Kieren _SmolSoftware_ Expert

Hi @yaron There is no API available to allow a user to request access to a specific email address. The standard process is; a user requests access via one of the touch points within Jira or Confluence. An access request record is created and an email is sent to all relevant Site and Org Admins about the new access request.…

Hi @박성민(학해) If the 500 users are already in your org user list (e.g. via SCIM or imported or just already exist overtime), then you can add all 500 users to a single group and grant that group the Confluence Guest role. Adding 500 users to a single group will take some time, there is no bulk way to do it (unless you've…

There’s no feature to allow you to bulk disable users. Your best option right now would be to create a script against one of the APIs. Smolsoftware.com is releasing an app in January to allow bulk user deactivation. You can contact us if you want to be a part of the early release. -Kieren Co-Founder @ Smol Software |…

Let us know what you end up doing! 😄

If it's just single pages, then JSM would be best. Even if it's 100 pages (which might take a little bit to setup), it would be a great option. But if @Guy needs the users to access dynamic/random pages that could be created by anyone in a space, then Guest is probably what he's after. If Atlassian do crack down on Guest…

Great suggestions @[deleted] . A note for Guest Access: If you did use it, you can only grant a user access to a single space, and it's a manual space assignment per user (last I checked... i.e. you can't grant it to a group of guest users) so it could be a lot of manual effort on your admins. Atlassian were also working…

Great answer @Trudy P Claspill The only thing I'd add to it, is if a user is licensed for Jira Service Management or Jira Software as an Agent/User, then those users can get access to Jira Work Management for free. -Kieren Co-Founder @ Smol Software | Ex-Atlassian

Cheers @Janice 

Hi @Fahad Akhtar I'll try and break down what you're seeing and why. * There are two levels of Administration in admin.atlassian.com* Site level administration (the screenshot from your co-worker) * Org level administration (your screenshot) * All Org Admins ALSO have site admin permissions, but not all Site Admins have…

Hey @Gözde Akkaya There's no API available to let you change a group name. You'll have to make group name changes manually via admin.atlassian.com. There's more information on this here https://community.atlassian.com/t5/Atlassian-Access-articles/Org-admins-can-now-rename-groups-in-cloud/ba-p/2276321 -Kieren Co-Founder…

Hi @Daniel Tveriya I hope you were successful in getting your script to work? This has been an issue for a while for Atlassian Admins who want to utilise the default Atlassian groups for their SCIM sync'd users. If you were unsuccessful, we do have an app that could help with this, essentially we're solving ACCESS-604.…

The Approved Domain feature only works when a user tries to access a product for the first time. It does not work on a user being synced into the user list. That’s probably why you’re seeing inconsistency, some users are immediately accessing Jira/Confluence and others take some time before accessing them. When a user is…

I’m glad it was helpful! we are expecting to get a fair amount of overlap in groups This could bite you if you’ve not done enough analysis on what those overlapping groups give access to. e.g. if you have a confluence-admins group in cloud and on server, when you migrate to cloud (if you’re on the new admin experience)…

Wow, I'm are hilariously qualified to answer this question! :D Summary: Contact Atlassian Support to help guide you with this. This page gives a good over of having multiple sites under one organisation https://support.atlassian.com/organization-administration/docs/how-many-instances-of-a-product-does-my-organization-need/…

As for unverified managed account, it needs to verify this email to be changed to verified. Does it mean that this user needs to use this email to login Atlassian sites (may need to register an Atlasssian account firstly)? You are correct that the user needs to login to your Atlassian site before their 'invited' status…

Hi @Jevon L. There's no easy way to do this if you don't already have Org Admin access (as @Teja has said). Best way is to contact the project leads, which you should be able to see in the Jira -> Projects -> View all Projects list, and find out if any of them know who the Org Admins OR Product Admins are. If none of them…

Check that your email server isn't blocking any Atlassian email domains?

Hi @Berenice Rosa Can I get more information on what you want to use the data for? You could use the User Export + Groups in admin.atlassian.com to extract all the groups that grant product access, but it's a bit of a round about way to do it and you'll need some excel skills to be successful. I can't think of any apps…

Most cost effective - request a discount via the Atlassian Classroom license https://www.atlassian.com/solutions/survey/classroom-license-request#/ You can't get away from making each of your 65 students licensed users, if you also want them to update stories. Creating Team-managed project is probably easiest, letting your…

Hi @Yong Yang The invite status in Directory -> user list is a status specific to that organisation. After the user visits one of the products in your organisation, their status will change to 'Active'. If the account has access to multiple organisations, their status in each organisation might be different…

You'll probably need to contact their support team to ask for it.

We have a use case where a user creates an Atlassian account and selects our Jira Work Management product. They are automatically added to the default JWM group jira-work management-users-xx It sounds like you have an approved domain setup for the Jira Work Management product. Go to: admin.atlassian.com -> Products -> User…

@Mandy Trickey Is this what you're looking for? https://www.atlassian.com/legal/expanded-coverage-addendum

@Elijah Sauder The approved domain feature only assigns product access when the user tries to access the product for the first time. @Trudy P Claspill is right in that it would work for you in this scenario, but the down side is anyone with that email domain can get access to your products, not just your sync'd users. An…

Hi @Christian Diaz This is a common problem with admins wanting to sync users into the default Atlassian groups. There are two ways to get around this: 1. Create a new default group for the groups you want to "takeover". e.g. create a group in admin.atlassian.com called new-confluence-users-xyz-default. Make…

@Fernando S This workaround is good to force other sync'd groups to be updated. But it doesn't address non-sync'd groups. e.g. User A exists in the jira-software-users group, and that user is deactivated and removed from the sync'd groups. But they won't be removed from jira-software-users. If that user is reactivated,…

Can confirm, this is the only way that works for me.

 Hi @Paul O_Shaughnessy This has been an issue for a while and unfortunately there is still no feature within admin.atlassian.com that will allow you to do this. The solution you posted (granting product access to a managed group) is a good solution, but as you discovered it's not perfect. There is an upcoming app that…

Hi @Harold Price , This has been an issue for a while and unfortunately as @Kaz Nobutani said there is no feature within Atlassian administration that will solve this for you. It has been a big pain point for Atlassian Admins who want to utilise the default or custom Atlassian groups for both SCIM and non-SCIM users,…

Hi @Vojtech, Vesely Have you tried the External User's feature in admin.atlassian.com? There's more info here: https://support.atlassian.com/security-and-access-policies/docs/control-how-users-outside-your-organization-access-products/ -Kieren Co-Founder @ Smol Software | Ex-Atlassian