Email Visibility in Site Admin User Search

Jira Development Jira Cloud
1

Hi! We (and at least some of our customers) have encountered the rollout of profile visibility controls (Weekly GDPR API status development - Jul 12 (Profile Visibility Controls Launching on Monday)).

We have confirmed that when we call user search API (/rest/api/2/user/search?query=), “emailAddress” is empty for users who have not changed default visibility settings. When users change email visibility to “Anyone”, we then get a valid email for “emailAddress” in the response.

However, documentation (Update your profile and visibility settings | Atlassian Support) suggests that “Your email address is always visible to site admins no matter its visibility setting.” When we make user search API calls as a user belonging to the “site-admin” group to search for a user with default email visibility, we still see an empty “emailAddress”.

Are additional groups or permissions required for API users to see site user emails? Does visibility to site admins only apply in the UI and not APIs perhaps?

Cheers

2

Hi Michael,

Your email address is always visible, no matter its visibility setting, to site admins when they’re managing users in the Administration screens. Visibility settings for all other fields, including the email address field, are applied when site admins collaborate with you within products.

As I understand admins could see emails only in the Administration screens but users’ settings are applied for the REST API.

3

Thank you, Aleksandr.

From what I have observed and what I am more recently reading in comments, it appears that, for non-managed accounts, no group memberships or permissions granted to a user can allow that user to see the email address of a JIRA user retrieved by REST API whose account’s email privacy setting is not visible to anyone.

If someone from Atlassian could confirm this, I would appreciate it.

Thanks!