Issue Summary

As an org admin, I’d like to know when Atlassian engineers access my site, what actions they perform and when they’re access is revoked, such that I have a complete picture of what they do, and an evidence trail.

Steps to Reproduce

1. Support engineer login to the customer's instance.
2. Open the audit logs that captures all the activity of logging into the site, performing all the activities here:https://admin.atlassian.com/o/<Org_id>/audit-log
3. Does not capture the user exiting the groups, site and Org.

Expected Results

• An audit log event should be sent when a support engineer is added to the site, highlighting that this operation took place
• An audit log event should be sent when a support engineer is removed from a site, highlighting that this operation took place

Actual Results

Just logs the information of user added to the site, highlights the operations took place but does not logs the removed events from the site.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available