We recently implemented LDAP and there is significant overlap between our users in the confluence internal directory and our active directory. While we're happy to make the 'switch' and lower the priority of the internal directory below the active directory, this will cause issues as our group names do not match exactly.
For example, we have a group in our internal directory called "staff" which contains all our staff members (as opposed to a group called "client", which contains just about everyone else) but in our active directory, this group is called "all-staff".
When we swap the order of the directories, the "staff" group (that we've applied to just about every space) that we set up will be useless as all our staff users will be in the "all-staff" group.
I have two questions, one of which I hope we can do:
There is no pretty way to do this via the UI but I believe we could bulk change the permissiosn via the database. The following SQL would change all permission entries for the group 'staff' and make them for 'all-staff'. Please keep in mind, this would be for ALL permissions that were specific to the 'staff' group across the entire instance of Confluence. Furthermore, I have not tested this against antying other then a small local instance. With that in mind, I highly suggest trying this in a test environment first and be sure to create a backup of the DB first.
UPDATE SPACEPERMISSIONS SET PERMGROUPNAME='all-staff' where PERMGROUPNAME='staff';
P.S make sure Confluence is off when making these changes.
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG