Notes from the work

One email when a tutorial or migration write-up goes live. Nothing else, and an unsubscribe link in every email.

LeanZero

Two people in Romania doing Atlassian migrations, Forge apps and practical AI work for teams that would rather talk to the person doing the job. Most of what we learn ends up on this site.

Services

  • Atlassian migrations
  • Atlassian FastShift
  • Atlassian maintenance
  • Forge app development
  • AI development consultation

Topics

  • Jira
  • Jira Service Management
  • Confluence
  • Bitbucket
  • Atlassian Forge
  • Cloud Migration
  • Local AI
  • AI Coding
  • Certifications
  • Atlassian Team
  • All topics

Company

  • Blog
  • Tutorials
  • Contact

Community

  • Join Discord
  • Support this site

© 2026 LeanZero. All rights reserved.

Privacy policyTerms of service24/7 SupportTrust centerSecurityDPALegal notice
  1. Home
  2. Blog
Knowledge Base

Atlassian insights & tutorials

Real Atlassian solutions to real problems — no fluff, no SEO spam.

Read the latestFollow the tutorials
JiraConfiguration, workflows and fixes from real projectsLocal AIModels and agents running on your hardwareAI codingCoding tools and workflows tested in practice

Articles 4

All topicsAI CodingAtlassian ForgeAtlassian TeamBitbucketCertificationsCloud MigrationCogniRunnerConfluenceCost SlasherJiraJira Service ManagementLeanZero ManagementLocal AISentinel Vault
Can Rovo access SharePoint? What the Rovo SharePoint connector reads and how to limit it
ArticleConfluenceJira

Can Rovo access SharePoint? What the Rovo SharePoint connector reads and how to limit it

Yes, Rovo can read SharePoint and OneDrive through its SharePoint connector. We walked the setup on our test org up to Microsoft's sign-in page and captured both permission requests it makes. The first names its scopes; the second asks for .default, and only Microsoft's consent screen and Entra show what that covers.

Mihai PerdumOct 26, 202610 min read

More articles

Runs on Atlassian apps with AI: Sentinel Vault reviews Confluence with no API key
ArticleSentinel VaultConfluence

Runs on Atlassian apps with AI: Sentinel Vault reviews Confluence with no API key

Sentinel Vault is one of the Runs on Atlassian apps that review Confluence content with AI. It calls Atlassian-hosted LLMs through the Forge LLMs API, so there is no API key to paste and no external data egress declared. What that buys an admin, who pays for the tokens, how the cost ceiling actually works, and the four places it is weaker than it looks.

Gabriela PerdumOct 2, 202615 min read
Atlassian Data Security Policy: What It Blocks, What Needs Guard, and Migrations
ArticleCloud MigrationConfluence

Atlassian Data Security Policy: What It Blocks, What Needs Guard, and Migrations

An Atlassian data security policy has seven controls, and only one of them works without Atlassian Guard: blocking all Marketplace and custom apps from chosen spaces. This post walks through what each control blocks, what the app access rule really takes away from an app, what the admin API says when you try a Guard control without Guard, and what happens to policies and classification levels on a Data Center to Cloud or Cloud to Cloud migration.

Gabriela PerdumSep 26, 202611 min read
Migrate Jira users and groups: the same-name group merge that escalates permissions
ArticleCloud Migration

Migrate Jira users and groups: the same-name group merge that escalates permissions

When you migrate Jira users and groups, a group whose name already exists on the Cloud site is linked to it by name. Its members inherit whatever that Cloud group can do. Here is how it works in JCMA and in Cloud-to-Cloud copy, and the audit to run first.

Mihai PerdumSep 24, 20265 min read

Found my advice helpful?

If I helped you solve something for free, coffee money is always appreciated (but never expected).

Buy Me a Coffee

Join the community

Join the community to ask questions, share your work, and connect with other professionals.

Join Discord