Kieren _SmolSoftware_ Expert

Hey @Eunji Roh 1. Removing inactive users: There's nothing that Atlassian offers to easily do what you're asking unfortunately. Your only option is Marketplace apps (we build one called Admin Automations that can remove inactive users and add users to groups) or use the Atlassian APIs to create your own script or app. 2.…

Also can’t forget poor Hipchat to Stride to RIP 🪦

Ahhh memories! I liked the original code name for Project Central before it was launched… Watermelon 🍉. Because it would stop projects looking green on the outside, but being red on the inside 😂

I’d suggest installing an app with a 30 day trial to bulk add the users, then uninstall it. I build the Admin Automations app, which you could do this with.

I’d suggest installing an app with a 30 day trial to bulk remove the users, then uninstall it. I build the Admin Automations app, which you could do this with. Side note: You could use the app to also automatically remove users added to your default groups, on an hourly or daily schedule. Since the default groups have to…

Nice work!

Hi @Nazeyra Jamal If you’re on a monthly plan, on the date you’re billed, you’ll be billed for 950 users. If you’re on an Annual plan, you’ll be quoted for the next tier of annual plan when renewing, maybe 950 or 1000 users. You can reduce your bill by: 1. Removing users from product access in your sites/org. You can also…

@Marc -Devoteam- Is right. I can confirm Atlassian Support have the tools to do this for you

Hi @Iain Davidson Have you checked your User Access Settings? Make sure that the email domain your new user has, isn't listed in there. If it is, remove it. Also check that Jira Service Management isn't listed as an available product under 'Any Domain'. Last idea, check your Jira Service Management Customer Access…

It really depends on how your product access and user is setup, I can only guess really. If all your Jira and confluence access is granted via the org-admin group, then you’ll lose access to jira and confluence when your org admin role is removed. Your new org admin can easily grant Jira and confluence access back to your…

Nope, that should be it. The project roles, global permissions and project settings are the final piece. Your Atlassian Guard settings/auth policies could also affect the user access, such as IP allowlists. But that’s outside the scope of Product Access we’ve been discussing.

Hi @jessica_huebner Short answer You cannot provision org admins, site admins, Billing admins or Business contacts directly via your IdP groups. You can for the User access admins. Long Answer Org and Site admin The org admin and site admin roles are granted to users via special/protected/fixed groups: * org-admins *…

Hi @Gaetano Antonio Turturro ScriptRunner is a fantastic, very capable and advanced tool. With that though, comes complexity and a steep learning curve. Admin Automations is focused on secure User Management automation and offers a couple of distinct advantages: * No-Code Interface: Unlike ScriptRunner which requires…

Thanks for the assist @Dave Rosenlund _Trundl_ 👍

I’d recommend raising a ticket about you table formatting with Atlassian support, get them to fix it

Hi @Vikrant Yadav As @[deleted] mentioned, there are no scopes for users or Groups APIs. You have to select “API Key without Scopes”

Thanks for the reminder @Bill Sheboy 👍

Sorry @Sbani Sithole , there’s no good news here… The only way to do what you’re looking for is to connect your bitbucket instance to your Atlassian organization. Then you’ll have access to the API you listed, as well as apps like Admin Automations that can automatically add users to groups. Good luck!

@Marc -Devoteam- is correct. The only thing you can do it contact an admin from the other sites to remove you.

There are plenty of apps that can help you do this. Unfortunately, apart from the API mentioned in another comment, there’s no easy way to do this within Atlassian tools. If you are using an app or API to automate this, be very careful as the data isn’t very accurate… as an example, it won’t count a Jira Admin going into…

Another option that’s a bit less work, use an app like Admin Automations to bulk remove users from groups.

I am 😂. That was a few years ago tho.

Hi @Chris Matkaris You’ve answered your own question already! There is no way to grant the Org Admin role to any group, other than the org-admin group. Your only option is to Remove product access from the org-admin group sorry. -Kieren from smolsoftware.com

Hi @Eric Roetenberg The only option that Atlassian provide to be able to make two groups “equal”, is for you to write a script with the Atlassian APIs and run it every so often. An alternative is to use a 3rd party app, like Admin Automations, to do it for you. Good luck! -Kieren

Hi @Jeremy Boles Unfortunately you can’t assign the org admin role to another group. Your only option is to programmatically move users from your iDP group, into the org-admin group. Apart from doing this manually, there are two ways to achieve this: 1. Use the Atlassian APIs to create a script that runs…

Also, you are able to sync groups into teams too (but not teams into groups).

Hi @Aleena Umaiir Unfortunately you must have at least one default group per product. I’m not sure what your objective is with removing the groups, but here are some options that might align with what you want: 1. Change the default group to another group. As @Rebekka Heilmann _viadee_ said, you can create another group…

Hi @Evert Morren Atlas Admin If you mean restrict User Admin 1 to only manage GroupABC and have User Admin 2 only manage GroupXYZ? No, you can’t restrict to only allow them to manage specific groups. When you grant a user User Admin access to a product, they can edit the group’s that grant product access to that product,…

Hey @Paul Heath Armengol What criteria do you need to use when bulk adding users to groups? Creating your own script using the Atlassian APIs would give you the most flexibility. Using an add-on, like Admin Automations, would probably be easiest, but give you fewer options around criteria when selecting users. Merry…

I'd also add in: Reach out to the app developer if you have any questions or suggestions for their app. We all love talking to customers and understanding how our apps can be improved. It'll also give you a sense of how responsive and supportive the app developer is.