症状

In Service Management 2.0 and above with public signup, Customers are added into the certain groups and count towards Jira license. As a result, Service Management Customers are able to login Jira and perform actions based on the permission given to the configured groups. 

 By default they should not be added into any groups.

診断

Jira is configured to external user management such as LDAP or Crowd.

原因

This is an expected behaviour as Default Group Membership option is enabled for Jira to LDAP or Crowd, thus new users will be automatically added into the configured group(s), usually jira-users so they can login.

回避策

Disable Default Group Membership in LDAP or Crowd.