It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Atlassian Access API

Our company is in the early access for Atlassian Access (see link). Does there exist an API that you all have exposed or are willing to expose to us which can automate functions of the Atlassian Access software? For instance, is there a call for deactivating a user in Atlassian Access?

 

Thank you.

4 answers

1 accepted

3 votes
Answer accepted

Hello @Adrien Gonzalez,

The current public APIs for users are only related to the products themselves and not our Identity Platform (Where the Atlassian accounts are) to perform actions such as Disable the entire Atlassian account or edit user details.

This set of APIs demand for an extra security layer, so we are developing public SCIM APIs that can match that requirement, check more about what this is on this documentation:

The System for Cross-domain Identity Management (SCIM) specification is designed to make managing user identities in cloud-based applications and services easier. The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. Its intent is to reduce the cost and complexity of user management operations by providing a common user schema and extension model, as well as binding documents to provide patterns for exchanging this schema using standard protocols. In essence: make it fast, cheap, and easy to move users in to, out of, and around the cloud.

You can track our progress on this feature by watching the following request:

There is no ETA right now but this is actively being worked as it is an important complement to user management on the Cloud and the Atlassian Access product.

Thank you & best regards,

Rodrigo Becker
Atlassian Cloud Support

1 vote

We do indeed have a public facing documentation where all our public APIs can found :

JIRA Cloud REST API

There isn't an endpoint for deactivating users but there is one available for removing them which is still in its experimental phase:

Remove user  EXPERIMENTAL DELETE /rest/api/2/user

Removes user.

Request
QUERY PARAMETERS

parametertypedescription

usernamestring

the username

keystring

user key

Responses
  • STATUS 400 Returned if the request is invalid or some other server error occurred.
  • STATUS 401 Returned if the user is not authenticated.
  • STATUS 204 Returned if the user was deleted successfully.
  • STATUS 403 Returned if the caller does not have permission to remove the user.
  • STATUS 404 Returned if the caller does have permission to remove user but the user does not exist.
1 vote

Hi Michael,

please be aware that the JIRA Cloud REST API is regarding the Cloud Instance user's accounts and it will not affect their Atlassian Accounts (managed Atlassian accounts with Atlassian Access, and also the user's unmanaged Atlassian Accounts, see [Atlassian Accounts for users|https://confluence.atlassian.com/cloud/atlassian-account-for-users-873871199.html] for more details on Atlassian Accounts). 

For example, the delete request to the API will delete the user from the Cloud Instance (i.e from https://instance.atlassian.net, so the user won't be able to log in this cloud instance until it's reinvited) but it will not affect its Atlassian Account (the user's Atlassian Account will still be active in https://admin.atlassian.com for a managed Atlassian accounts or in  https://id.atlassian.com for an unmanaged Atlassian account).

Regards,

This is exactly the problem we are trying to solve. When we deactivate someone in Hipchat, Jira, and Bitbucket, we want them to show as inactive in https://admin.atlassian.com/ since they are technically unable to access any of our accounts. Are you saying that this cannot currently be done?

Hey , indeed, as rodrigo mentioned, the atlassian account management is not available through API yet, there is the feature request for this.

Still, it appears to be already an important  work in progress in order to have this API implemented soon and applicable to atlassian access.

We use automation with Workato and need to be able to add/disable/delete Atlassian ID accounts via API.

Suggest an answer

Log in or Sign up to answer
Community showcase
Asked in Atlassian Access

AMA: Cloud Identity & Security with Dave Meyer, Group Product Manager

Update: That's a wrap! Thanks so much for your questions. If you didn't make it for the live AMA, not to worry. Add your questions below and I will get to them ASAP.  Hello Atlassian Community...

1,442 views 15 9
View question

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you