Open access to JIRA

[ganagaraj]

I created a free instance of JIRA and i have a project created within it. People with access to ONLY the link for that free instance are able to create projects on that. I havent granted access to the project, but then they are able to create new projects even though they have no access to any project.

Does free JIRA allow any user to access and create projects?

[Vignesh Jayagopal · Accepted solution]

Hi @ganagaraj 

Yes, in Jira Free plans, all users with access to the instance are granted the Jira Administrators  roles by default. This means:

1. Anyone with access to the instance can create new projects, even if they don’t have access to existing projects.

Please refer the below link for more details

https://support.atlassian.com/jira-cloud-administration/docs/what-is-the-free-jira-cloud-plan/ 

[ganagaraj]

What do you mean when you say "anyone with access to the instance" ? is it just have the link to the instance?

[Vignesh Jayagopal]

No, just having the link to the instance is not enough.

In Jira Free, "anyone with access to the instance" means:

1. Users who have been added to your Jira site – They must have an Atlassian account and be granted access to Jira. (Be invited or already have access to the instance)

You can check who has access by going to Jira Settings → User Management in your free instance.

[ganagaraj]

Exactly, i thought so too. But then anyone with the link is able to create projects. The user of course has an atlassian account, but then the user is able to create project with JUST having the link

[Vignesh Jayagopal]

That means the user logged into your instance with their Atlassian account simply by using the link.

This needs to be configured in your User Access Settings in the admin panel.

If the user belongs to an approved domain or if invitation links are enabled, they could have accessed your instance without explicit admin approval.

Once logged in, they automatically receive permissions to create projects, as Jira Free does not restrict project creation.

[ganagaraj]

Great! thank you Vignesh! this worked!

[Aaron Pavez _ServiceRocket_ · Accepted solution]

Hi @ganagaraj 

A free instance doesnt have any permissions by default Is open.

https://support.atlassian.com/jira-cloud-administration/docs/what-is-the-free-jira-cloud-plan/

You can disable the create project by removing any users from administer jira under admin.atlassian.net

Regards

[ganagaraj]

got it, but then right now, what is happening is : 

1. I have a project in JIRA with access set to "Private".

2. When someone with the link to this project tries to access it, JIRA doesnt allow it.

3. BUT , this user can simply click on the "+" symbol and go ahead and create a project.

How do i restrict this?

[Aaron Pavez _ServiceRocket_]

1. How do you set the access to private? there are no permissions to do that/ what do you mean by private?

2. Do you mean that no one can access this /jira/software/c/projects/CSF/boards/13 for example?

3. Can you send us a screenshot of this? what plus button? and where?

To create PROJECTS, there is no plus button. do you mean a Jira issue/Work item?

regards

[ganagaraj]

[ganagaraj]

I have attahached the 2 screenshots. 

1. Indicating the page from where the user can access the create project button.

2. This is where i can change project access type to private