in audit log?
          • ALQL fields
          • ALQL keywords
        • Manage event exclusions from your audit log
      • Secure your organization's data
        • What is a data security policy?
        • Create a data security policy
        • Edit a data security policy
        • Deactivate or delete a data security policy
        • Manage data security policy rules
          • Prevent data export
          • Prevent public links
          • Prevent anonymous access
          • Block Marketplace and custom app access
          • Marketplace and custom app access rule coverage summary
          • What cannot be blocked by the Marketplace and custom app access rule
          • Marketplace and custom app access rule coverage summary for Confluence Cloud
          • Marketplace and custom app access rule coverage summary for Jira Cloud
      1. Atlassian Support
      2. Security and access policies Resources
      3. Classify your organization’s data

      Manage classification levels

      A data classification level can be created, published, archived, and restored by an organization admin.

      • Create a classification level

        Create a classification level and make it available to users.

      • Customize a classification level

        Change classification level details like name, definition, and guidelines.

      • Publish a classification level

        Make classification levels available for users to apply to data.

      • Archive a classification level

        Archive classification levels you don’t need.

      • Restore a classification level

        Restore a classification level from the archive.

      Was this helpful?

      Still need help?

      The Atlassian Community is here for you.
      Ask the Community
      • Explore more
      • Create a classification level
      • Customize a classification level
      • Publish a classification level
      • Archive a classification level
      • Restore a classification level
      • Classify your organization’s data
      • What is data classification?
      • What can users classify?
      • Manage classification levels

      • Understand default classification levels
      CommunityQuestions, discussions, and articles
      Atlassian Logo
      • Accessibility
      • Notice at Collection
      • Privacy Policy
      • Terms of Use
      • Security
      • 2025 Atlassian