We have crowd hooked up to an active directory:
I'm ok with crowd manipulating existing users in the active directory as part of its own organisational unit (thus ensuring you can only manage users of Jira, confluence etc) what I'm not ok with is crowd being able to create new users within active directory. Can it be configured to prevent this?
@John Halstead Welcome to the Atlassian Community.
It has been a while since I have used Crowd. I know when configuring crowd connector you have an option to manage local groups. This allows you to create groups in crowd. Here is information from the documentation.
If you select the Manage Groups Locally setting on the 'Connector' tab (available only if you've selected the Cache Enabled check box), new groups are created and updated in the Crowd database and not propagated to the LDAP server. Memberships of local groups are also stored locally. This makes it possible to augment the group structure with new groups even with a read-only LDAP server. When this option is enabled, only local groups can be created and updated, while groups synchronized from the remote directory cannot be locally modified.
For JSM June Challenge #2, share how your non-technical teams like HR, legal, marketing, finance, and beyond started using Jira Service Management! Tell us: Did they ask to start using it or...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events