At the moment any user who has got ‘Browse users and groups’ Global Jira permission can run the Get All Users Rest API endpoint rest/api/3/users/search and retrieve all the users in the organization.  

This also appliciable for /rest/api/latest/groupuserpicker?query=*

We would like this to be limited to the Jira Users on the cloud instance not all the users at the Organisation level.