the JIRA Service Desk ("SD") manual said that SD users don't count to the regular license. However, when somebody raises a SD ticket and completes the registering process, he is added to the group "jira-users" by Crowd which actually counts towards the JIRA licenses.
Not only that, he also has access to all the other non-SD projects. As the installation guide suggested, the JIRA is set to "Internal", but that does not help.
How can I limit access for external SD users to the SD projects only?
Possibly, although I think it's not an easy read.
I think you may have enabled public signup for all users, which gets them into JIRA as users, and you only really want public signup for SD customers.
To enable JIRA Software sign-up, the manual says it should be set to be "Public" (which it's not in our case). Sign-up for Service Desk is enabled.
I see that there is a "Service Desk Customer" group in JIRA, but none in Crowd (only jira-users and jira-servicedesk-users). New users are automatically added to the jira-users and confluence-users group in Crowd.
I think this whole thing might have to do something with this issue: https://confluence.atlassian.com/jirakb/cannot-login-to-service-desk-as-local-user-when-crowd-sso-is-enabled-777026935.html
I think to make this work I will have to disable Crowd SSO for JIRA or otherwise, newly registered users will inevitably be added to the Crowd which automatically adds them to the jira-users and confluence-users groups.
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
We're bringing product updates and pro tips on teamwork to ten cities around the world.Save your spot