If you’re new to Atlassian cloud products, you most likely have one site with a single instance of each product. At the most, your site has Confluence and each Jira product (Jira Software, Jira Service Desk, and Jira Core). In addition, your company may also use other Atlassian products, i.e. Bitbucket and Trello.
As a site or product admin, you can grant users product access, but you don’t have much control over their accounts or the products that contain your company’s content. For more visibility and control of your user and content management, we provide one central place within your Atlassian organization.
Get the most out of your organization
Because your organization is where you manage your company’s users and content, it's at the top of your cloud hierarchy.
From your organization, you claim all user accounts with your company’s domain. They become managed accounts, which gives you the ability to edit or delete them as necessary and enforce security policies. You can also set up user provisioning so that users sync between your identity provider and your Atlassian organization.
Your organization is where you can find your sites and products. All your Atlassian products are in one place, giving you a full picture of your company’s product usage and what you’re paying for your bills. Your organization also gives you insight into what’s happening at the site level with an audit log that lists activity for all sites.
In the future, you'll also come to your organization to globally manage product access and billing across all Atlassian products, including Trello and Bitbucket.
Follow these steps to get the most out of your Atlassian organization:
1. Make other users organization admins
You may be the only organization admin. If you’d like other users to help out, select Settings > Administrators from the left navigation to give other users access to the organization. For a full list of what organization admins can do, see Give users admin permissions.
2. Verify your organization’s domain
If you already have a site, you know that giving a user access to Jira or Confluence doesn't give you control over their Atlassian account. You must verify your domain to manage Atlassian accounts that belong to that domain.
You can verify as many domains as your organization owns. When you’re done, all Atlassian accounts with email addresses from those domains become managed users and appear on your organization’s Managed accounts page. For more details about what you can do with managed users, see Managed accounts.
If you manage your users through G Suite, see G Suite integration for more details.
3. Determine how you want to enforce security
An organziation automatically gives you the ability to edit, deactivate, and delete accounts for the domains you’ve verified, giving you an added level of security. You have other options depending on how your company as a whole manages security across all its systems. For ideas on how to best manage security at your company, see our security best practices.
Depending on how you decide to enforce security, you may want to subscribe to Atlassian Access. For example, if your company uses an identity provider, you can configure SAML single sign-on, making it easy for users to log in to all systems with only one set of credentials they have to remember. If you don’t have an identity provider, Atlassian Access also gives you the ability to enforce two-step verification and access audit logs.
4. Set up Atlassian Access
With an Atlassian Access subscription, you get SAML SSO, user provisioning, enforced two-step verification, and other security features for your organization.
You still have an organization and can manage your users without subscribing to Atlassian Access.
If you’re not sure if Atlassian Access is right for your company, you can try it out for 30 days for free. Go to Billing from the left navigation to start your trial.
Scale your organization
As your company grows, your Atlassian organization can grow with it. You may experience one or more of these situations as you scale:
For any number of reasons, you may find your company administering two (or more) Atlassian organizations. To get the full benefit of managing all users and content in one place, you can transfer all sites and products from one organization to another. For more details, see Transfer products to another organization.
Multiple instances of Jira and Confluence
Multiple departments may require separate instances of Jira and Confluence. Because each site has one instance of each, you’ll need to create a new site if your company needs another instance of a product.
You're currently unable to create a site from your organization. Instead, you can sign up for a new product (starting a new site) at atlassian.com. From the site’s organization, you can transfer the products to your existing organization.
Newly-implemented identity provider
When your company is small, it may not require an identity provider. As you hire more people, your needs change and you want to more easily manage users for all your systems. An identity provider allows you to update their account details from one place and enforce secure login policies.
Whether or not you already have an Atlassian Access subscription, you can configure user provisioning and SAML single sign-on for your provider — allowing your users to log in to all your company’s systems with one set of credentials. Learn more about Atlassian Access policies and features.