Is there any policy change about "Approved domains" default option

[Fan NF Hsiao (蕭乃凡)]

We found our site users can join products without admins approval since 2024/3/25.

It's an abnormal operation and It never happened on out site before.

After we check our settings, we found the "Admin approval" is unchecked

However, we didn't modify this setting. So we want to check if it's a policy change  from Atlassian. It impacts our user managenment and probably make us pay more for those users.

For now, we just checked "Admin approval" to stop user access product as we expected.

reference: Control how users get access to products | Atlassian Support

[Kishan Sharma]

Hi @Fan NF Hsiao (蕭乃凡) 

No there's no policy change from Atlassian. I would suggest you to check your Audit Log at https://admin.atlassian.com/ to see if anyone has changed this setting to allow users joining your products without admin approval. 

Your organization's audit log tracks activities that occurred from your organization and across your sites within the past 180 days. 

Search the audit log

The audit log lists activities that go as far back as 180 days.

1. Go to admin.atlassian.com. Select your organization if you have more than one.

2. Select Security > Audit log.

3. Enter your search criteria in the text field. You can search for activities with users' names, email addresses, group names, or site names. You must enter an exact term.

4. Narrow the search results by specifying the dates and activity.

5. Click Apply to search.

You should find something like - Added Jira to the approved domain mydomain without Admin Approval on https://mysite.atlassian.net in the activities along with the Actor who might have changed it.

[Fan NF Hsiao (蕭乃凡)]

Hi @Kishan Sharma 

Thank you for the quick support. The audit log helps me to investigate more.

But it's still weird. As I search audit log, I can see I added "Admin Approval" yesterday when I already found users joined domain by themself. It means user can join domain before I did any setup.

Here is reference about users can join domain without approval since March until I  stopped it yesterday.

Can you help us to confirm what happened?

[Kishan Sharma]

Hi @Fan NF Hsiao (蕭乃凡) 

Based on the first screenshot, it appears that you added the admin approval yesterday. However, the other screenshot indicates that a few users have joined your products without approval. It is possible that the setting was not in place earlier. Since we as community members do not have access to your site, I would recommend you to raise a ticket with Atlassian Support to investigate what might have caused this situation.

[Fan NF Hsiao (蕭乃凡)]

OK. I created a ticket to raise this issue. Thanks for your support.

[Kishan Sharma]

Glad to help @Fan NF Hsiao (蕭乃凡) Please feel free to share here once the root cause of the issue has been identified.