ACP-520 Atlassian Cloud Organization Admin Certification Questions and Answers

Groups are used to manage users with your organization who need the same permissions or restrictions. You can assign groups to one or more products within your organization, such as Jira Software, Confluence, or Bitbucket1.

References: Manage groups, Create and update groups

The groups jira-software-users-acme and jira-admins-acme are default groups that are automatically created when you invite users to Jira Software or assign them the Jira admin role in your organization. The suffix acme indicates that the groups belong to the organization with the domain name acme.com. The groups are used to manage product accessand permissions for Jira Software, but they do not imply anything about Confluence access or org admin privileges. Therefore, the only statement that is definitely true is that your organization has the Jira Software product.

References :

• Default groups and permissions
• Users & Permissions | Jira Software.

As an Org admin, Amit has the highest level of administrative privileges, which includes managing user accounts within the organization. This means that Amit has the authority to deactivate any user's account, including Lakshmi's. The Org admin role typically has more comprehensive permissions than the Confluence admin or a Space admin, who would have more limited and specific administrative powers within the scope of Confluence itself.

Organization insights is a feature that provides analytics and reports on your organization’s users, products, and security. You can access it from the Insights tab in your organization settings. Organization insights is available for all Atlassian cloud products and plans1.

References :

• View organization insights

Users who have access to at least one product are considered billable. In this case, Clyde, Derek, Earl, Francis, and Anne are billable users. Bob is not billable because he has not accepted the invitation to join the organization.

References = [Manage users and user tiers] and [Control how users get access to products]

Atlassian Access is a subscription that connects your Atlassian cloud products to your identity provider. It allows you to enable enterprise-grade authentication features, and additional oversight, across your company domains1.

References: Understand Atlassian Access, Atlassian Access: Enhanced Cloud Data Security & Governance

When Bob logs into the site for the first time, he will be redirected to the landing product, which is Jira. However, since he does not have product access to Jira, he will see a message that says “You don’t have access to this product” and a button that says “Request access”. If he clicks on the button, an access request will be generated for Jira, which will need to be approved by a product admin.

ReferencesSet your site’s landing product Request access to a product

For Atlassian Access billing, users on paid plans, like the Confluence Enterprise plan, are included in the bill. Atlassian Access provides security and centralized administration across all Atlassian Cloud products. Users on free plans, deactivated accounts, and portal-only customers (who typically access only a service desk portal and do not use licensed seats) are not counted as billable users for Atlassian Access.

The table is showing the total number of managed accounts in the organization and the number of deactivated accounts. The total number of managed accounts is the number ofbillable users in the organization, regardless of whether they have verified their email addresses or not. The deactivated accounts are the accounts that have been suspended by the organization admin and do not consume a license. Therefore, you can definitely conclude that you have 8 billable users in your organization12

References = View and manage your bill, Remove or suspend a user

Out of the five tasks, only verifying an email domain and adding a custom email address require org admin permissions. Configuring an email handler, customizing a notification scheme, and managing personal notification settings can be done by project admins or site admins.

References: Verify a domain to manage accounts, Add custom email addresses for product notifications, Create issues and comments from email, Configure notification schemes, Manage your Jira personal settings

When you add a domain to user access settings, you can specify the default product role for each product in your organization. This determines the level of access that users with verified email addresses from that domain will have when they join your site. If you set the product role to None, users will not have access to that product unless you manually grant them access later.

ReferencesSpecify how users get site access User access settings

Converting a managed account to an unmanaged account requires changing the email address of the account to a domain that is not verified by the organization. This action can only be done for all accounts from a verified domain, not for individual accounts.

https://support.atlassian.com/user-management/docs/make-changes-to-a-managed-user-account/

The org admin can remove a group from a product, but they cannot update or delete a group, or make a group a default group.

References:

• How to prepare for ACP-520 Atlassian Cloud Organization Admin
• Learn about Atlassian organizations

The statement that is true is that the group is definitely not used to restrict who can invite teammates to Jira. This is because inviting teammates to Jira is a site administration function that is controlled by the site admin role, not by any group. The other statements are false, as the group could be used for those purposes, depending on how the group is configured in the global permissions, the permission schemes, the issue security schemes, or the workflow conditions.

The status “Active” means that the user has an active account and can access the products they have been granted access to1. It does not imply anything about the user’s group membership, account type, last login time, or product access.

References:

• Manage users in your organization

When Holly signed up for a new Confluence Cloud site, two groups were definitely created along with the site. These are the default groups for Confluence: confluence-users and site-admins. The confluence-users group grants access to Confluence and allows users to create and edit pages. The site-admins group grants administrative privileges for Confluence and allows users to manage global settings, templates, permissions, and more12

References = Manage product access, Manage groups