List Uninvited Users in JSM Cloud Customer Page
Platform Notice: Cloud Only - This article only applies to Atlassian products on the cloud platform.
Summary
Uninvited users appear in a restricted Jira Service Management project's customer list, despite the "Only people directly invited" setting.
Solution
Browse project permission
Whenever users are granted the Browse Projects permission according to the project's permission scheme they're considered customers, unless they're added to the project as Agents or Project Administrators:

Consequently, they're listed on the project's customers page.
Options to remove uninvited users
In case you want such users to be removed from the Customers page, you should either:
Updating the project role membership so users with project roles that are granted the Browse Projects permission are removed or;
Changing your groups' membership by removing any user that is granted the Browse Projects permission.
Was this helpful?