I have searched for documentation, topics and tutorials but I couldn't find is it possible to give only confluence guest licence to user using AD group and azure. If anyone has documentation, post, video or knows if it is possible I would appreciate it.
Hi Ante,
Can you lay out the steps of your use case?
Hi John thank you for reply
Sorry if my answer isn't what you meant but here is the situation.
We have Azure set up so that internal users that have jira-user or confluence-user group get full user license but some of our users only need partial access to confluence so I'm trying to figure out if we can give the user some group, for example, confluence-guest so they get a guest license on confluence automatically. That way when some employee requests access we can do it all through AD. I'm having trouble that I can't invite someone with our domain as a guest user, my guess is because of a single sign-on set up.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thank you for the explanation. What trouble are you having? Is there an error message? Can you not just put these users in the confluence-guest group?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
There was error that admin has blocked users not directly in group with access. I don't know if I can give specific screenshot and all information. And until now we were adding only external users as guests. Since all senior members that were here when atlassian was implemented and we have vendor I wasn't sure if it is possible since I couldn't find mention of guest in documentation for connecting AD. My main question was is it possible to give only guest access through AD. If it is possible, that clears it for me :)
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I would say yes, it is possible. You should be able to have the use in AD placed in that group just like you place a user in the other groups.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You are welcome. Good luck!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
@Ante Bagić Are you using Atlassian Guard /SCIM to sync the users from AD to the Atlassian user directory?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Ok.
Guard won’t let you sync users into the default confluence-guest group. If you want to do that, you’ll need an app like Admin Automations, or use the Org APIs to add users into default groups.
Good luck!
-Kieren
Co-Fiunder @ Admin Automations | Ex-Atlassian
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
To be honest I'm not that familiar with our implementation of Azure and Jira but currently when we give someone jira-user or confluence-user they automaticly get same group in jira and we cant manipulate those groups through atlassian admin only AD. I want same thing but guest group/license. And thank you for information.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
It sounds like you need to give us more details as to how its setup, or contact Atlassian Support for more, private help :)
You can add the confluence guest role to ANY group. If you have an AD group with the right users in it, just add the confluence guest role to that group?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.