Managing user licenses/disabling users in Confluence Server

[Dallas Brown]

Hi All

I have inherited a jira/confluence instance with a very small amount of user licenses for confluence.  We can't buy more thanks to the changes to availability.

Without getting into too much detail, we're running an old EOL version 6.2 - can't upgrade yet, but plans are in the works.

We keep going over our license allocation causing the whole instance to go read only (whose idea was this?!)

I've been able to pull who is licensed out of the database - but how do I control who is signing up and trying to license? Looks like past admin configured an AD sync of some sort (although I cant see it connecting to my AD so thats weird, just a "remote directory")

Additionally, how do I disable users if they're LDAP synced to stop their license from being used?  I cant delete them if they've contributed and I cant disable them because it says the directory is read only.

Thanks!

[Brant Schroeder]

@Dallas Brown Welcome to the Atlassian Community

First, you need to see how users are coming in and licenses are being applied you will be able to see how users are added by looking at the user directory.  https://confluence.atlassian.com/doc/configuring-user-directories-229838212.html

Since you have a Jira instance Confluence might be connecting to that and the Jira instance is connected to AD.

My guess is that AD is syncing and users in a specific group are getting licensed.  When they sync in this is what is pushing you over your limit.  These users would need to be removed from the group in AD.  

In Confluence, you can see what groups have been given permission to use that application in your global permissions.  Here you can always remove a group if you would like to control user access in a different way. https://confluence.atlassian.com/doc/global-permissions-overview-138709.html

Here are a couple of other things you can check.

[Samir Kareem]

.

[Dallas Brown]

Thanks 

I found an SQL script that will show users consuming licenses, and was able to get that AD group under control. 

I have no idea if it's syncing users from Jira yet however...  When I look at the user directories I see: 

Remote JIRA Directory |   Atlassian Crowd

[Brant Schroeder]

@Dallas Brown that looks like it is pulling from Jira.  You can look always look at the directory details to confirm.  If you have identified the AD group that manages licenses you should be fine now.