How to manage access to external company domain

Question

Dear all,

I need to cover a case where we have a customer which have their company employee access to Jira by the following settings :

* On site access/Approve domain -> they have set their company domain in "Approve the following domains option"

* in Access Requests , they have set "All new users on non-public domains can request access"

By default product access is set to Jira Software, Confluence and Jira Service Management

Question I have is as below :

Q1 :
My customer is willing to give access to external agencies to their instance by adding agencies domain in the list of Approve domain, but we do not want that Agencies user get access by them self to the site, we need to force them sending a request submit for approval even if their domain is in the list of approval

Which settings offer that in addition to existing settings mentionned above ?

Q2 : 
By default our customer product access is giving acces to Jira, Service Management and confluence. Is it possible for agencies domain, to give access by default to only Service Mangement instead of everything ?

Q3 : handling access through approved domain the way it is done so far is it secure enough ?

Thanks for help

Calderara Serge · Answer

@Pramodh M thanks for your reply, so based on your answer if I add access to agency domains from the Access Request section, this will force the approval correct ?

I should no add them from the Approved domain list correct ?

What about my Q3 ?

Based on licence account my customer have standard plan, and we have actually 100 users. Do you know if the standard plan is limited to 100 users or it can goes over ?

regards

Pramodh M · Answer

@Calderara Serge

In Access Requests, add the domain of your external agencies.

Whenever the external agency customers need access to your site, they need approval from the org admin to get access.

Handling access through approved domain option for your employees is secure (make sure you have enough licenses) otherwise selecting the access requests option for your internal users as well is the suitable option

Thanks,
Pramodh