User logins

[Barry Neilson]

Hi All,

A point of confusion for me.

I have a Jira project for which I am the administrator.

I am trying to setup users (to test this functionality).

• Are users required to have Atlassian accounts? 
• Can I simply setup a user such that they can login from anywhere without the need for them to make an Atlassian account? If so, how is this done?

In my tests, I would seem that I can create a new user within the project, but this is not visible to the overall account - there is no error, the user is not added to the main account.  it simply appears to make the user for the project, and that user then receives an error.  This is so bad. Is this the expected result?

However, If I create and invite the user to the main account, and then create that user in the project, the user must accept their invitation twice.  oh....dear.... this can't be right.

Can anybody offer a point of clarification?  Am I doing something wrong here?

Cheers

[Trudy Claspill]

Hello @Barry Neilson 

First, what is the project type that you are using? Get that information from the View All Projects page under the Projects menu.

If you are working with Software or Business projects then, yes, every user has to have any Atlassian Cloud account unless you want to enable Public/anonymous access to the project. And the account has to be granted access to your Jira product. Adding a user to a Role in the project does not do either of those things. 

You are not actually making the account in either case. When you invite the user Atlassian sends them an email. By responding to the prompt on the email the user is creating the account themselves. What you are doing is telling Atlassian Cloud that if an account is created with the specified email then you want that account to have access to your site and your product. Adding the user to projects only tells Atlassian what the account can access as long as it has access to your site and product.

At any time you could remove the accounts access to your product and/or your site. They would then be unable to access the project, even though the account still shows up in the project. You could the regrant the account site and product access, and the would again have access to the projects where they are granted a role.

[Barry Neilson]

Hi Trudy,

To answer your question, I am currently testing and trailing Jira cloud with the Type Team-Managed Business.

Thanks for your explanation. On first use I thought having to force users to create two separate logins - including an Atlassian account was a bit of an overreach.  Once Atlassian has user information, it is no longer in my control.  Atlassian, by extension, become an IT partner to whom I must concede my users data.

Now, I get that Atlassian has been in operation for over 20 years and perhaps this subject as never come up before now, but I find myself having to ask about security, controls and privacy.  I suppose being a cloud environment that Atlassian has total visibility over my data, users, projects, and documentation.  What controls has Atlassian in place to ensure my data, my users and their information is safe?

The questions arose when my users received several emails from Atlassian to accept the invite.

Thanks again for your response to my question.

[Trudy Claspill]

Hello @Barry Neilson 

For information on how Atlassian keeps data secure refer to their Trust Center information at

https://www.atlassian.com/trust

In addition be advised that any given Atlassian Cloud user account can have access to multiple sites and products under subscriptions from entirely separate companies. The users you invite to access your site and product may have access to other sites and products managed by other entities over which you have no control.

You can learn more about Atlassian Accounts here:

https://support.atlassian.com/atlassian-account/docs/what-is-an-atlassian-account/

If you are giving users access via emails that are assigned to the users by your company, you may want to look at information on Managed Accounts.

https://support.atlassian.com/user-management/docs/manage-your-organizations-atlassian-accounts/

[Barry Neilson]

Thank you again for your reply.

I looked into managed accounts, but I'm not sure if that is possible for my scenario being that Jira will be used across multiple domains / networks and as administrator, I do not own the domains \ networks on which Jira is to be used.

I any case, I may have a workaround, so the issue might be moot.

Thanks again for your response and advice.

Cheers