I cannot see the Directory Tab on the Admin page.
Hi @Ioan Damian
If a user is removed from all groups that are assigned to the Atlassian application in Azure AD, that should trigger Azure AD to deactivate the user's Atlassian account on the Atlassian side automatically.
I have an active user in scope of the sync. If I deactivate that user in Atlassian Access (the user is still active in Azure) it will not get reactivated upon sync. Is this by design?
No, this isn't by design. The user should be getting reactivated every time Azure AD syncs assuming the user is active and in scope for Atlassian on the Azure AD side. If this isn't what you're seeing, I recommend contacting our support team.
To deactivate a large number of users in bulk from the Atlassian side, you can use the user management API: https://developer.atlassian.com/cloud/admin/user-management/rest/#api-users-account-id-manage-lifecycle-disable-post (note the link at the top of the page that you can use this endpoint to get user's account IDs).
Cheers,
Dave
Hi,
Thank you for your answer.
You're correct. I've tested the following situations:
- add new group with users in the scope in Azure. Result: The users are provisioned
- remove existing group from the scope in Azure. Result: The users are deactivated
- add user to existing group in the scope in Azure. Result: The user is provisioned
- remove user from existing group. Result: The user is deactivated
- add the same user again to the group. Result: the user is activated
The only remaining issue is the one in which if I deactivate the user by hand in Atlassian it will not get reactivated at the sync.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I am looking for the same answer - if a user is deactivated manually in the Atlassian Administration, how do I allow it to be reactivated by the synch?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
"The only remaining issue is the one in which if I deactivate the user by hand in Atlassian it will not get reactivated at the sync."
More than an year went by, I'm also seeing this issue
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.