Worst Jira Admin Contest: External Email Address

[#1]

Mistake 19

One day a former employee contacted the company to complain about Jira data being sent to their personal email address. Upon investigation, I discovered that data was being sent to hundreds of other past or present users with external addresses in the Jira database.

There were two problems:

• former users weren’t being deactivated

• and external email addresses were allowed in the application.

Both are a recipe for disaster!

Recommendations

Instead, make sure users have a clear end date when user access should be removed. This is especially important for external users who are sometimes managed differently than regular departing employees.

Create a Jira issue, at the time an external user is hired, to remind the team to perform a removal at the end of the contract date.

Offboarding request in Jira Service Management

---

Back to intro and mistakes list