nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Is any API can revoke user's access?

eric_kao

Hi, I read the document and didn't find the related API to make revoke users.

just can remove the group to make user can't access.

I want to make this disable by API. Is any API can do that?

螢幕快照 2019-10-02 12.21.08.png

Accepted answers

All comments

Dario B

Hi @eric_kao ,

Is this for Jira Server or Cloud?

In Jira Server you can activate/deactivate a user by sending a PUT request to the /rest/api/2/user endpoint. For details see:

JIRA Server platform REST API reference (version 8.4.2. Other versions available HERE)

In Jira Cloud it is not possible to use above endpoint but, having claimed a domain, you can use the User Management REST API to disable a user by sending a POST request to the /users/{account_id}/manage/lifecycle/disable endpoint. For details see:

User Management REST API

I hope this helps.

Cheers,
Dario

eric_kao

Hi @Dario B

Now, we used Jira Cloud and this api is the version2.

But now is version3. I will try the User Management REST API to do this.

Thanks.

Regards,

Eric

Dario B

Thanks @eric_kao ,

Let us know how it goes, or just accept the answer if this helps

eric_kao

Hi @Dario B ,

Are there any example code about disable users?

I have tried to use the User Management REST API but still can't disable users.

Mark J Cunningham

Is there an API yet to revoke access to the product/Instance?

ie the Have Access Switch

The current solution deactivates the managed user from every Atlassian product, not just the instance

User Management REST API

Is there yet a way to revoke access to the instance for either managed or unmanaged accounts?

Seems strange that this ability is available in Server but is still not available in the cloud version.

Is there any other workaround to perform this via API/Automation?

Dario B

@Mark J Cunningham ,

Please notice this thread is from 2019 and many things might have been changed in the meantime. In these cases is always better to create a new thread instead of adding a reply to something that might be outdated.

Once this has been said, depending on what you are trying to achieve:

You can use the DELETE users REST API endpoint for Jira Cloud (DEL/rest/api/3/user) that removes the user from the site (does not delete the Atlassian Account)
You can use the Remove user from group REST API endpoint (DEL/rest/api/3/group/user) to remove the user from the desired product access groups, if you want to leave the user in Jira, even if without any product access

I hope this helps.

Cheers,
Dario

Mark J Cunningham

Delete only works if they have not made a comment, assignee or reporter.

Remove user from group, is fine but they are still marked as active.

Deactivate user only works for managed domain accounts, and only if not integrated with SSO

Just looking for a cloud version of the server PUT version that allowed you to set the active status to either true or false

There are multiple tickets and threads on this, and seems strange that this still cannot be done.

Part of this work is so that we can implement least privilage for people to onboard and offboard users, without making them either site admin, trusted or product admins

As those roles/groups provide too much access, and allow those users to add marketplace apps without permission, and change permissions, etc

Currently have project with linked automations that:
Adds user to instance, adds user to AAD, adds user to relevant AAD groups, adds non federated users to relevant Atlassian groups
Removes from same
Deletes from same where possible

What we are also having to do is have a dummy group to load leavers into so they can be manually "switched off" (active to false)

Which prevents mistaken or disgruntled re-access.

What would be great is for this to be achievable via the REST API, in a similar way the existing server version can do it

Dario B

@Mark J Cunningham ,

Unluckily there's currently no REST API endpoint available to do so. We have multiple feature requests open in our system for this but they didn't get enough traction so far:

You may want to vote and watch above FR so that you will be notified in case of any progress/update.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud