nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

JIRA Security - Basic Understanding

Bruce Sisko

I am new to JIRA administration.

I am in the process of creating a list of users who are counted against the JIRA license. There are many uses who have not used JIRA for over a year. I am looking to disable their access to JIRA so that they do not count against the license.

From what I can gather, JIRA was configured several years ago. It appears that internal security was used initially and then migrated to LDAP / Active Directory.

Reviewing USER MANAGEMENT, I can see a list of Active Directory Security groups a user belongs to. I am also seeing "Jira Software" next to both an AD Security Group and what looks to be an internal group "jira-users".

What is the best practice to disable users? In addition, is it possible to see how AD was implemented (synchronized directory vs delegated authentication )?

Accepted answers

Ravi Sagar _Sparxsys_

Hi @Bruce Sisko

Deactivating is the simplest thing you can do in Jira.

You can also check how your directory is configured and most likely people of certain AD group are synced in Jira and the application access must have been given to one or more of these groups.

You can also remove users from the AD group (in your ldap) so they are also removed from Jira and not count towards he license.

Ravi

All comments

Ravi Sagar _Sparxsys_

Hi @Bruce Sisko

Deactivating is the simplest thing you can do in Jira.

You can also check how your directory is configured and most likely people of certain AD group are synced in Jira and the application access must have been given to one or more of these groups.

You can also remove users from the AD group (in your ldap) so they are also removed from Jira and not count towards he license.

Ravi

Bruce Sisko

Ravi,

Thank you. This helps augmented my learning curve.

Richard White _TechTime_

Hi Bruce,

It looks like the technical question has already been answered, but if you have many users to deactivate (or need to do it regularly) there is an easier solution.

The company I work for (TechTime) - has an app designed exactly for this use case:

User Management for Jira

It allows you to deactivate users in bulk, or on a scheduled timer (e.g. every month)

It also allows you to select only users who haven't logged in for the last x months or to select only users who have never logged in (or any combination along those lines).

If it sounds useful and you would like any help getting it set up, let us know.

Cheers,

Richard

Bruce Sisko

Thanks Richard. I'll bring this up to our governance team.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira

jira-server

atl-gruland