Audit tools for portal-only customer accounts

[Daniel Szewczyk]

Hello,

To clarify - when I refer to customer account, I mean a Jira Service Management portal-only customer account.

We are looking for a tool - a plugin or service that will allow us to better manage access to Jira and Confluence for customer accounts.
Currently, Atlassian does not provide any possibility to check what (projects, spaces) a particular customer account has access to. The only thing left is to manually enter each project and check if the customer account is there and if it is added to some organisation, which with hundreds of projects and thousands of client accounts is practically impossible to handle.
I imagine that every larger company should have means to perform audit of accounts and accesses, so I suspect that someone has already approached this topic and may have found a solution or developed a tool or plugin for that purpose.

To sum up, what we need:
1. The ability to report/check a customer account in terms of access to various projects or spaces (and organisations) - export customer accounts along with information on which organisation they belong to and the status of their account.
2. The ability to report/check who (which customer accounts) have access to a specific project or space from an admin/ central place.
3. The ability to search for customer accounts from specific email domains and report/check which projects they have access to.

Any help will be highly appreciated.
Thank you in advance! 
Regards,
Daniel

[David Nickell]

I don't think I have a complete answer for you, but I can hopefully get you started.

• As you say, these are portal only customers.  
• Portals provide the ability to allow for organization access.
• Users with the right domain can self register in the portal (there are settings for establishing organization - customer handling)

---

• This URL will help: /jira/servicedesk/projects/PROJECT/settings/customer-permissions
• This URL should give you visibility on the actual customers:  /jira/servicedesk/projects/PROJECT/customers
• This URL will help manage organizations:  jira/settings/products/servicedesk/organizations
• This URL will let you estabish your customer access rules:  /jira/settings/products/servicedesk/customer-access

---

When it comes to a way of getting reports or lists - some of those URLS will help.  I am a big API guy so here are 2 REST calls you can put in your browser (and/or retrieve with Excel or PowerBI)

• This REST call gives you a list of Organizations:  https://YOUR_INSTANCE/rest/servicedeskapi/organization
• Once you get your Organization IDs, theis REST call gives you a list of customers: https://YOUR_INSTANCE/rest/servicedeskapi/organization/1/user

---

Hopefully this will get you started.   When I first started Jira Admin work, we used to rely heavily on ISSUE SECURITY to manage many clients in one project.  But as you said, these are portal only customers so there is no need to go down the ISSUE SECURITY rabbit hole.   Just know that it is there if you need granular permissions for Jira users.