Hi! We (and at least some of our customers) have encountered the rollout of profile visibility controls (Weekly GDPR API status development - Jul 12 (Profile Visibility Controls Launching on Monday)).
We have confirmed that when we call user search API (/rest/api/2/user/search?query=), “emailAddress” is empty for users who have not changed default visibility settings. When users change email visibility to “Anyone”, we then get a valid email for “emailAddress” in the response.
However, documentation (https://confluence.atlassian.com/cloud/update-your-profile-and-visibility-settings-968656104.html) suggests that “Your email address is always visible to site admins no matter its visibility setting.” When we make user search API calls as a user belonging to the “site-admin” group to search for a user with default email visibility, we still see an empty “emailAddress”.
Are additional groups or permissions required for API users to see site user emails? Does visibility to site admins only apply in the UI and not APIs perhaps?