Configure Atlassian Jira Cloud for the Next Generation API Data Protection

Configure Atlassian Jira Cloud for Next Generation API Data Protection

To configure Atlassian Jira Cloud for the Next Generation API Data Protection, follow the instructions below.

Before configuring Atlassian Jira Cloud for the Next Generation API Data Protection, review the prerequisite.

You require an Atlassian standard, premium or enterprise subscription plan.
An Atlassian site-admin account with the following permissions:
- Global Permissions: Administer Jira and Browse users and groupsProject Permissions: Browse Projects
Refer to manage-global-permissions and manage-project-permissions for more information
Important
Netskope recommends to create a dedicated service account (with appropriate permission) exclusively for the Netskope integration. Revoking access to this service account will break the integration with Netskope. Creating a dedicated service account will ensure that the integration with Netskope will not break due to an exiting employee, and consequently a deactivation of the account.
If you have guest or external users in your SaaS environment belonging to domains considered internal, you must set the appropriate internal domains for Netskope to classify exposure accurately. To set up internal domains, follow this article.

To authorize Netskope to access your Atlassian Jira Cloud account, follow the steps below:

Log in to the Netskope tenant UI and go to Settings > Configure App Access > Next Gen > CASB API.
Under Apps, select Jira and click Setup CASB API Instance.
The Setup Instance window opens.
Under Site Domain, enter the fully-qualified domain name of the Atlassian account (example: mycompany.atlassian.net).
Under Administrator Email, enter the email address of the user who will receive an email notification when a policy violation or event triggers. This step is optional.
Under Instance Name, enter a name of the SaaS app instance. This step is optional and if left blank, Netskope will determine the name of the app instance post grant.
Click Grant Access.
You will be redirected to the Atlassian sign-in page.
Login with the Atlassian site-admin account.
Review the permissions requested.
Note
To know more about the permissions, see Permissions Required for Atlassian Jira Cloud.
On the Authorize for: drop-down list, select the site domain you entered in step 3.
Click Accept.
When the configuration results page opens, click Close.

Refresh your browser and you will see a green check icon next to the instance name.

You can receive audit events and standard user behavior analytic alerts in Skope IT. A list of audit events are available here. To know more: Next Generation API Data Protection Skope IT Events.