Your organization has multiple sites and Ann is a user. The domain of Ann's email address is not verified. What is possibly true about Ann's account?

An Atlassian account is considered "unmanaged" by an organization if the domain of the user's email address has not been verified by that organization. Organization administrators have limited control over unmanaged accounts; they can grant or revoke product access but cannot perform account-level actions like deactivation, deletion, or enforcing security policies. A common reason for this scenario is that the user's email domain (e.g., [email protected]) is verified and managed by a different organization (e.g., the contractor's company). Therefore, it is possible that Ann has a managed account, but it is managed by another organization, not yours.

B. Enforcing security policies like two-step verification is a feature of Atlassian Guard and can only be applied to managed accounts from a verified domain.
C. Deactivating an Atlassian account is an administrative action reserved for managed accounts. For unmanaged accounts, you can only revoke product access.
D. An account is managed at the organization level, not the site level. If the domain is not verified for the organization, the account cannot be managed.
E. Deleting an Atlassian account is a permanent action that can only be performed by an administrator of the organization that manages the account.

1. Atlassian Cloud Administrator Documentation, "Managed and unmanaged accounts." This document states, "You can only manage accounts from domains you've verified." It clarifies that for unmanaged accounts, an admin can only "Manage product access," while actions like deactivating, deleting, and enforcing security policies are restricted to managed accounts.

2. Atlassian Cloud Administrator Documentation, "What are managed accounts?" This page explicitly notes, "A user can have an Atlassian account that is managed by a different organization. When you give them access to your products, you won't be able to manage their account." This directly supports the correct answer (A).

3. Atlassian Cloud Administrator Documentation, "Enforce two-step verification." The documentation specifies, "When you subscribe to Atlassian Guard, you can create and enforce authentication policies for your managed users." This confirms that two-step verification cannot be enforced on unmanaged accounts like Ann's.