-
Bug
-
Resolution: Tracked Elsewhere
-
High
-
Minor
Automatic License Provisioning through Approved domains (configured in User Access Settings)does not work for Jira Products (Jira, Jira Work Management, Jira Service Management, or Jira Product Discovery) when customer already has access to one of these products.
Steps to Recreate Issue:
Scenario 1
Configure an approved domain in "User Access Settings" with access to products say Jira and JSM.
- With a user account that belongs to the approved domain, login to a site and access a Jira feature (Board/Sprints). The user automatically gets access to all products configured for license through Approved Domains (In this case both JSM and Jira) and is able to successfully access Jira product.
- Now, remove this user from Jira default access group/role manually from the admin console. User now does not have Jira License. He/She only has JSM license in place.
- Now, when trying to access Jira boards, user is blocked. Gets "Sorry, you can't view this page"
Scenario 2:
Existing user in directory with email id xxx.domain.com and JSM license in place.
- Now, configure domain.com as an approved domain with Jira and JSM license auto provisioning.
- User xxx tries to access Jira feature, but gets "Sorry, you can't view this page". Automatic License provisioning does not kick in.
Scenario 3:
Existing user in directory with email id xxx.domain.com and Jira Product Discovery license in place.
- Now, configure domain.com as an approved domain to grant Jira licenses automatically when accessing the product.
- User xxx tries to access Jira feature, but gets "Sorry, you can't view this page". Automatic License provisioning does not kick in.
Please Note: The above situation arises only when the users has JSM license with role as User(Agent). If JSM user role is "Customer", approved domain configuration get appropriately assigned!
Expectation here is that with Approved Domains configured, user should automatically be granted Jira License when attempting to access Jira Issues/boards.
Additional Note: This issue is not specific to Jira / JSM, but with any Jira product. As long as user already has access to one of the Jira products, automatic license provisioning through approved domains does not work for other configured Jira products.
- was cloned as
-
-
- Closed
-
[AX-1097] Issues With License Provisioning through approved domains
| Component/s | Original: Access requests - DES / Join site [ 48704 ] | |
| Component/s | New: User Access - Approved domains / Self signup [ 80132 ] | |
| Key |
Original:
|
New:
|
| Support reference count | Original: 3 | |
| Symptom Severity | Original: Severity 3 - Minor [ 14432 ] | New: Minor [ 16130 ] |
| Was this caused by a recent change? | Original: No [ 19032 ] | |
| Project | Original: Identity [ 16810 ] | New: Admin Experience [ 24210 ] |
| Remote Link | New: This issue links to "Page (Confluence)" [ 1019248 ] |
| Resolution | New: Tracked Elsewhere [ 15 ] | |
| Status | Original: Long Term Backlog [ 12073 ] | New: Closed [ 6 ] |
| Labels | New: RIBS-SHORT |
| Priority | Original: Medium [ 3 ] | New: High [ 2 ] |
| Description |
Original:
Automatic License Provisioning through Approved domains (configured in [User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/])does not work for Jira Products (Jira, Jira Work Management, Jira Service Management, or Jira Product Discovery) when customer already has access to one of these products.
*Steps to Recreate Issue:* *Scenario 1* Configure an approved domain in "[User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/]" with access to products say Jira and JSM. # With a user account that belongs to the approved domain, login to a site and access a Jira feature (Board/Sprints). The user automatically gets access to all products configured for license through Approved Domains (In this case both JSM and Jira) and is able to successfully access Jira product. # Now, remove this user from Jira default access group/role manually from the admin console. User now does not have Jira License. He/She only has JSM license in place. # Now, when trying to access Jira boards, user is blocked. Gets "Sorry, you can't view this page" *Scenario 2:* Existing user in directory with email id xxx.domain.com and JSM license in place. # Now, configure domain.com as an approved domain with Jira and JSM license auto provisioning. # User xxx tries to access Jira feature, but gets "Sorry, you can't view this page". Automatic License provisioning does not kick in. *Please Note:* The above situation arises only when the users has JSM license with role as User(Agent). If JSM user role is "Customer", approved domain configuration get appropriately assigned! *Expectation* here is that with Approved Domains configured, user should automatically be granted Jira License when attempting to access Jira Issues/boards. {*}Additional Note{*}: This issue is not specific to Jira / JSM, but with any Jira product. As long as user already has access to one of the Jira products, automatic license provisioning through approved domains does not work for other configured Jira products. |
New:
Automatic License Provisioning through Approved domains (configured in [User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/])does not work for Jira Products (Jira, Jira Work Management, Jira Service Management, or Jira Product Discovery) when customer already has access to one of these products.
*Steps to Recreate Issue:* *Scenario 1* Configure an approved domain in "[User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/]" with access to products say Jira and JSM. # With a user account that belongs to the approved domain, login to a site and access a Jira feature (Board/Sprints). The user automatically gets access to all products configured for license through Approved Domains (In this case both JSM and Jira) and is able to successfully access Jira product. # Now, remove this user from Jira default access group/role manually from the admin console. User now does not have Jira License. He/She only has JSM license in place. # Now, when trying to access Jira boards, user is blocked. Gets "Sorry, you can't view this page" *Scenario 2:* Existing user in directory with email id xxx.domain.com and JSM license in place. # Now, configure domain.com as an approved domain with Jira and JSM license auto provisioning. # User xxx tries to access Jira feature, but gets "Sorry, you can't view this page". Automatic License provisioning does not kick in. *Scenario 3:* Existing user in directory with email id xxx.domain.com and Jira Product Discovery license in place. # Now, configure domain.com as an approved domain to grant Jira licenses automatically when accessing the product. # User xxx tries to access Jira feature, but gets "Sorry, you can't view this page". Automatic License provisioning does not kick in. *Please Note:* The above situation arises only when the users has JSM license with role as User(Agent). If JSM user role is "Customer", approved domain configuration get appropriately assigned! *Expectation* here is that with Approved Domains configured, user should automatically be granted Jira License when attempting to access Jira Issues/boards. {*}Additional Note{*}: This issue is not specific to Jira / JSM, but with any Jira product. As long as user already has access to one of the Jira products, automatic license provisioning through approved domains does not work for other configured Jira products. |
| Description |
Original:
Automatic License Provisioning through Approved domains (configured in [User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/])does not work for Jira Products (Jira, Jira Work Management or Jira Service Management) when customer already has access to one of these products.
*Steps to Recreate Issue:* *Scenario 1* Configure an approved domain in "[User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/]" with access to products say Jira and JSM. # With a user account that belongs to the approved domain, login to a site and access a Jira feature (Board/Sprints). The user automatically gets access to all products configured for license through Approved Domains (In this case both JSM and Jira) and is able to successfully access Jira product. # Now, remove this user from Jira default access group/role manually from the admin console. User now does not have Jira License. He/She only has JSM license in place. # Now, when trying to access Jira boards, user is blocked. Gets "Sorry, you can't view this page" *Scenario 2:* Existing user in directory with email id xxx.domain.com and JSM license in place. # Now, configure domain.com as an approved domain with Jira and JSM license auto provisioning. # User xxx tries to access Jira feature, but gets "Sorry, you can't view this page". Automatic License provisioning does not kick in. *Please Note:* The above situation arises only when the users has JSM license with role as User(Agent). If JSM user role is "Customer", approved domain configuration get appropriately assigned! *Expectation* here is that with Approved Domains configured, user should automatically be granted Jira License when attempting to access Jira Issues/boards. {*}Additional Note{*}: This issue is not specific to Jira / JSM, but with any Jira product. As long as user already has access to one of the Jira products, automatic license provisioning through approved domains does not work for other configured Jira products. |
New:
Automatic License Provisioning through Approved domains (configured in [User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/])does not work for Jira Products (Jira, Jira Work Management, Jira Service Management, or Jira Product Discovery) when customer already has access to one of these products.
*Steps to Recreate Issue:* *Scenario 1* Configure an approved domain in "[User Access Settings|https://support.atlassian.com/user-management/docs/control-how-users-get-access-to-products/]" with access to products say Jira and JSM. # With a user account that belongs to the approved domain, login to a site and access a Jira feature (Board/Sprints). The user automatically gets access to all products configured for license through Approved Domains (In this case both JSM and Jira) and is able to successfully access Jira product. # Now, remove this user from Jira default access group/role manually from the admin console. User now does not have Jira License. He/She only has JSM license in place. # Now, when trying to access Jira boards, user is blocked. Gets "Sorry, you can't view this page" *Scenario 2:* Existing user in directory with email id xxx.domain.com and JSM license in place. # Now, configure domain.com as an approved domain with Jira and JSM license auto provisioning. # User xxx tries to access Jira feature, but gets "Sorry, you can't view this page". Automatic License provisioning does not kick in. *Please Note:* The above situation arises only when the users has JSM license with role as User(Agent). If JSM user role is "Customer", approved domain configuration get appropriately assigned! *Expectation* here is that with Approved Domains configured, user should automatically be granted Jira License when attempting to access Jira Issues/boards. {*}Additional Note{*}: This issue is not specific to Jira / JSM, but with any Jira product. As long as user already has access to one of the Jira products, automatic license provisioning through approved domains does not work for other configured Jira products. |
| Support reference count | Original: 2 | New: 3 |
| Support reference count | Original: 3 | New: 2 |
