Problem:

Currently, when any user within a managed account signs up for an Atlassian cloud product, managed account admins are not notified of the activity, and companies end up with multiple instances of Jira, Confluence, etc., under the business email. The issue with this is if they are using these one-off organizations for business purposes, there lies an inherent risk of data and privacy leak issues since the main organization of a company does not have access to these instances nor do they even know of their existence. Such one-off organizations can be left orphaned with weak security not approved by the main business and are more susceptible to security breaches if the organization is left orphaned with sensitive data.

Solution:

While we cannot prevent users from creating free Jira instances, notification should at least be sent to the managed account admin whenever a user creates/is granted access to any Atlassian cloud product outside of the main organization in which those admins have access to so that they are aware of the product and can request access internally if needed to those one-off organization instances.