Problem Description

When the Default Application Access has nothing set in the User Management's Application Access page.

Creating a new user through REST API still grants access to users created
That was due an entry exist at the licenserolesdefault table

Running

select * from licenserolesdefault

Returns

There could be multiple ways causing the entry to be populated, below is one of the tested possibility

Steps to Replicate

1. On Jira Server instance, set default application access to grant new users created to Jira Software application, generate a backup
   • Validate that the entities.xml contains <LicenseRoleDefault id="10000" licenseRoleName="jira-software"/>
2. Import to Jira Cloud instance
3. After completed the import, check the database entry, it should contain the entry
4. Try creating a user using the REST API User Creation Endpoint

Expected behavior

It should respect the configuration on the user management instead of a leftover entry from Jira Server and creates a user without default group granted to the user

Actual Behavior

It creates the user and grants the user with the groups configured as default groups for the application Jira Software.

Workaround

• Remove the entry from the database with the help from support for Jira Cloud instances
• Remove the line <LicenseRoleDefault id="10000" licenseRoleName="jira-software"/> before importing

Note

It will not affect invite users feature from user management; as using the invite user function, you will need to tick the application to grant to the user.