We have gone through a couple of JIRA upgrades and found that legacy users' user-groups are not modifiable. It allows the action but does not reflect the removal after the action is completed. This issue still persists in our JIRA 5.1 test environment with backup data. * using a downloaded instance of JIRA * tested on 4.3.2, 5.1, 5.1.3, 5.1.4 versions of JIRA * system administrator privileges * using Active Directory authentication * applies to users that have been disabled via Active Directory at one point (not necessarily disabled now) * existing groups prior to being disabled are no longer removable (applies to user being both enabled or disabled in Active Directory) * new groups can be added and removed

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

JIRA - User groups not modifiable

Steven Lam

We have gone through a couple of JIRA upgrades and found that legacy users' user-groups are not modifiable.

It allows the action but does not reflect the removal after the action is completed.

This issue still persists in our JIRA 5.1 test environment with backup data.

using a downloaded instance of JIRA
tested on 4.3.2, 5.1, 5.1.3, 5.1.4 versions of JIRA
system administrator privileges
using Active Directory authentication
applies to users that have been disabled via Active Directory at one point (not necessarily disabled now)
existing groups prior to being disabled are no longer removable (applies to user being both enabled or disabled in Active Directory)
new groups can be added and removed

Accepted answers

Steven Lam

Marcus from Atlassian support found that the cwd_membership table had some inconsistencies regarding the groups and directory ids of such groups.
He managed to fix all these memberships by updating the parent_id with the correct group id of the membership directory with a fairly detailed query.

All comments

Penny Wyatt (On Leave to July 2021)

Is the instance using an external user directory such as Crowd, LDAP or Active Directory?

Steven Lam

It is currently leveraging Active Directory.

This only happens for users that at one point have been disabled, even after re-enabling they are still left in a stale state.

Adding and removing new groups is allowed, however, removal of older groups (prior to being disabled) are not.

Steven Lam

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

user-group