Problem Definition

Currently, in Jira Data Center, when an action (such as an issue update, assignee change, or configuration modification) is performed using a Personal Access Token (PAT), the Audit Log attributes the action to the user who owns the token. However, there is no explicit indicator in the Audit Log UI or the standard event metadata to distinguish whether the action was performed via a standard UI login or programmatically via a PAT.

Suggested Solution

• Add a "Method" or "Authentication Type" field to Audit Log events to indicate if the action was performed via "Web UI", "Personal Access Token", or "Basic Auth".

• If a PAT was used, include the Token Name or a masked Token ID in the event details to help identify which specific automation/integration performed the action.