Help with the user deactivation automation for 90 days inactivity

[Hari Krishna]

Hi team,

I’m trying to implement an automation to manage inactive users in our instance and wanted to check if my approach is correct or if there’s a better way to do this.

The requirement is to check the users activity, if they accessed the product or not

• If a user is inactive for 83 days → create a Jira ticket for tracking

• If inactivity reaches 89 days → add a reminder comment on the same ticket

• If inactivity crosses 90 days → remove the user’s product access (Jira, Confluence, etc.) it was only checking with individual product and the api call i am trying to check the details is 
  
  "  https://api.atlassian.com/admin/v1/orgs/ORG_ID/directory/groups/GROUP_ID/members?limit=100 "

For this, I’m currently using the Admin API to fetch users and checking the last_active_at field to calculate inactivity.

My questions are:

• Is last_active_at reliable enough for this kind of inactivity tracking?

• Does it truly represent user activity across all Atlassian products?

• Is there any better or recommended way to track inactivity at org level before removing access?

Any guidance or best practices would be really helpful.

Thanks!

[Marc -Devoteam-]

Hi @Hari Krishna 

This depends if you have not just Jira, but also JSM, Confluence or others, all product have a last active date.

These dates can differ, as it is based on access to the product.

So no this is not trustworthy for all products, based on the call to get this information, you would need to see if multiple date options are returned.

Better solutions are offered by 3rd party integrations.

See, https://marketplace.atlassian.com/search?query=user+management&hosting=cloud 

[Hari Krishna]

Hi @Marc -Devoteam- ,

Thanks for the quick response, I want to work based on the last access date like you mentioned and what I am trying to achieve here is I am using the group id which the product access is given once the user is not logged in to 90 days the user is removed from the group, same goes for the confluence.

Will it gonna be working or not that's the case here

[Marc -Devoteam-]

Hi @Hari Krishna 

That depends if you have multiple Atlassian apps, based on the user there is last_active_date set for each of these apps, if the user can access those.

This can work if you have made sure different groups are used for app access, so you have different groups for JSM, Jira, Confluence etc..

But make sure to have good governance in place so no other admin might use these groups in multiple apps, then this could go horribly wrong.