synchronised Active Directory users is not put into jira-users group when imported

Carsten Beck-Astrup

We use an Active Directory with many users (1200+). They are imported into JIRA including our AD groups (nested groups are turned on).

We also have set the "Default Group Membership" to "jira-users".

The problem is that we do not want every user in the AD to log to be part of the group "jira-users". We want every user to be part of the "jira-users" up front, so everyone can assign everyone even though they have not logged in yet.

Will it work to put a "jira-users" group into out AD? (and assign an AD group "all" to that)

It seems that I can not add a AD group to a JIRA group using the nested group functionality. I get the permission denied. See https://jira.atlassian.com/browse/JRA-24671 So that is not an option even though it would have been perfect for us.

Tiago Comasseto

Hi Carsten,

If the LDAP directory is on the top position in your "User Directories" list within JIRA, you could create a group called "jira-users" in AD and assign the users as member of this group, then in the next synchronization the LDAP users would appear as member of "jira-users" group in JIRA before they log in.

Cheers