nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Shadow IT Apps still being created even with app access settings = Require admin review

Sue Wilson

Hi,

Our organization settings for Shadow IT Apps have been set to "Require admin review" for quite some time. We just completed a huge clean-up effort of old Shadow IT Apps. In the last 3 days alone, we've had 30+ new Shadow IT Apps created, all are for Loom. Loom has the same setting as Jira, JSM, Confluence, etc.

How can we stop the creation of these Loom Shadow IT Apps like we did all other products? Again, the app access settings are the same. Are we missing a setting?

Any insights would be much appreciated!

Sue

Accepted answers

Matthew Sinclair

Presuming your talking about managed accounts - should be working - its certainly working for us - we've had 3-4 occurrences a month until we found the control panel that requires admin reviews.

The only app we can't filter on ours is bitbucket but that's not yet an enterprise product from what I've read.

Keep in mind it only works on managed accounts - anything outside that - won't work.

Arkadiusz Wroblewski

Hello @Sue Wilson

One important detail: Atlassian confirms that Require admin review doesn't block all app creation paths:
https://support.atlassian.com/organization-administration/docs/why-can-users-create-products-when-requests-are-required/

Check whether these are new Loom instances or existing workspaces surfacing after the Loom-Atlassian integration. With 30+ instances in three days, contact Atlassian Support to verify creation paths and whether the restriction works as intended.

Cheers,
Arek🤠🧙‍♂️

All comments

Matthew Sinclair

Presuming your talking about managed accounts - should be working - its certainly working for us - we've had 3-4 occurrences a month until we found the control panel that requires admin reviews.

The only app we can't filter on ours is bitbucket but that's not yet an enterprise product from what I've read.

Keep in mind it only works on managed accounts - anything outside that - won't work.

Arkadiusz Wroblewski

Hello @Sue Wilson

Cheers,
Arek🤠🧙‍♂️

Sue Wilson

Thank you @Matthew Sinclair & @Arkadiusz Wroblewski for your quick responses.

I did come across the https://support.atlassian.com/organization-administration/docs/why-can-users-create-products-when-requests-are-required/ article in my search but wasn't sure of the age of the article, so I reached out to Atlassian Support.

They had me try to toggle back to 'Allow all apps' then immediately back to 'Require admin approval'. Their logic was it may "reset" the setting to start acting appropriately.

Additional Loom apps were created over the last 24 hours and when I went back to App access settings, the toggle was on 'Allow all apps'?! I flipped it back and now will monitor over the next few days to see if that simple step resolves the issue.

Arkadiusz Wroblewski

Good.

Matthew Sinclair

Check your audit logs to see if someone/something is tampering with your controls.

Worst case - reach out to support under Atlassian Guard/Cloud Administration and see if they can sus out what's going on.

Matthew Sinclair

2 new Looms just popped in our org - with managed accounts.

I'd be much obliged if a Champion could highlight this as a bug - as the new system is clearly not working.

I've made a complaint in a ticket about this but you won't see it.
CES-205314
It may get triaged/moved…..

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

loom

shadow-it

atlassian-admin