Summary

Currently, when setting up Rovo agents, the default permission is set to “Open to all users,” as described in the documentation below.

• https://support.atlassian.com/rovo/docs/rovo-agent-permissions-and-governance/#Control-who-can-see-and-use-your-agent

This means that unless an admin proactively changes the setting, all users in the organization can access new agents by default.

For organizations with strict governance or privacy requirements, this default can lead to unintentional exposure of agents to users who should not have access. It would be beneficial for admins if the default setting for new Rovo agents was “Restricted” (i.e., not open to all users), requiring explicit action to make an agent available more broadly.