How can we identify the organization/site admin for a Jira account?

Question

If a team member originally signed up using our company domain (e.g., anysite.com), is there a way to identify who became the initial admin?

Similar to Microsoft 365, where the first person registering a domain becomes the initial admin. If that person is no longer with the company, what is the process to transfer/recover admin access?

Matthew Sinclair · Answer

Slight problem.

You won't see any orgs unless the account is claimed/managed by your org and said user is an admin that did the deed. You may be able to "Brute force" your way in as an org admin (to a point) to see users in there - but odds are going to drop quite a bit.

https://support.atlassian.com/organization-administration/docs/review-discovered-products/

"Apps do not appear in your Shadow IT apps when your managed account signed up for the app with an email address that your organization doesn’t manage. This means they changed their email before you verified your domain and before they became a managed account."

the inference being its only going to show you those accounts you manage.

As someone who helps oversee a 5000+ user org - we've only ever seen apps that spun up their own org's that have accounts we manage - never anyone external to that.

So this tool while useful - likely will not help solve the mystery in this context.

Oh and your Org needs to have an Atlassian Guard Standard Subscription or better - or be Enterprise tier'd.

Jeff Gibson · Answer

Also, check under Shadow IT - I found two sites that had been setup under our domain (basically the user create the sites with their company email address, and we have already setup to claim the domain. Done in error, but they needed to be deleted nonetheless.) Might not answer your specific question, but you may find other sites in there as well. If you're an Org Admin, you can add yourself as Site Admin and go thru the deletion process (which involves raising a ticket if Rovo has been enabled… which will have been done by default. A bit painful.)

Matthew Sinclair · Answer

Generally speaking the first user to spin up an org will be the "Billing Contact" on the Org/Site.

Its rare its ever changed - not saying this is a guarantee - but generally speaking whomever was there first - is the one that spun it up.

You'll want to do the things @Lalithesh talked about.

But you have good odds of ID'ing the original org admin if you target the Billing Contact. (Recently took ACP-520)

If the Org Admin is gone - you'll have to reach out to Support to transfer the org over - which will require verification and time. (Even if you are unable to recover the email address)

I suspect Domain ownership / Business documentation / etc. - will be required for that.