Uninvited user appeared on our site

[BetsyO]

Last week we installed Jira with the starter license for our work team, planning to expand the group of users later.  A few days later, I (as the admin) received an email from Jira telling me that our team is growing--someone from outside our team had added themselves!  I was surprised by this, thinking only people we invited could get in.  How could this have happened?

The user was from our company, someone with the some domain name in their email address.  I can't believe they somehow stumbled across the exact url name we set up for our jira instance.

Can anyone explain?

[Mikael Sandberg · Accepted solution]

Hi @BetsyO,

Welcome to the Atlassian Community.

It depends on how your site access setting is configured. If it is set to approve any domain or a list of domains then a user do not need an invite to join. If you set it to not approve any domain you have to invite users to join. See Site access settings improvements for more information. 

[BetsyO]

Thank you Mikael!  I have updated our site settings accordingly.  I very much appreciate the quick response.

Cheers!