How do I stop users from discovering and adding products to our account?

[Tom Atkinson]

Three users so far have accidentally added products to our account by accident, and one user has added a product on purpose that I now need to unwind. Is there any way to prevent users from being able to "discover" and add new products to our account? Or alternatively, can I make it so they need to ask permission before doing so?

[Jack Brickey]

Users listed as “Trusted” or Jira Admins can add addon apps. So ‘demoting’ them would be in order.

[Bill Sheboy]

Hi @Tom Atkinson 

Yes, and...to what Jack says...

You may change permissions to prevent people adding apps but apparently you cannot stop them from seeing/requesting them through Discovery for Jira Cloud: https://confluence.atlassian.com/upm/managing-user-requests-for-marketplace-apps-781394968.html

Disabling user requests

The user request feature is enabled by default, but you can disable it for your application. (warning) This is not applicable for Cloud.

Best regards,
Bill

[Mikael Sandberg]

Unfortunately you can only turn this off on Server/Data Center, it is not applicable to Cloud. There is a request to have this available for Cloud as well, JRACLOUD-74471 

[Tom Atkinson]

I'm a cloud user, which must be why I don't see this option to disable user requests.

Two of my users who accidentally created new products were Basic (not Trusted) users of the account. In both cases, the "new" products they added were both new instances of Jira and Confluence.

[Jack Brickey]

Hey Tom,

So you can't prevent someone from creating a new instance of Jira or Confluence. I thought you were referring to adding a product to your existing instance, which does require Trusted or above. Of course the instance they create will not be the same domain as what you have your current instance defined as.