• Products
  • Documentation
  • Resources

Manage your users’ third-party apps

We’re currently rolling out changes that affect the content on this page. From your organization at admin.atlassian.com, if the Users list and Groups list are under the Directory tab, you have the improved user management experience. We’ll note changes for the improved experience in the content below.

A diagram of an new admin.atlassian.com view that shows a new Directory tab instead of Users and Groups

 

As a site/organization administrator, you can use the connected apps screen to manage apps where a user has granted access to content on site using three-legged OAuth (3LO). These can be Forge apps or third-party apps for Jira and Confluence using OAuth 2.0 (3LO), such as the Atlassian extension for VS Code.

Revoke app access by user

As a site/organization administrator, you can remove a user's grants for a connected app. This is useful when the app has changed and the user has grants that are no longer required.

To revoke a user from a connected app:

  1. Go to admin.atlassian.com. Select your organization if you have more than one.

  2. Select the site's name and URL to open the Admin for that site.
    This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.

  3. Under Site settings, select Connected apps.

  4. Select Manage authorization for the app.

  5. Find the user to remove, or use the search filter box if the app has many users.

  6. Select Revoke to revoke the user's grants.

The connected app will no longer have access to your site as the revoked user.

Note that a user can revoke their app grants at any time using their own connected apps screen.

Uninstall an app

Aside from managing single users, site/organization administrators can uninstall apps from an Atlassian site. This process removes all user access to the app. You should warn your users that the app is about to uninstalled from your site beforehand.

To uninstall a connected app from your site:

  1. Go to admin.atlassian.com. Select your organization if you have more than one.

  2. Select the site's name and URL to open the Admin for that site.
    This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.

  3. Under Site settings, select Connected apps.

  4. Select Manage authorization for the app.

  5. Select Uninstall.

For Forge apps, the Uninstall button revokes all user and system user grants.

For OAuth 2.0 (3LO) apps such as “Atlassian for VS Code”, the Uninstall button revokes all users.

Uninstalling an app requires all connected users to be removed first. As this is a slow operation with large numbers of users, the process is automated for you. You can monitor the progress from the connected apps screen. Once all users are removed, the app is uninstalled.

Troubleshoot an app

If you experience an issue with an installed app, the app vendor may need access to your app logs in order to fix the issue. We recommend giving the app vendor continuous access to your logs, as this will help them solve the problem more quickly than downloading and sending the logs manually. However, if you want to check the content of the logs, you can download and review the logs before allowing access.

Enable continuous log access

To enable continuous log access:

  1. Go to admin.atlassian.com. Select your organization if you have more than one.

  2. Select the site's name and URL to open the Admin for that site.
    This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.

  3. Under Site settings, select Connected apps.

  4. Next to the app you want to enable logs for, select > View app details.

    A screen like this appears, showing the details of your app and the controls for enabling or disabling access to your site's logs.

The screen shows the details of your app and the controls for enabling or disabling access to your site's logs.

5. Go to Share your app logs.

6. Read through the description of what enabling access to logs allows.

7. Select Enable log access.

8. A modal appears with more details about what sharing logs lets the vendor see. Select Enable.

Granting log access will give vendors access to logs for up to 60 days ago, even if sharing wasn’t active before then. When you disable their access to logs, they will no longer be able to see any logs that have been created inside your site.

You can disable log access at any time.

Download logs

To download logs:

  1. Go to admin.atlassian.com. Select your organization if you have more than one.

  2. Select the site's name and URL to open the Admin for that site.
    This step is different if you have the improved user management experience. Select Products then select the site from the left hand side.

  3. Under Site settings, select Connected apps.

  4. Next to the app you want to download logs for, select > Download logs.

    A modal appears like this one, giving a preview of the logs you're about to download.

A preview of the logs you're about to download, with start and end dates buttons.

5. If necessary, use the date picker to choose a date range and select Apply. Note, the dates in the date picker are in your local time, and the dates in the logs are in Coordinated Universal Time (UTC).

6. Select Download.

7. Send the downloaded log file to the app vendor. If you have any concerns that the logs might contain personal or confidential data, you can always review the file before sending.

 

Additional Help