Confluence users losing group access after automated deactivation (AD sync)

[Gustavo Francisco Pinheiro]

Olá,

Estou configurando o Confluence na minha empresa sincronizando usuários e grupos do Active Directory local. Tanto os usuários quanto os grupos de acesso estão sendo replicados corretamente para a plataforma.

No entanto, ao configurar um fluxo de trabalho automatizado para desativar usuários durante o período de férias, quando retornam ao trabalho, os funcionários acabam perdendo todo o acesso aos grupos no Confluence.

Como solução temporária, estamos removendo usuários de todos os grupos do Confluence, forçando uma nova sincronização entre o Active Directory local e o Confluence e, em seguida, reatribuindo os usuários aos grupos. No entanto, esse processo é manual e pouco prático.

Gostaria de saber se alguém já enfrentou esse problema ou conhece uma solução definitiva para evitar a perda de acesso ao grupo após a reativação do usuário.

Hello,

I am configuring Confluence in my company by synchronizing users and groups from the on-premises Active Directory. Both users and access groups are being replicated correctly to the platform.

However, when configuring an automated workflow to deactivate users during their vacation period, when they return to work the employees end up losing all group access in Confluence.

As a temporary solution, we are removing users from all Confluence groups, forcing a new synchronization between the on-premises AD and Confluence, and then reassigning the users to the groups. However, this process is manual and not very practical.

I would like to know if anyone has experienced this issue or knows of a definitive solution to prevent the loss of group access after the user is reactivated.

[Marc -Devoteam-]

Hola @Gustavo Francisco Pinheiro 

To accomplish this, you could change the default groups that have access to Confluence.

Within Atlassian Administration, go to the app section and choose manage Confluence.

You can add groups here and change the default, then you can even remove the default groups Atlassian provides.

---

Para lograr esto, puede cambiar los grupos predeterminados que tienen acceso a Confluence.

En Administración de Atlassian, vaya a la sección de aplicaciones y seleccione Administrar Confluence.

Puede agregar grupos aquí y cambiar los predeterminados, e incluso puede eliminar los grupos predeterminados que Atlassian proporciona.

[Gustavo Francisco Pinheiro]

Hello,

I am configuring Confluence in my company by synchronizing users and groups from the on-premises Active Directory. Both users and access groups are being replicated correctly to the platform.

However, when configuring an automated workflow to deactivate users during their vacation period, when they return to work the employees end up losing all group access in Confluence.

As a temporary solution, we are removing users from all Confluence groups, forcing a new synchronization between the on-premises AD and Confluence, and then reassigning the users to the groups. However, this process is manual and not very practical.

I would like to know if anyone has experienced this issue or knows of a definitive solution to prevent the loss of group access after the user is reactivated.

[Marc -Devoteam-]

Hi @Gustavo Francisco Pinheiro 

How are you suspending a managed user, where SSO is in place and simply said AD is in the lead of user management?

If the users stays in the synced AD groups, this should remain there?

Are you using managed groups or local Confluence groups?

Can you provide visual context?