Set no access and no default groups for new users

[Iain Davidson]

For new users, I wish to set no automatic access to Jira, Confluence, Goals, etc.. all projects.

When I create a new user, the account is auto-magically added to "Confluence", "Jira", "Goals", and "Jira Service Management".

I want NOTHING when the new user logs into the site for the first time.

We want to manually assign only the proper groups later based on the new account supervisor's requests.

I have found similar articles and postings, but nothing that matches the current https://admin.atlassian.com/ site navigation.

[Trudy Claspill · Accepted solution]

Hello @Iain Davidson 

What steps are you executing to add the new user?

What type of product subscriptions do you have?

Are you utilizing Atlassian Guard?

Have you Claimed domains in your Organization, and if so, are these new users members of those domains?

[Iain Davidson]

Great questions.
1) I simply 'email invite' them to our Atlassian cloud site. When they log in using the invite link, several groups are automatically added to their account.  Giving them full access to our company's Confluence and Jira projects.  NOT WHAT I WANT. :)
2) Atlassian Cloud site..  "Jira Standard (82 users)" and "Confluence Standard (74 users)"
3) No other products, two additional plugins for exporting pages to Markdown files.
4) Yes, one claimed domain  "MyCompanyName.com" (not real name. :) but similar. )
5) I have put on security to only allow @@MyCompanyName.com" emails. 

[Trudy Claspill]

I don't have access to an environment where I can look at a set up, but I think you might find useful information here:

https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/

Under User Access there should be a page with a tab that lists "Any domain" and then domains you have claimed.

There should be an option (like a ... button) next to each one that allows you to drill into the app roles you want to give users of those domains by default.

It would not be enough to restrict it for your own named domain. You would need to restrict that on the "Any domain" entry also.

[Iain Davidson]

Ok, I think the link above is the correct directions to follow. Thanks !

Here's the complete quote from the page referenced above.

* Go to Your Admin Page. Select your organization if you have more than one.

* Select Apps > User access settings.

* Select Edit for “Any domain”.

* Select roles for the apps you want to give users from private domains access to.
(In my case, "None")

* Select the Required checkbox if you want to approve requests for access to that app. If you deselect this checkbox, users from private domains can join your app instantly.

* Choose when organization admins are notified of new users.

* Select Save.

[Shawn Doyle - ReleaseTEAM]

Hi @Iain Davidson 

When you create a new user are you adding them to groups?  It's possible the groups are getting them added to the products.

[Iain Davidson]

I only send an 'email invite' to a new company team member.  When they log on, their account is automagically added to several Confluence and Jira groups, which I don't want them to be members of.    I'll add different groups manually later.