Verify Domain - Old users vs New Group users in Guard

[Tim Kennett]

This is for Atlassian Guard but I can't select that...for whatever reason.

Im at the point of verifying my domain to start the installation of Gaurd on my instance but I'm just wondering what happens if I select a group - with three users in it - what happens to the other 97 users in the "administration" section.

Do they remain untouched or do these account just not work any more as the "group" now becomes the point of truth, so to speak?

Thanks in advance

[Tim Kennett]

Controls product access? 

Do you know where I can find that?

[Arkadiusz Wroblewski]

Hello @Tim Kennett 

97 users shouldn't stop working just because you verified the domain.

The main thing is to make sure you don't accidentally replace or sync the wrong group that controls product access.

[Tim Kennett]

Controls product access? 

Do you know where I can find that? We dont have anything sync'd to Azure or AD. 

[Arkadiusz Wroblewski]

By "product access group," I mean the group granting Jira/Confluence licenses under admin.atlassian.com → Directory → Groups.

So when you aren't syncing Azure AD, your cloud groups are the sole source of truth. Testing an Atlassian Guard policy on a new 3-user group will only affect those 3 people. The remaining 97 users will be completely safe, as long as you leave their original access group intact and apply the new policy only to the test group.