How to manage 2 separate Confluence instances group memberships with a single AD ?

[Ricardo Guerra]

Hi there, 

my scenario is as follows:

we have a single AD with 2 user groups (confluence-administrators and confluence-users).
There was already a Confluence instance using these groups and enforcing licensing.

Now, we have another Confluence instance for another project with separate licensing conditions.

The groups identified above are being user for user management on the second instance.

How can handle this scenario separately, should we create separate confluence groups for each instance in AD (confluence-administrators1, confluence-administrators2, confluence-users1, confluence-users2) and leave the default groups empty ?
If so, how should we configure global permissions in Confluence ?
Please indicate how should we proceed.

Thanks in advance!

Cheers,

Ricardo Guerra

[Reinhard Piltz]

You create confluence1 and confluence2 in the AD groups.
There the users are registered by name, which can log on to the respective Confluence.

In the AD groups confluence-user or confluence-administrator, they assign the respective users for user or adminstrator rights.

Now create two LDAP filters.

User object filter

(&(objectCategory=user)(memberOf=CN=confluence1,OU=your subvol in AD,DC=e.g. your company name,DC=com or org or de))

(&(objectCategory=user)(memberOf=CN=confluence2,OU=your subvol in AD,DC=e.g. your company name,DC=com or org or de))

Group object filter

(&(objectCategory=group)(|(cn=confluence-user)(cn=confluence-administrators)))

Only the users from group confluence1 are now taken over from the groups confluence-user or confluence-administrators.