Learn about security solutions and standards
Care about security? We do too. Learn what Atlassian does and what you can do too.
Manage your users’ third-party apps
We’re currently rolling out changes that affect the content on this page. From your organization at admin.atlassian.com, if the Users list and Groups list are under the Directory tab, you have the improved user management experience. We’ll note changes for the improved experience in the content below. |
As a site/organization administrator, you can use the connected apps screen to manage apps where a user has granted access to content on site using three-legged OAuth (3LO). These can be Forge apps or third-party apps for Jira and Confluence using OAuth 2.0 (3LO), such as the Atlassian extension for VS Code.
Revoke app access by user
As a site/organization administrator, you can remove a user's grants for a connected app. This is useful when the app has changed and the user has grants that are no longer required.
To revoke a user from a connected app:
Go to admin.atlassian.com. Select your organization if you have more than one.
Select the site's name and URL to open the Admin for that site.
This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.Under Site settings, select Connected apps.
Select Manage authorization for the app.
Find the user to remove, or use the search filter box if the app has many users.
Select Revoke to revoke the user's grants.
The connected app will no longer have access to your site as the revoked user.
Note that a user can revoke their app grants at any time using their own connected apps screen.
Uninstall an app
Aside from managing single users, site/organization administrators can uninstall apps from an Atlassian site. This process removes all user access to the app. You should warn your users that the app is about to uninstalled from your site beforehand.
To uninstall a connected app from your site:
Go to admin.atlassian.com. Select your organization if you have more than one.
Select the site's name and URL to open the Admin for that site.
This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.Under Site settings, select Connected apps.
Select Manage authorization for the app.
Select Uninstall.
For Forge apps, the Uninstall button revokes all user and system user grants.
For OAuth 2.0 (3LO) apps such as “Atlassian for VS Code”, the Uninstall button revokes all users.
Uninstalling an app requires all connected users to be removed first. As this is a slow operation with large numbers of users, the process is automated for you. You can monitor the progress from the connected apps screen. Once all users are removed, the app is uninstalled.
Troubleshoot an app
When you install a new app, the app vendor gets access to your app logs. This means that if you experience an issue with the installed app, the vendor can use the logs to quickly solve the problem. If you want to check the content of the logs, you can download and review them. You can also disable log access at any time.
Granting log access will give vendors access to logs for up to 60 days ago, even if sharing wasn’t active before then. When you disable their access to logs, they will no longer be able to see any logs that have been created inside your site.
You can disable log access at any time.
Download logs
To download logs:
Go to admin.atlassian.com. Select your organization if you have more than one.
Select the site's name and URL to open the Admin for that site.
This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.Under Site settings, select Connected apps.
Next to the app you want to download logs for, select > Download logs.
A modal appears like this one, giving a preview of the logs you're about to download.
5. If necessary, use the date picker to choose a date range and select Apply. Note, the dates in the date picker are in your local time, and the dates in the logs are in Coordinated Universal Time (UTC).
6. Select Download.
7. Send the downloaded log file to the app vendor. If you have any concerns that the logs might contain personal or confidential data, you can always review the file before sending.
Disable log access
To disable log access:
Go to admin.atlassian.com. Select your organization if you have more than one.
Select the site's name and URL to open the Admin for that site.
This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.Under Site settings, select Connected apps.
Next to the app you want to enable logs for, select > View app details.
A screen appears, showing the details of your app and the controls for enabling or disabling access to your site's logs.
Under the App logs access section, select Disable log access.
A modal appears with more details about disabling access. Select Disable.
The vendor will no longer be able to see any logs that have been created inside your site. You can re-enable log access at any time, from the same screen, and this will give vendors access to logs for up to 60 days ago, even if access was previously disabled.
You can check your log sharing history when you access your audit logs on admin.atlassian.com.
Was this helpful?