Add users with specific domain to group

[Anas Gueroihi]

When adding a user it will be added to jira-default-users group automatically. 

I created 2 new users groups in Jira:

• Internal users – all users with Company's email domain
• External users – all users without Company's email domain

I would love to know if there's an automatic way to add users to each of the groups according to their email domain. 

Thanks

[Jonas Nilsson _ Unitlane]

For this kind of internal/external split I would treat the group rule as an access-governance workflow, not only a one-time user-management task.

The practical checklist I would use:

- Confirm whether Atlassian Access + SCIM is available for the organization. If yes, group sync from the IdP is usually the cleaner long-term answer.
- If the site is on Free and this has to stay manual, keep the default group separate from your operational groups. The default group should not become the only signal for who is internal or external.
- Keep a small review record for the rule: which domains count as internal, who owns exceptions, and when the rule was last checked.
- Be careful with service accounts, app users, vendors, and contractors. Email-domain logic can misclassify them, and they often need a separate lane from normal employees.
- Check the billable access effect before and after the rule changes. A group rule can look correct while still keeping seats active in ways nobody owns later.

The risk is false confidence. The rule looks clean today, but six months later nobody knows which accounts were exceptions, which seats are still billable, or which access path is safe to remove.

The hard part is not just adding people to the right group today. It is making sure the rule stays reviewable when people leave, vendors change, or access is cleaned up later.

[Alina Chyzh_Grandia Solutions]

Hi, @Anas Gueroihi 

Unfortunately, Jira doesn't have a built-in way to automatically assign users to groups based on their email domain when they're added to your instance. The native group membership process is manual, so you'd typically need to go through Users and manually add each person to either your Internal or External group based on their domain.

If you're looking to automate this workflow, Automation Action Bundle for Jira can help by extending Jira's automation engine with an "Add Users to Groups" action (my team built this app). This would eliminate the manual sorting and ensure consistent group assignment based on the email domain pattern you specify.

Hope this helps

[Ollie Guan]

Hi @Anas Gueroihi ,

The official best practice is to use Atlassian Access with an Identity Provider (IdP) for domain verification and SCIM group syncing. For the Free plan, the most effective approach is to configure Approved Domains for seamless internal onboarding while maintaining manual invitations for external users to ensure correct group placement.

• https://support.atlassian.com/organization-administration/docs/verify-a-domain-to-manage-accounts/

• https://support.atlassian.com/user-management/docs/specify-approved-domains-for-users-to-join/