Removing access to service desk via API

[Wim Godden]

Is there way to use the Service Desk API to remove 'Customers' from a specific service desk so they can't see the tickets in that service desk anymore ?

Or to disable their access to Service Desk altogether so they can't login at all ?

[steve · Accepted solution]

Hi @Wim Godden, 

If you want to delete a users access to Jira Service Desk, you can do so via the "Remove User from Application" API endpoint documented here. This is an experimental feature. To do so you'll just need to pass their username to the API with your admin credentials or your OAuth tokens, but here's a quick example:

curl -X "DELETE" "https://my.jira.host/rest/api/2/user/application?username=deleteThisUsersAccess&applicationKey=jira-servicedesk" \
     -u 'charlie:***** Hidden credentials *****'

The applicationKey you want to use for this operation is "jira-servicedesk". Note, once you do this the user will no longer have access to any Jira Service Desk features.

I've also included a quick postman JSON for you below:

{
  "info": {
    "name": "Delet a specific user from JSD",
    "schema": "https://schema.getpostman.com/json/collection/v2.0.0/collection.json",
    "version": "v0.0.0"
  },

  "item": [
    {
      "name": "Application Permissions",
      "item": [
        {
          "name": "Delete user access to JSD",
          "request": {
            "url": "https://my.jira.host/rest/api/2/user/application?applicationKey=jira-servicedesk&username=deleteThisUserFromJSD",
            "auth": {
              "type": "basic"
            },
            "method": "DELETE"
          }
        }
      ]
    }
  ]
}

[Kian Stack Mumo Systems]

You can always disable a customer account using the user management section of JIRA. 

Or you could make sure that the service desk is configured to only allow people in that are specifically listed within that project. Once you've done that, you can just remove them from that list. This would only keep them from your project.

[Wim Godden]

I need to specifically do it through the API. I see no way to do that at this point.