Uploaded image for project: 'Atlassian Guard'
  1. Atlassian Guard
  2. ACCESS-1651

Premium organisation admins ability to approve or deny the creation of new sites

    • 8
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      User Problem

      The organisation administrators of Premium organisations need to have the ability to approve or deny the creation of new sites by their end users

      Suggested Solutions

      Provide the functionality to alert administrators before end users create new sites and provide them with the ability to approve or deny the request

      Current Workarounds

      Our product team is working on new functionality that would provide admin access to shadow IT sites. The next APD enhancement will provide org admins with one-click access to ‘join’, or add themselves to, shadow IT instances and take over the management of said instance to remove if necessary. This will be available to all organisations that have Atlassian Access, regardless if they are enterprise or not.

      By using this new future feature Premium customers will have the ability to remove the sites post-creation.

            [ACCESS-1651] Premium organisation admins ability to approve or deny the creation of new sites

            48d91e7b076f, your post does not add any new information.

            On the contrary, it looks like Atla$$ian keeps ignoring the elementary security of their "PREMIUM" and "GUARD" products.

            These are only some of the tickets that I'm aware of (and many have been closed by Atla$$ian during the past years!):

            Why exactly is it that your customers need to FIGHT against their "trusted supplier"?
            Why is Atla$$ian not interested/willing to provide "good value for money" products?

            Stefaan Vandaele added a comment - 48d91e7b076f , your post does not add any new information. On the contrary, it looks like Atla$$ian keeps ignoring the elementary security of their "PREMIUM" and "GUARD" products. These are only some of the tickets that I'm aware of (and many have been closed by Atla$$ian during the past years!): https://jira.atlassian.com/browse/CLOUD-10325 https://jira.atlassian.com/browse/CLOUD-11690 https://jira.atlassian.com/browse/CLOUD-12089 https://jira.atlassian.com/browse/CLOUD-12193 https://jira.atlassian.com/browse/ACCESS-1135 https://jira.atlassian.com/browse/ACCESS-1272 https://jira.atlassian.com/browse/ACCESS-1468 https://jira.atlassian.com/browse/ACCESS-1645 https://jira.atlassian.com/browse/ACCESS-1651 https://jira.atlassian.com/browse/ACCESS-1679 https://jira.atlassian.com/browse/ID-7697 https://community.atlassian.com/t5/Articles/What-s-the-word-I-m-looking-for/ba-p/2862486 https://community.atlassian.com/t5/Confluence-questions/SECURITY-ISSUE-during-login-procedure-of-managed-users/qaq-p/2841895 https://community.atlassian.com/t5/Atlassian-Account-questions/How-to-Prevent-Atlassian-Products-being-added-by-users-w-company/qaq-p/2401874 https://community.atlassian.com/t5/Questions/Why-is-Atlassian-promoting-Shadow-IT-Or-Accidental-IT/qaq-p/2731538 https://community.atlassian.com/t5/Enterprise-articles/An-update-on-product-requests-bringing-shadow-IT-controls-to/ba-p/2840760 https://community.atlassian.com/t5/Articles/Proposal-to-prevent-Accidental-Site-Creations-accidentalit/ba-p/2867193#M558 Why exactly is it that your customers need to FIGHT against their "trusted supplier"? Why is Atla$$ian not interested/willing to provide "good value for money" products?

            We truly value your suggestion and the thought you've put into it. The Cloud Enterprise (CE) plan solves the challenges of customers operating our products at a large scale by addressing their complexity, governance, advanced security, and compliance needs. The Atlassian Access product solves for more foundational security requirements and provides identity and access management support. We have implemented solutions for shadow IT risks based on customer differentiation in both CE and Atlassian Access.

            For more information, see https://support.atlassian.com/organization-administration/docs/control-your-shadow-it-footprint/ 

            Thanks for your understanding and for being such an important part of our community!

            Srividya Ramaswamy added a comment - We truly value your suggestion and the thought you've put into it. The Cloud Enterprise (CE) plan solves the challenges of customers operating our products at a large scale by addressing their complexity, governance, advanced security, and compliance needs. The Atlassian Access product solves for more foundational security requirements and provides identity and access management support. We have implemented solutions for shadow IT risks based on customer differentiation in both CE and Atlassian Access. For more information, see https://support.atlassian.com/organization-administration/docs/control-your-shadow-it-footprint/   Thanks for your understanding and for being such an important part of our community!

            Darryl Lee added a comment - - edited

            Following the lead of 3ea8e896bf0d, mentioning these related issues:

            I will note that in my experience ALL 39 of the sites and orgs that I've had to remove were created BY MISTAKE, likely due to the bad sign-in workflow from atlassian.com

            Darryl Lee added a comment - - edited Following the lead of 3ea8e896bf0d , mentioning these related issues: https://jira.atlassian.com/browse/ACCESS-1272 https://jira.atlassian.com/browse/CLOUD-10325 https://jira.atlassian.com/browse/ACCESS-1468 https://jira.atlassian.com/browse/ACCESS-1317 I will note that in my experience ALL 39 of the sites and orgs that I've had to remove were created BY MISTAKE, likely due to the bad sign-in workflow from atlassian.com

            Must have feature for managed accounts and claimed domains. Every other SaaS has this feature.

            Jimmy Shehu added a comment - Must have feature for managed accounts and claimed domains. Every other SaaS has this feature.

            Currently we are getting an influx in users within our Domain creating their own instances/sites which is not permitted and would be really really helpful for ORG level admins like myself to have better control, so only ORG admins can approve these requested created sites before the users then just go and create them.

            angus.parrett added a comment - Currently we are getting an influx in users within our Domain creating their own instances/sites which is not permitted and would be really really helpful for ORG level admins like myself to have better control, so only ORG admins can approve these requested created sites before the users then just go and create them.

              gjones@atlassian.com Griffin Jones
              ca528a390f48 Pablo Bastos
              Votes:
              28 Vote for this issue
              Watchers:
              18 Start watching this issue

                Created:
                Updated:
                Resolved: