How to copy Delegated Auth Directory with different AD ?

[Daniel]

We completed migration Miscrosoft Active Directory to new One.
The struture is quite same with the existing.

In crowd previously we used Delegated Auth Directory (to store Groups).
In order to change pointing to new AD, we have to create another Delegated Auth Directory point to new AD.

The question is how to copy Groups with its assignment to new Delegated Auth Directory ?

Kindly help me on this migration.
Thank you.

[Tomislav Tobijas]

Hi @Daniel ,

Not an expert here, but from what you've also seen, I believe Atlassian's migration tools do not natively support direct copying of groups and group memberships between directories > meaning manual sync is required.

Some workarounds you could probably use are to export group membership data from the old directory using Crowd's REST API or database query and then importing or scripting the creation of groups and assignments in the new directory.

I guess steps would be something like:

1. Export group memberships from old directory (CSV file)
2. Prepare the CSV for import (e.g., group name, username...)
3. Use Crowd's CSV importer; this article might help

If you prefer automation, you could maybe use REST API to bulk add users to groups. I've managed to dig out a scripts like this one, but I haven't tested it myself:

import requests
import csv

crowd_url = 'https://your-crowd-instance/rest/usermanagement/1/group/user/direct'
auth = ('crowd-admin', 'your-password')

with open('group_memberships.csv', newline='') as csvfile:
reader = csv.DictReader(csvfile)
for row in reader:
group = row['group_name']
user = row['username']
payload = {'name': user}
r = requests.post(f"{crowd_url}?groupname={group}", auth=auth, json=payload)
print(f"Added {user} to {group}: {r.status_code}")

Again, I haven't played with this much, so someone else might have smarter things to say. It might be worth reaching out to Developer Community if you need a hand related to some custom scripts or if you have API-related questions. 👀

Cheers,
Tobi

[Daniel]

Hi @Tomislav Tobijas 


Thank you for your explanation, I will follow your steps.
Actually I just copy for Groups and Groups membership.

Becasue User, Attributes , it supposed to be done by Sync from Active Directory.


Thank you


Cheers,
Daniel