Rename a group on Active Directory that is used by Stash

[Vandrey Trindade]

Hi!

I am the Infrastructure Analyst of my company.

I've been trying to rename our Active Directory groups to organize the environment.

I asked to the person who manages Jira, Stash and Bamboo what could be the problems of renaming groups no AD that are used by those software.

Then I renamed one group on AD to check with him if on the next synch process it would be reflected on Stash. And nothing changed there...

Is there a way to rename a group on AD and synch it to Stash, or he will need to change the permissions to the new group?

[Craig Castle-Mead · Accepted solution]

Hi @Vandrey Trindade 

Unfortunately group renaming support does not exist within the Atlassian ecosystem at this stage. If you rename a group foo to bar in AD, the Atlassian products will effectively see foo deleted and bar created with the same members. No permissions/configuration around foo will be changed.

the approach we take is to create a new group, populate with the same members, wait for it to sync, then change all permissions from foo to bar. When complete delete and foo group. If you just rename the group you need to very very quickly change the permissions as soon as the sync happens or you risk interrupting access for your teams.

to answer your next likely question, no, there is no easy/global way to see where a group is used.

CCM

[Vandrey Trindade]

@Craig Castle-Mead

Thanks a lot for your quick and complete answer!

[Jimmy Seddon]

Hi @Vandrey Trindade,

This may be a question for the person at your company that manages Jira, Stash (now BitBucket Server I believe) and Bamboo, but do you know how users and groups are being synchronized?  Is Jira connecting directly to the AD server and being used to communicate to the other applications? Or do you also have an Atlassian Crowd server that you are connecting to your AD server and it is feeding user and group information to Jira, BitBucket & Bamboo?

I'm only asking because we have our Jira server connecting directly to our AD server, but I don't believe it provides group information from our AD server.  I personally manage groups, and there is a long standing issue where groups can't be renamed in Jira (https://jira.atlassian.com/browse/ID-6677) they must be re-created with the new name and all the users need to be moved to the new group and permissions for the groups updated.

I hope that helps!

-James

[Vandrey Trindade]

I really don't know the answer for your first question...

But I'll follow what Craig Castle-Mead said... Thanks!