Did you use JIRA Service Request to auto provision AAD groups?

Eva Dezsi

Hi all,

We have the following scenario:  we have a 3rd party app - and the licences for that app are based of AAD groups.

That means if user X is in group YES - he will have access to the 3rd party app, if he is in NO group, then he won't.

At the current moment the current process is:

- user X creates a JIRA service request 

- somebody goes and assigns manually user X to group YES, and removes him from group NO

 

As this is a highly repetitive task, I would like to know if somebody from uses self provisioning, what we would like to achieve is to have an automation, that based on teh service reuqest assigns user X to YES, and removes him from group NO.

Thank you all,

Eva

Andrew Laden

By AAD groups you mean Azure Active Directory groups?

We use Deviniti's Active Directory Attribute Sync, which has post functions to add/remove users from groups.

https://deviniti.com/support/addon/server/active-directory/latest/getting-started-ad/

Using that, you should be able to automate this. (though to be fair, I can't speak to Azure)

Of course, with scripting, you can call out to any command so if you can use a command line to add/remove users (via powershell script etc) then you could do that as well.