Is there an admin API(organisation level) to revoke a specific product access for a user?

sam saas
Contributor
November 23, 2020

 

I have gone through the User Management API ,specifically the disable user API mentioned here:
https://developer.atlassian.com/cloud/admin/user-management/rest/api-group-users/#api-users-account-id-manage-lifecycle-disable-post

but this disables the user revoking its access from all the products.
Is there an API at org level…where user access can be revoked for a particular product only?

 

2 answers

1 accepted

0 votes
Answer accepted
Prince Nyeche
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
November 23, 2020

Hi @sam saas 

Welcome to Community! I think the way to go about disabling a user is by removing the user from the default Product access group, this way the user doesn't consume any licenses anymore. I believe there's previous discussion on the notion of disabling a user only in one application  versus to all application via that API which isn't available right now.

so probably if you hope to "disable a user" (deny access to a user on a specific application) going through the API to remove the group the user belongs to, that is the default Product access would be much feasible.

sam saas
Contributor
November 23, 2020

Thanks for the reply @Prince Nyeche .

I have tried removing users from the default Product access group(eg. For Confluence Cloud, default group being 'confluence-users'),but it does not reclaim the license.
I had to remove the user from all the groups he is part of for that Product, in order to free the license.

For example, in Confluence Cloud, if a user is part of 2 groups(confluence-users, custom-group) and both these groups have access to Confluence Cloud. Only when I remove user from both the groups, the user count in billing is reduced.

Please correct me if I am wrong.

Like Mark_Hortman likes this
Prince Nyeche
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
November 23, 2020

Hi @sam saas 

Yes that's how it works if there are multiple Product access groups. Just to clarify the "Default Product access" is usually a group a user can be put into, if automatic sign up is enabled. So if there are multiple user groups there, removing the user from all the groups the users belong to that has Product access to Confluence should do the trick.

sam saas
Contributor
November 23, 2020

Thanks for the confirmation @Prince Nyeche !

Mark_Hortman May 19, 2023

@sam saas Note that doing the above does not remove them from the license.  I don't think Atlassian has provided any way to remove the license for a specific product yet.  Seems incredible to me they haven't done this yet. 

0 votes
Yatish Madhav
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 14, 2022

Hi, thanks for the post and comments @sam saas  and @Prince Nyeche - I will be trying this out now. 

One note, the docco says "Connect apps cannot access this REST resource" - any idea if any when that will change so custom connect apps may allow this?

Thank you

Yatish Madhav
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
October 26, 2022

Any idea on this, anyone?

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events