# Guidelines for requesting access to email address

**URL:** <https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603>\
**Category:** Announcements\
**Tags:** gdpr, email\
**Created:** [March 5, 2019, 1:13am UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603 "2019-03-05T01:13:24Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![DmitryBogomolov](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/dmitrybogomolov/32/38484_2.png) [@DmitryBogomolov](https://community.developer.atlassian.com/u/DmitryBogomolov)\
**Post date:** [October 1, 2019, 12:24pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/21 "2019-10-01T12:24:54Z")

</div>

Thank you for the guidelines. Could somebody explain me, can I request access to the Email API for a simple 3LO app created via [Log in with Atlassian account](https://developer.atlassian.com/apps/create) if the app itself is private and still is in “In development” status?

---

<div class="post-metadata">

**Author:** ![rwhitbeck](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/rwhitbeck/32/35781_2.png) [@rwhitbeck](https://community.developer.atlassian.com/u/rwhitbeck)\
**Post date:** [October 7, 2019, 4:37pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/22 "2019-10-07T16:37:07Z")

</div>

@DmitryBogomolov no 3LO apps can’t have access to the email API. Access requires at Atlassian Connect app key. 3LO apps should not need it as they will receive non-public PD for the users who grant access.

---

<div class="post-metadata">

**Author:** ![michal.nykiel](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/michal.nykiel/32/35879_2.png) [@michal.nykiel](https://community.developer.atlassian.com/u/michal.nykiel)\
**Post date:** [December 3, 2019, 2:24pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/23 "2019-12-03T14:24:53Z")

</div>

> [@akassab](#):
>
> We will also update your app listing on Atlassian Marketplace to inform our customers that your app has been approved to access email address despite profile visibility control settings. Upon install, your app will display a new scope associated with this API.

I’m guessing that this also means that existing customers will have to manually approve the upgrade to newer versions (with extended scope) in “Manage apps” tab?

---

<div class="post-metadata">

**Author:** ![kkolina](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/kkolina/32/36629_2.png) [@kkolina](https://community.developer.atlassian.com/u/kkolina)\
**Post date:** [December 9, 2019, 4:51pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/24 "2019-12-09T16:51:08Z")

</div>

I raised a Request access to the Email API ticket in DEVHELP a week ago. There’s been no follow-up from Atlassian yet. I think my ticket might have been lost due to [refactoring DEVHELP](https://community.developer.atlassian.com/t/developer-support-link/33609/4). Could you suggest who to contact to check that?

---

<div class="post-metadata">

**Author:** ![DanielOLeary](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@DanielOLeary](https://community.developer.atlassian.com/u/DanielOLeary)\
**Post date:** [February 19, 2020, 11:18pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/25 "2020-02-19T23:18:52Z")

</div>

@akassab  
How quickly can I expect my ticket to be reviewed?  
It has been a few days now with no updates.

Thanks.

---

<div class="post-metadata">

**Author:** ![QuintenClaes](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/quintenclaes/32/39463_2.png) [@QuintenClaes](https://community.developer.atlassian.com/u/QuintenClaes)\
**Post date:** [March 18, 2020, 12:28pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/26 "2020-03-18T12:28:53Z")

</div>

@akassab Might be worthwhile to reference this info in the documentation here: [https://developer.atlassian.com/cloud/jira/platform/rest/v3/?utm\_source=%2Fcloud%2Fjira%2Fplatform%2Frest%2F&utm\_medium=302#api-rest-api-3-user-get](https://developer.atlassian.com/cloud/jira/platform/rest/v3/?utm_source=%2Fcloud%2Fjira%2Fplatform%2Frest%2F&utm_medium=302#api-rest-api-3-user-get)

---

<div class="post-metadata">

**Author:** ![LukaszWiatrak](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/lukaszwiatrak/32/49022_2.png) [@LukaszWiatrak](https://community.developer.atlassian.com/u/LukaszWiatrak)\
**Post date:** [April 22, 2020, 4:50am UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/27 "2020-04-22T04:50:41Z")

</div>

@akassab How long it usually takes for the app from being approved to being included in whitelist so API can be used? I got my application approved month ago (24th of March), but still I cannot use the API

---

<div class="post-metadata">

**Author:** ![jack](https://avatars.discourse-cdn.com/v4/letter/j/cc9497/32.png) [@jack](https://community.developer.atlassian.com/u/jack)\
**Post date:** [April 22, 2020, 7:09am UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/28 "2020-04-22T07:09:59Z")

</div>

@akassab, same here, waiting for over a month and nothing.

DEVHELP-4272, 4273

---

<div class="post-metadata">

**Author:** ![TsilaHadad](https://avatars.discourse-cdn.com/v4/letter/t/ac91a4/32.png) [@TsilaHadad](https://community.developer.atlassian.com/u/TsilaHadad)\
**Post date:** [May 21, 2020, 3:02pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/29 "2020-05-21T15:02:50Z")

</div>

@akassab,  
We are a data integration platform that one of our clients requested access to the Email API.  
After getting his access, will we be able to use his access to let him pull his data? Do we need to also request for access?

---

<div class="post-metadata">

**Author:** ![akassab](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/akassab/32/40412_2.png) [@akassab](https://community.developer.atlassian.com/u/akassab)\
**Post date:** [May 22, 2020, 5:09pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/30 "2020-05-22T17:09:09Z")

</div>

@TsilaHadad - Access is granted at the app level (where app is defined as a unique connect app key). You shouldn’t need separate apps for the same use case.

---

<div class="post-metadata">

**Author:** ![TsilaHadad](https://avatars.discourse-cdn.com/v4/letter/t/ac91a4/32.png) [@TsilaHadad](https://community.developer.atlassian.com/u/TsilaHadad)\
**Post date:** [June 1, 2020, 8:53pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/31 "2020-06-01T20:53:43Z")

</div>

@akassab, thanks a lot for your answer.

---

<div class="post-metadata">

**Author:** ![rgordonsg](https://avatars.discourse-cdn.com/v4/letter/r/3d9bf3/32.png) [@rgordonsg](https://community.developer.atlassian.com/u/rgordonsg)\
**Post date:** [August 4, 2020, 2:52pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/32 "2020-08-04T14:52:08Z")

</div>

@akassab I’ve seen several posts about the turnaround time for getting approval for using the email API. I find myself in the same boat. Could you speak to the expected turnaround time for a request? Is there more that we, as developers, need to do other than create the request? Thanks!

---

<div class="post-metadata">

**Author:** ![akassab](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/akassab/32/40412_2.png) [@akassab](https://community.developer.atlassian.com/u/akassab)\
**Post date:** [August 4, 2020, 9:39pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/33 "2020-08-04T21:39:16Z")

</div>

@rgordonsg - We try to resolve requests for approval to the Email API within 7-10 business days however the team who reviews these requests also process new app approvals, changes to existing app payment models, refunds and remittance reports, as well as general issues / inquiries with the Atlassian Marketplace. Unfortunately, our backlog has been higher than expected and as a result our response times have suffered. @nmansilla and @WarrenChen are looking into this and may be able to shed some more light on what we’re doing to improve our support across the board.

In terms of what, if anything you (the Developer Community), can do to speed up the process for Email API requests specifically… please include all app keys (including app keys for testing and development) in your request. Also please update your data security and privacy policy to include language about what you intend to collect, why and how someone can request for their personal data to be removed. These additional steps will help us reduce back and forth to complete your request.

---

<div class="post-metadata">

**Author:** ![JohnPrice](https://avatars.discourse-cdn.com/v4/letter/j/48db29/32.png) [@JohnPrice](https://community.developer.atlassian.com/u/JohnPrice)\
**Post date:** [October 6, 2020, 7:35pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/35 "2020-10-06T19:35:15Z")

</div>

Related question: Using the regular Jira Cloud API endpoint at [mycompany.atlassian.net/rest/api/3/user?accountId=xxxxx](http://mycompany.atlassian.net/rest/api/3/user?accountId=xxxxx) I can get email addresses for managed accounts, but not others. As hinted above, if the user sets their email visibility to Anyone, I get the email in the REST call.

I’m a bit confused about why the setting “Only you and admins” hides the email address from me - a Jira and site admin who is using my own API key to make the call.

---

<div class="post-metadata">

**Author:** ![david.toussaint](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/david.toussaint/32/51542_2.png) [@david.toussaint](https://community.developer.atlassian.com/u/david.toussaint)\
**Post date:** [November 4, 2020, 1:25pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/36 "2020-11-04T13:25:57Z")

</div>

Hi @akassab could you (or someone else from the team) please look into DEVHELP-5247? Thanks a lot!

---

<div class="post-metadata">

**Author:** ![YadvendraNaveen](https://avatars.discourse-cdn.com/v4/letter/y/5e9695/32.png) [@YadvendraNaveen](https://community.developer.atlassian.com/u/YadvendraNaveen)\
**Post date:** [December 2, 2020, 6:00pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/37 "2020-12-02T18:00:09Z")

</div>

@akassab - Is there a way to access email addresses of my workspace while developing the application? I want to access them during testing before I submit an application to list the app on marketplace

---

<div class="post-metadata">

**Author:** ![kams](https://avatars.discourse-cdn.com/v4/letter/k/779978/32.png) [@kams](https://community.developer.atlassian.com/u/kams)\
**Post date:** [January 13, 2021, 10:50am UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/38 "2021-01-13T10:50:58Z")

</div>

I feel am a bit lost in what the app is. I have OAuth2.0 3LO App. How do I get emails of the users?

---

<div class="post-metadata">

**Author:** ![aagrawal2](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/aagrawal2/32/40775_2.png) [@aagrawal2](https://community.developer.atlassian.com/u/aagrawal2)\
**Post date:** [January 14, 2021, 12:08am UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/39 "2021-01-14T00:08:06Z")

</div>

We have [get user email API](https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-users/#api-rest-api-3-user-email-get) which enables you to do that.

---

<div class="post-metadata">

**Author:** ![nmansilla](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/nmansilla/32/33772_2.png) [@nmansilla](https://community.developer.atlassian.com/u/nmansilla)\
**Post date:** [January 14, 2021, 1:41am UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/40 "2021-01-14T01:41:37Z")

</div>

@kams For 3LO apps,you can make an API call to: [https://api.atlassian.com/me](https://api.atlassian.com/me) with the bearer token of the authenticated user, and it will include their complete profile (including email address).

That being said, you must also include the Identity API in your OAuth 2.0 3LO app. See the bottom of the documentation page:

- [https://developer.atlassian.com/cloud/jira/platform/oauth-2-authorization-code-grants-3lo-for-apps/](https://developer.atlassian.com/cloud/jira/platform/oauth-2-authorization-code-grants-3lo-for-apps/)

Tip: You’ll need to add the scope `read:me` to the authorization request (the one that initiates the OAuth dance / consent flow for the end user). For example, the scope parameter in your URL might look something like this:

`scope=read%3Ame%20read%3Ajira-user`

(decoded, the value would be: _read:me read:jira-user_)

---

<div class="post-metadata">

**Author:** ![DurgaprasadBudhwani](https://avatars.discourse-cdn.com/v4/letter/d/9e8a1a/32.png) [@DurgaprasadBudhwani](https://community.developer.atlassian.com/u/DurgaprasadBudhwani)\
**Post date:** [January 14, 2021, 5:43pm UTC](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603/41 "2021-01-14T17:43:08Z")

</div>

could you (or someone else from the team) please look into DEVHELP-5581? Thanks a lot!

[Previous page](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603.md?page=1)

[Next page](https://community.developer.atlassian.com/t/guidelines-for-requesting-access-to-email-address/27603.md?page=3)
