Manage user access to units

When you set up units, organization and unit admins can group apps and users to ensure knowledge stays within a unit's collaboration boundary.

Managing access involves:

Unit access: Determines which unit a user belongs to. This affects who they can @mention, what they see in Rovo, and which teams they can join.

App access: Determines which specific Atlassian apps a user can use within that unit.

Each app belongs to a unit. Users become part of that unit when they're added to the unit, they are part of a group added to the unit, or provisioned through allocation policies.

Scope and permissions

User access is shared between organization admins and unit admins.

Unit admins should contact their organization admin when:

• A user needs to be assigned as a unit admin for a new boundary.

• There are issues with user provisioning or SSO that affect the entire organization.

Manage users within a unit

Add a user to unit

Organization admins can add users to any app or group in a unit. Unit admins can only add users for the unit they administer.

To add a user to a unit:

1. 移動 アトラシアンの管理。組織が複数ある場合は、対象の組織を選択します。

2. Select Units in the side navigation.

3. Select a unit to view its details.

4. Go to the Users tab, and select Invite users.

5. 招待するユーザーのメール アドレスを入力します。

6. In the Apps tab, assign a role to at least one app or add them to at least one group.

7. Personalize their invitation if you wish to.

8. [アクセスを許可] を選択して確定します。

Alternatively, organization admins can also add users from the Directory page:

1. 移動 アトラシアンの管理。組織が複数ある場合は、対象の組織を選択します。

2. [ディレクトリ] > [ユーザー] の順に選択します。

3. [ユーザーを招待] を選択します。

4. 招待するユーザーのメール アドレスを入力します。

5. In the Apps tab, filter by units that you want to assign the user to.

6. Assign a role to at least one app or add them to at least one group.

7. Personalize their invitation if you wish to.

8. [アクセスを許可] を選択して確定します。

You can create groups within a unit to manage bulk access. Unit admins can create and manage these groups to grant app access locally, without needing organization-wide permissions.

To view which units a user has access to:

1. 移動 アトラシアンの管理。組織が複数ある場合は、対象の組織を選択します。

2. Go to Units in the side navigation.

3. Select a unit to view its details.

4. Open the Users tab and select the user’s name.

5. In the Unit access tab, you'll see all units the user has access to.

When users need access to multiple units

If a user requires access to multiple units, you can either grant them access to each unit separately or provision access to multiple units through a single allocation policy. Their search, @mention and Rovo agent will be context-dependent based on the app they are using.

ユーザーの削除

Organization admins can remove users from any unit. Unit admins can only remove users for the unit they administer. Removing a user revokes their access to all apps within the unit while retaining all content they created.

ユーザーを削除するには、次の手順を実行します。

1. 移動 アトラシアンの管理。組織が複数ある場合は、対象の組織を選択します。

2. Go to Units in the side navigation.

3. Select a unit to view its details.

4. In the Users tab, select Action (…) against the user’s name you want to remove.

5. [ユーザーを削除] を選択します。

What users can access within a unit

Users have the following access within a unit:

• When working across apps (like creating a Jira issue from Confluence), users only see sites in their unit

• Hovering over a link will only show a preview if the object exists within the same unit boundary.

• When selecting sites or adding smart links, options are limited to the current unit to prevent accidental data exposure.

• When viewing recent activity, the "Recent" list in Home or in-app navigation surfaces content from the unit.

• When users invoke Rovo (/rovo), they can only discover and interact with data within their unit.

• When using automations, actions stay within unit boundaries.

• Notifications are limited to activities and content within the unit.

• When accessing multiple units, users can switch between them using the unit switcher.