How to make AD Users Inactive in On Prem Jira

[Richard Coward]

We are currently lowering our User count in Jira and need to make users Inactive. They are connected using Active Directory Groups, we have removed them from the Groups in AD but they remain as Active Users and therefore using up a licence.

[NTAMEN NTANMI luc landry · Accepted solution]

Good morning @Richard Coward

a simple and quick solution would be to interrupt the access of the users concerned

To do this you go to the user part of the admin hub:
settings –> User Management

then you search for the users to suspend then you click on the three dots (•••) and you click on suspend by proceeding in this way you will not have to delete them from the groups and you can reactivate them at the desired time.

[Richard Coward]

There is no option to suspend. All I have is "Edit User Groups", "View Project Roles" and "Anonymize user".

[NTAMEN NTANMI luc landry]

Are you Org admin ? 

[Richard Coward]

No, I am just the Jira Administrator

[NTAMEN NTANMI luc landry]

@Richard Coward  Please describe your application and your access to me exactly.

[Richard Coward]

We have the Data Center version of Jira, Access is through Microsoft Active Directory with access to specific Jira Groups. In our case it is Jira-All-Groups, Jira-All-Groups-Local and Jira-User

Our IT guys have removed the person from the AD groups above but in Jira they remain Active and therefore using a licence

Hope that helps

[NTAMEN NTANMI luc landry]

Ha ok it's normal it's not you to do this you don't have the authorizations to do so.

the Org admin can effectively manage billing and access to products.

get closer to him.

[NTAMEN NTANMI luc landry]

hi @Richard Coward

You are in a data center so removing the affected users from all the different groups they belong to should be enough.

For more information please refer to this document:

https://confluence.atlassian.com/adminjiraserver/licensing-your-jira-applications-938847718.html

[Richard Coward]

Excellent thank you. Currently I cannot remove anyone from the groups as their User Directory is read Only for me

[Tansu Akdeniz · Accepted solution]

Hi @Richard Coward 

Welcome to the community.

Active users don't count license if they don't have an application access.

Ex; default access group for Jira software is jira-software-users. It only consumes a license if user is member of this group.

Please check this KB: Licensing and application access

If users come from external directory such as AD, you need to make inactive them in that tool. There is no action to take in Jira side.

[Radek Dostál]

Oh there is, entirely depending on whether you're using just in time provisioning or syncing users periodically.

Just because a user is disabled or removed from AD may have 0 effect on Jira, unless Jira is synchronizing those users. If there is just provisioning based on login then nothing will happen, unless they do actually log in, and that itself probably won't de-activate them either.

When not synchronizing users, I would suggest to disable them in bulk by hand, or look for a way to automate it assuming you might want to do this in the future again (as you mention groups, by removing them from those groups in Jira, just disabling the users could be problematic if they ever came back).

[Richard Coward]

Thank you, it does seem that it is not synchronizing back in Jira. Our IT Guys have removed the person from the AD Groups but it has not updated in Jira