Jira
Visualize Jira projects, users, and issues, map Jira users to employees, and monitor changes through queries and alerts.
- Installation guide
- Jira data model
Installation
To use this integration, JupiterOne requires the hostname for your Jira organization. JupiterOne also requires the username/email and an API key for a user having the correct permissions granted.
The integration supports Jira Cloud with Jira API v3 and Jira Data Center with Jira API v2. Other setups may work.
Configuration in Jira
Configure an User for API Access
Option 1 - Create a New User
- Create a new service account for JupiterOne use or use an existing account.
- Log in to Jira and navigate to User Management.
- Send an invite to the service account.
Option 2 - Leverage an Existing User
Before you use an existing user, you should verify the appropriate permissions are configured/can be added to the account (see the Permissions section below).
Ensure you have the ability to log in to the user's Jira account.
Permissions
Authorize the user to read groups and users by granting the "Browse Users" global permission. This allows JupiterOne to provide visibility into Jira access.
Authorize browse access to projects configured in JupiterOne. Use group, project, role, and issue security features of Jira to manage the user's access. Note that restricting to read-only access will require explicit removal of write permissions. Please see the Jira article on How to Create a Read Only User.
Authorize "Create Issues" permissions in projects that serve as JupiterOne Alert Rule action targets.
Create an API Token
Log in to Jira as the JupiterOne user and follow the Jira guide to create an API token.
Configuration in JupiterOne
To install the Jira integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select Jira. Click New Instance to begin configuring your integration, providing the following:
The Account Name used to identify the Jira account in JupiterOne. Ingested entities will have this value stored in
tag.AccountName
when theAccountName
toggle is enabled.Description to assist in identifying the integration instance, if desired.
Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as
DISABLED
and manually execute the integration.Hostname of your organization.
User Email used to authenticate with Jira.
User Password associated with the user email, or the API Key if the password requires MFA.
Project Keys that the integration will retrieve data from.
Click Create once all values are provided to finalize the integration.
Next steps
Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.
Data Model
Entities
The following entities are created:
Resources | Entity _type | Entity _class |
---|---|---|
Account | jira_account | Account |
Jira Issue | jira_issue | Record, Issue |
Jira Project | jira_project | Project |
Jira User | jira_user | User |
Relationships
The following relationships are created:
Source Entity _type | Relationship _class | Target Entity _type |
---|---|---|
jira_account | HAS | jira_project |
jira_account | HAS | jira_user |
jira_project | HAS | jira_issue |
jira_user | CREATED | jira_issue |
jira_user | REPORTED | jira_issue |