Policy settings: how to prevent users from getting Confluence access without admin permission

[JVM]

We are using Jira and Confluence. While all employees have access to Jira, only a select few of them have access to Confluence. At least, that is the intention. As far as we can tell we disabled all features that allow users to requesting product access or gain it themselves and allow access only with org admin permission. However, today an employee got Confluence access twice.

First, he got a (unwanted!) popup stating "Your team is using Confluence. Want to join?" and with one button click he got access bypassing all policy settings.

Second, after we removed access again, he just logged in to <domain>.atlassian.net and by that alone he got Confluence access again.

From our perspective this is a really anoying behavior of Atlassian cloud services.

Since we seem to still miss some setting that allows this behavior: how can I shut it down permanently? We do neither want ads for other products, nor options to request access, nor any option to "self service access".

Any help is much apreciated.

PS: We don't use Atlassian Guard, but all our users are within our organization from a verified domain and managed accounts.

[Jack Brickey · Accepted solution]

Hi @JVM , I wonder if your configuration is allowing anyone in your domain to gain access? You should review this article to be sure you haven't configured as you desire - control-how-users-get-access-to-products . Also, check User Invites section and chose "Don't allow invites".

[JVM]

Hi Jack,

thanks for responding so quickly and also for the link. I double-checked my settings with the information on that page and indeed it seems that I probably misunderstood the options in the verified domain. Now I turned everything to "no role" and "no invite" and "no links". Lets hope that does the trick.