Anthropic Sensitive Claude Project Role Assigned to User

Last updated 2 days ago on 2026-09-23

Created 10 days ago on 2026-09-15

About

Detects when a Claude project owner or editor role is granted through a `role_assignment_granted` event. Project owners and editors can access project chats, artifacts, and knowledge bases that may hold sensitive data. An attacker with organization access can grant these roles to persist access to high-value project content without holding organization admin privileges.

Tags

Domain: GenAIPlatform: AnthropicData Source: Anthropic Audit LogsUse Case: Identity and Access AuditUse Case: Threat DetectionUse Case: UEBARule Type: New TermsTactic: PersistenceTactic: Privilege EscalationLanguage: kuery

Severity

medium

Risk Score

MITRE ATT&CK™

Persistence (TA0003)(external, opens in a new tab or window)

↳ Account Manipulation (T1098)(external, opens in a new tab or window)

Privilege Escalation (TA0004)(external, opens in a new tab or window)

↳ Account Manipulation (T1098)(external, opens in a new tab or window)

False Positive Examples

Legitimate project collaboration routinely adds owners and editors when teams spin up or staff Claude projects. Verify the project (`anthropic.audit.resource_id`), role, and available actor fields against expected membership changes. Shared service or automation accounts may receive editor access during content workflows. Confirm the assigner and affected project are expected for the workflow; grantee identity may require correlating org membership or `anthropic.audit.target_id` when the API supplies it.

License

Elastic License v2(external, opens in a new tab or window)

Definition

Rule Type: New Terms Rule
Integration Pack: Prebuilt Security Detection Rules
Index Patterns: logs-anthropic.audit-*
Related Integrations: anthropic(external, opens in a new tab or window)
Query

✄𐘗text code block:
✄𐘗data_stream.dataset: "anthropic.audit" and
    event.category: "iam" and
    event.action: "role_assignment_granted" and
    user.target.roles: ("chat_project:owner" or "chat_project:editor")

Install detection rules in Elastic Security

Detect Anthropic Sensitive Claude Project Role Assigned to User in the Elastic Security detection engine by installing this rule into your Elastic Stack.

To setup this rule, check out the installation guide for Prebuilt Security Detection Rules(external, opens in a new tab or window).