Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Methods to automate user access changes active directory request fulfilment

Matt Jajko
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
June 23, 2023

Hi team,

We are using Jira Service Management (Cloud) for our IT Service Management capability. We have a hybrid On-Premises Active Directory environment, synchonrised to Azure AD.

As I'm sure many of you folks encounter, we get absolutely smashed with routine service requests such as:

- Create new user.
- Create distribution list.
- Modify distribution list/shared mailbox/MS Teams membership

+ countless others.

We want to explore and start implementing some automation for these high volume, low complexity tasks, where - once the request is logged in a structured way and an approval workflow is complete, some sort of integration actually does the work, instead of an agent manually needing to action.

I wished to enquire whether anyone could point me to:

1. Any out of the box connectors that might be available to do some of these things without us needing to implement some sort of enterprise service bus to handle message queuing, error handling and so forth, let alone writing powershell scripts to do all of this stuff.

2. Any examples of architectural documents or solution designs (either using OOTB connectors, or custom solutions if necessary) to do what we need.

3. How you deal with the need for, in the request form to be able to do lookups back into AD/Azure AD?
For instance, if we wanted to automate the "Modify Distribution List" request item, it will be necessary for there to be some sort of lookup control to allow someone to select the valid distribution list they want modified, rather than leaving it as a text box, that will likely be prone to error 99% of the time! From my research, it doesn't look like there's any OOTB capability to do this!

 

Any general experiences in doing what I'm trying to achieve or commentary would be invaluable.

1 answer

1 vote
Jehan Bhathena
Community Champion
June 24, 2023

Hi @Matt Jajko ,

You may want to have a look at Jira Automation : https://support.atlassian.com/cloud-automation/docs/jira-automation-actions/#Send-web-request

Azure supports a lot of API's as well, but I haven't worked a lot with Azure so you might want to check if the actions you want Jira to perform have suitable APIs in Azure.

---

You also mentioned updating the values of "Modify Distribution List", did you mean you want to update the values present in Jira? If so that too can be achieved by Jira's API : https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-issue-fields/#api-rest-api-3-field-fieldid-put. I would suggest creating a Jira automation this way:

* Trigger: Schedule rule to run every 12 Hours

* Action: Fetch values from current distribution list

* Action: Use Jira API to patch the custom field in Jira that stores the current values

 

Hope this helps you or atleast gives you nudge is the right direction :-)

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
PREMIUM
PERMISSIONS LEVEL
Product Admin
TAGS
AUG Leaders

Atlassian Community Events