Problem Definition

As an administrator, I do want to restrict my agents from creating new customer accounts through the UI without revoking project admin permissions. 

Currently, any Service Desk agent (=User granted the Service Desk Team Permission) can create new customers either:

• by using the Invite customer button
• or in the Service Desk project sidebar
• or when creating a request in behalf of a customer that does not exist (in this case it will create a new internal user customer account for that email address)
• or when sharing an existing request with an email address does not exist (in this case it will create a new internal user customer account for that email address)

Additionally, any Jira global admin that's a Service Desk agent will be able to create customers even if they don't have project admin permissions.

Suggested Solution

Add a new permission to manage customers.