Removing users from groups through SQL

Question

I am trying to remove a group of users in bulk from the jira-users group through SQL (since there doesn not seem to be a way to do this through the UI). I am deleting the row in cwd_membership where the child_name = 'user's id' and parent_name = 'jira-users'. After running this query, the UI does not reflect the update until I add that user to another group, then the groups update in the UI as expected.

Question: When you remove a user from a group in the UI, is it touching more tables than simply deleting the corresponding row for that user/grou pairing from cwd_membership table?

M Hoogenboom · Answer

Scriptrunner has an example to deactivate a user in JIRA, but that doesn't work with users from an LDAP directory. I get an error saying that "Cannot edit user, as the user's directory is read only", although the users directory is read only, it should be able to change the local groups (remove jira-users). I now found a solution with curl and REST API to remove the users from the jira-users.

Nic Brough -Adaptavist- · Answer

My apolgies, I was too focussed on the SQL.  Yes, absolutely do it with REST.

I think of REST as a "UI for computers" - if a human clicks on "delete user from group" and something makes a REST call to "delete user from group", they both take much the same route through the code, and end up removing the user in the same safe way that doesn't need any downtime.

Susan Hauth _Jira Queen_ · Answer

I need to do something similar and it's been advised to use the REST API.  @Nic, working on it with @Antonio at Adaptavist