How do I prohibit agents from adding new users?

[Jason Freeman]

Our agents, who are not administrators, are able to add customers.

How do we prevent this?

The following is a screenshot from the view of an agent.  Notice that there is an "Add customers" button on the right.  That's what we do not want.

[Dmitry Kuznetsov]

Quote from JSD Customer permissions project settings: "If anyone can raise a request, Service Desk creates an account for anyone customers share with." - on practise this does include situations, when agent CC'ing someone and reply is being sent to incoming mail handler.

Thus if we do not want Service Desk to create an account for anyone (based on 'sharing' or CC'ing), we need to remove "Service desk customer - portal access" from "Create Issues" permission and add some specific access group instead.

And also set "Who can customers share requests with?" to "Other customers in their organization" in "Customer permissions" for JSD project settings.

This configuration will fully prevent adding any new customers via any means by service desk agents.

Although JSD will start showing "configuration error" notice, each time one accessing this project's configuration.

[Victor Mutambuki]

Jason,

Go to Administration > Applications > JIRA Service Desk configuration, verify if the option to allow Agents to manage organization. Select the second option. "No, only JIRA administrators can manage organizations"

See attachment.

Victor

[Jason Freeman]

Victor,

Thanks for the reply.

Yes, mine is set to "No, only JIRA administrators can manage organizations."

With this set, do your agents have the "Add customers" button?

[Victor Mutambuki]

Jason,

Then you shouldn't have any issues. However, if one of your agents is also a JIRA admin, they can add customers. Make sure none is a JIRA admin.

Victor

[Jason Freeman]

Victor,

All of my agents are in the jira-servicedesk-users group.  That's the way it should be, right?

Also, just to be clear: you are saying that in your instance of JSD, your agents do not have the "Add customers" button, right?

[Victor Mutambuki]

Jason,

Correct. They should be in the group mentioned.

Secondly, my agents can't add users as i've given only JIRA admin permission to do so.

Victor

[Jason Freeman]

Victor, so if you click the little "people icon" on the left as an agent, the button in the upper-right ("Add customers") isn't there at all?  (See screenshot.)

Sorry for all the questions.  I'm just trying to figure out what's different between my setup and yours.

[Victor Mutambuki]

Jason,

It seems that as long as you're an agent, you can add customers, but can be prohibited from adding to organization, via  "No, only JIRA administrators can manage organizations."

Add Organization button will not be available but Add customer button will.

I take back my previous answer.

Victor