How to grant/revoke product access for a specific user via Atlassian Admin API — group

Question

Hi,

I'm using the Atlassian Admin API to manage user product access in a Forge plugin.

I know that POST .../users/{accountId}/suspend disables the entire account. But how can I revoke access to one specific product (e.g. Jira Core) while keeping the user's access to other products (e.g. Confluence) ?

Utkarsh Agarwal · Answer

Hi @safa sahli

As @Trudy P Claspill suggested, you need to workaround with groups that grant access to the target apps.

At Organization level, Atlassian exposes a “Remove user from group” endpoint in the Admin (Directory) API. Refer: Remove user from group

Trudy P Claspill · Answer

A user's access to an app is manged by their membership in a group, either the default access user group or another group that has app access assigned to it.

App access may be granted to multiple groups. So the user may have access through multiple groups.

If you can determine through which group their app access is granted, and if that is a group local to Cloud (versus synch'd with an external data source) then you could look for an endpoint to remove a user from a group.

(I'm not at my computer right now so can't look that up for you.)