In my audit log for JIRA server 7.7.2 user created user without permissions

Charlie Bolante July 2, 2018
In my audit log for JIRA server 7.7.2 I have a entry that a user created another user, but said user isn’t part of any group that has permissions to create a user. I’m trying to figure out how this is possible.

1 answer

0 votes
josh
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 3, 2018

Do you have service desk?

Charlie Bolante July 5, 2018

Yes we are using JSD 3.10.2.

josh
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 6, 2018

Is it possible that the new user was added by an agent, using the Customers section of Jira Service Desk?

 

It seems that, even if one does not have admin rights, and outgoing emails from service desk are enabled, agents can create new user accounts. It's also possible they did this by adding someone to Request Participants.

https://jira.atlassian.com/browse/JSDSERVER-5463

https://jira.atlassian.com/browse/JSDSERVER-4088

 

So is the person you saw having created a new user in the audit log also a service desk agent?

Suggest an answer

Log in or Sign up to answer