I am using Jira for quite a time for project management. I have given members access to some of the clients.
Recently, I had one incident. One of our clients has directly added her team-mate to our project even if she was having only the member access.
Can you please help me with how this access works?