Our team uses Microsoft Entra groups to grant application access and restricts access by having owners set on the groups that are then in charge of who gets access or not.
We also have documentation that says for access to X, add the user to group Y.
So what happens is a tech will find the confluence doc to see what group is needed, lookup the group in entra to find the owners, and then reach out to the owners to have the user added.
We have hundreds of these groups so documenting the owners of every one directly into confluence is not really ideal. Especially when we factor in turn over and having to update the confluence page any time a new owner is added/removed.
What i have been asked, is if there is an app that can be installed into confluence that looks up the owners of the groups for us and shows this live within the confluence document. That way we can remove the step of having to look them up in Entra. This could also give us the capability of having these owners published in knowledge documents that users that don't have access/knowledge to Entra could then lookup themselves.
I've tried doing some google search and have not come across anything like this. But figured i would ask the community. Does anything like this exist?
Hi @Jeremy Wood
I'm not aware of any apps either. Personally, I wouldn't recommended. As you mentioned, if there are many multiple groups and more members, loading in Confluence might lead to performance bottlenecks. Here is how you can tackle it:
Option 1: Build an Atlassian Forge Custom Macro
If you strictly want live owners embedded directly in Confluence Cloud, developers can build a lightweight Atlassian Forge Custom Macro
Option 2: Automated Push via Power Automate / Logic Apps
You can set up a daily or event-driven Power Automate flow that queries Entra for group owners via Graph API and pushes updates to a master table in Confluence using the Confluence REST API.
Option 3: Entra Access Packages
In Entra ID, create an Access Package containing your Group.
• The end-user (or tech) clicks the link and requests access.
• Entra automatically routes the approval email/notification to whoever the current group owners are in Entra.
• Once approved by the owner, Entra automatically adds the user to the group and revokes access when the duration expires.
• Zero lookup needed by techs, and zero manual page maintenance
Want live display in Confluence? Option 1 (Forge Macro).
Want to stop techs from having to manually ping owners altogether? Option 3 (Access Packages).
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.