• 271
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Feature released!

      Admins can now specify that they don't want users to be able to invite any other users. If users try to invite other users, the admin can specify the message that the users should receive.

      Turning off User Invites for your products AND removing your products from the Approved Domains will ensure that only Org Admins or User Access Admins can add users to products. Invitation buttons will still be visible in product, but will work differently depending on your selected settings. e.g. An invite button show the custom invite message instead of allowing a user to invite someone.

       

      Issue Summary

      In the "User Invites" of the Site Access setting:

      • When the "Existing users can send invitations to anyone" box is checked, all invites are automatically approved and given product access (even when inviting a user with an external domain)
      • When the "Existing users can send invitations to anyone" box is unchecked, it means that invites do not get automatic approval. It does not prevent users from sending invitations:
        • If the invite is sent to an approved domain, then the user is automatically granted access
        • If the invite is sent to an external domain (or approved domains is turned off), an access request is sent to admins

      The UI is confusing and leads users to believe that unchecking the box will prevent invites from being sent to external domains. 

      Suggestion

      Admins would like the ability to completely disable user invites - particularly in the case when inviting users with external domains. 

            [ID-7692] Allow admins to disable user invitations

            Pinned comments

            Hi All,

            I've updated the ticket resolution to give more clarity on your questions, but i'll add a comment as well to address each question:

            1. I've set everything to "Don't allow invites", and yet, the Teams menu within Jira still shows the "Invite people to Jira" button, and allows me to invite people from other domains to Jira.

            The Teams menu will still show the invite button, but the invite button will function differently depending on what settings you've selected. e.g. if you've turned off all user invites, then the button will show the Custom Message from the admin to the user.
            The user invite settings will not affect the ability for Org admins, site admins or user access admins to invite users. These admins can still invite users from anywhere in our products or admin.atlassian.com 

            1. We want to block user invites completely because the onboarding process to Atlassian Cloud must be performed through SSO.

            To block every way a user can get access to a product themselves, or via another user (not including admins). The product needs to have the User Invite settings set to "Don't allow invites" and the product needs to not grant access via the Approved Domains list. With both these settings turned off, only Org admins, Site admins and User Access Admins have the ability to add a new user to a product.

            I hope that helps explain how to turn these settings off. I'll ensure our docs https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/ outlines what i've listed here as well.

            Cheers,

            -Kieren

            Atlassian Product Manager

            Kieren (Inactive) added a comment - Hi All, I've updated the ticket resolution to give more clarity on your questions, but i'll add a comment as well to address each question: I've set everything to "Don't allow invites", and yet, the Teams menu within Jira still shows the "Invite people to Jira" button, and allows me to invite people from other domains to Jira. The Teams menu will still show the invite button, but the invite button will function differently depending on what settings you've selected. e.g. if you've turned off all user invites, then the button will show the Custom Message from the admin to the user. The user invite settings will not affect the ability for Org admins, site admins or user access admins to invite users. These admins can still invite users from anywhere in our products or admin.atlassian.com  We want to block user invites completely because the onboarding process to Atlassian Cloud must be performed through SSO. To block every way a user can get access to a product themselves, or via another user (not including admins). The product needs to have the User Invite settings set to "Don't allow invites" and the product needs to not grant access via the Approved Domains list. With both these settings turned off, only Org admins, Site admins and User Access Admins have the ability to add a new user to a product. I hope that helps explain how to turn these settings off. I'll ensure our docs https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/ outlines what i've listed here as well. Cheers, -Kieren Atlassian Product Manager

            All comments

            I miss a way for Org admins to prevent site admins to invite users....

            Jack Nolddor [Sweet Bananas] added a comment - I miss a way for Org admins to prevent site admins to invite users....

            Haddon Fisher added a comment - - edited

            Thanks for the update Kieren...However, this begs the question....what is the purpose of showing this if it's disabled? It would seem implicit that, if admins do not want their users to be able to invite others, that they also would not want links to this functionality (which are functionally dead-ends).

            UPDATE:

            For anyone else who'd like the links to this feature removed as well as the functionality, https://jira.atlassian.com/browse/ID-8298

            Haddon Fisher added a comment - - edited Thanks for the update Kieren...However, this begs the question....what is the purpose of showing this if it's disabled? It would seem implicit that, if admins do not want their users to be able to invite others, that they also would not want links to this functionality (which are functionally dead-ends). UPDATE: For anyone else who'd like the links to this feature removed as well as the functionality, https://jira.atlassian.com/browse/ID-8298

            Hi All,

            I've updated the ticket resolution to give more clarity on your questions, but i'll add a comment as well to address each question:

            1. I've set everything to "Don't allow invites", and yet, the Teams menu within Jira still shows the "Invite people to Jira" button, and allows me to invite people from other domains to Jira.

            The Teams menu will still show the invite button, but the invite button will function differently depending on what settings you've selected. e.g. if you've turned off all user invites, then the button will show the Custom Message from the admin to the user.
            The user invite settings will not affect the ability for Org admins, site admins or user access admins to invite users. These admins can still invite users from anywhere in our products or admin.atlassian.com 

            1. We want to block user invites completely because the onboarding process to Atlassian Cloud must be performed through SSO.

            To block every way a user can get access to a product themselves, or via another user (not including admins). The product needs to have the User Invite settings set to "Don't allow invites" and the product needs to not grant access via the Approved Domains list. With both these settings turned off, only Org admins, Site admins and User Access Admins have the ability to add a new user to a product.

            I hope that helps explain how to turn these settings off. I'll ensure our docs https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/ outlines what i've listed here as well.

            Cheers,

            -Kieren

            Atlassian Product Manager

            Kieren (Inactive) added a comment - Hi All, I've updated the ticket resolution to give more clarity on your questions, but i'll add a comment as well to address each question: I've set everything to "Don't allow invites", and yet, the Teams menu within Jira still shows the "Invite people to Jira" button, and allows me to invite people from other domains to Jira. The Teams menu will still show the invite button, but the invite button will function differently depending on what settings you've selected. e.g. if you've turned off all user invites, then the button will show the Custom Message from the admin to the user. The user invite settings will not affect the ability for Org admins, site admins or user access admins to invite users. These admins can still invite users from anywhere in our products or admin.atlassian.com  We want to block user invites completely because the onboarding process to Atlassian Cloud must be performed through SSO. To block every way a user can get access to a product themselves, or via another user (not including admins). The product needs to have the User Invite settings set to "Don't allow invites" and the product needs to not grant access via the Approved Domains list. With both these settings turned off, only Org admins, Site admins and User Access Admins have the ability to add a new user to a product. I hope that helps explain how to turn these settings off. I'll ensure our docs https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/ outlines what i've listed here as well. Cheers, -Kieren Atlassian Product Manager

            @kieren, @Tyler B,

            I've set everything to " Don't allow invites", and yet, the Teams menu within Jira still shows the "Invite people to Jira" button, and allow me to invite people from other domains to Jira. 

            Am I doing something wrong, or this feature doesn't work as expected to prevent user invites? In this case, can you reopen this ticket, please?

            Gabriel Muller added a comment - @kieren, @Tyler B, I've set everything to " Don't allow invites", and yet, the Teams menu within Jira still shows the "Invite people to Jira" button, and allow me to invite people from other domains to Jira.  Am I doing something wrong, or this feature doesn't work as expected to prevent user invites? In this case, can you reopen this ticket, please?

            Hey all,

            The "Don't allow invites" feature was recently rolled out to all organizations! In addition to preventing invites, organization admins can also specify a message to display to users when they try to invite a user. This could be helpful in directing users on the proper way to get another user added to your products.

            If you run into any issues with this feature, please reach out to support at support.atlassian.com.

            Tyler B [Atlassian] added a comment - Hey all, The "Don't allow invites" feature was recently rolled out to all organizations! In addition to preventing invites, organization admins can also specify a message to display to users when they try to invite a user. This could be helpful in directing users on the proper way to get another user added to your products. If you run into any issues with this feature, please reach out to support at support.atlassian.com.

            @Brian, You may connect with your assign CSM or raise a Support Case from your Atlassian instance.

            Darshan Mandhane added a comment - @Brian, You may connect with your assign CSM or raise a Support Case from your Atlassian instance.

            Brian added a comment -

            hi, thank you, how do I enable it?

            Brian added a comment - hi, thank you, how do I enable it?

            @Brian, Enable Beta feature, It worked for us, we also have SSO.

            Darshan Mandhane added a comment - @Brian, Enable Beta feature, It worked for us, we also have SSO.

            Brian added a comment -

            Hello Atlassian,

             

            we want to block user invites completely because the onboarding process to Atlassian Cloud must be performed through SSO. We do not want to receive user invitations that an admin can approve by mistake.

            Brian added a comment - Hello Atlassian,   we want to block user invites completely because the onboarding process to Atlassian Cloud must be performed through SSO. We do not want to receive user invitations that an admin can approve by mistake.

            @kieren,  when "Jira Product Discovery" was released, why wasn't its Access Settings (User Invite permission) set to the same as existing customer products? It was set to enabled where we have all other products disallowed.  Access requests started being received, which was certainly unexpected and created a time consuming effort to resolve. 

            Did the Jira Product Discovery release intentionally ignore existing access settings?  That is what happened and that is not acceptable. 

            In the future, new product releases need to have the same User Invite permission setting as the primary products (JS, JSM, or Confluence). 

            Chris Tetzlaff added a comment - @kieren,  when "Jira Product Discovery" was released, why wasn't its Access Settings (User Invite permission) set to the same as existing customer products? It was set to enabled where we have all other products disallowed.  Access requests started being received, which was certainly unexpected and created a time consuming effort to resolve.  Did the Jira Product Discovery release intentionally ignore existing access settings?  That is what happened and that is not acceptable.  In the future, new product releases need to have the same User Invite permission setting as the primary products (JS, JSM, or Confluence). 

              kdight Kieren (Inactive)
              dbraun@atlassian.com Douglas B (Inactive)
              Votes:
              198 Vote for this issue
              Watchers:
              237 Start watching this issue

                Created:
                Updated:
                Resolved: