add users to jira software user group

[maarten breesnee]

Hi I have in crowd 3 active directories configured with user filters. I want that all users that pass that filter would be able to login into jira. In jira we have setup the application access that for jira-administrators (local group) and jira-software-users (local group). How can I setup crowd in that way that all users that pass the directory filters will automaticly be having jira software users so that they are all able to login.

Besideds this I have an Adgroup that is nested into the jira-administrator group.

Currently only the users that are assigned to the jira admininstrator group can login into jira.

[LynnG]

What you're seeing is expected based on how Jira Application Access works.

Currently, Jira grants product access only to members of the groups configured under Application Access:

• jira-administrators
• jira-software-users

If users are only arriving from Crowd via directory filters, but are not members of one of those groups, they won't be able to log in. The reason your Jira administrators can log in is that they're ultimately members of the jira-administrators group. [atlassian.com], [confluence...assian.com]

Recommended approach

In Crowd, create or identify a group that contains all users who should have Jira access, for example:

jira-software-users

Then either:

1. Synchronize an AD group directly to jira-software-users, or
2. Add your filtered AD groups as nested groups under jira-software-users.

After that, configure Jira Application Access to grant Jira Software access to the jira-software-users group. Users who are members of that group (directly or through nested groups) will be able to log in. [support.at...assian.com], [atlassian.com]

Important note about nested groups

If you're using nested AD/Crowd groups, make sure:

• Use Nested Groups is enabled in Crowd.
• Enable Nested Groups is enabled in the Crowd directory configuration inside Jira.

Otherwise Jira may not see users that are members through nested groups. [support.at...assian.com]

About directory filters

The Crowd directory filters only determine which users are imported/synchronized from the directory. They do not automatically assign Jira product access groups. A user passing the filter is visible to Crowd/Jira, but still needs membership in a group that Jira uses for application access. [confluence...assian.com]

So in short: directory filter ≠ Jira access. You must ensure all filtered users are members (directly or indirectly) of jira-software-users or another group configured for Jira Software application access. [confluence...assian.com], [atlassian.com]