We're a paying customer of Atlassian -- using Jira, Confluence and some other tools. Today I've received an email from them that says:

"Now that you manage accounts for <organisation>, you can find out how many products your users administer outside your organization.

For details about each product and admin contact information, subscribe to Atlassian Access. Use these details to stay ahead of where company data is stored and start a discussion about transferring the products to your organization."

Apparently Atlassian wants us to pay a few $ extra per user per month so that they tell us what other Atlassian products have our own users activated.

I think it's fine to charge extra for complex/sophisticated features that are mostly useful to large enterprises. However, telling SMBs that there's a 'shadow IT' in the company that Atlassian knows about but won't disclose the details until the customer pays up feels wrong to me. Same applies to features like 'mandatory 2FA' that's not part of the 'normal' subscription.