How to reduce the number of users?

Duke An December 13, 2020

Hi,

 

How can I reduce the number of users?

I tried going into the global permission and change it but I can't.

I get the following error message on top of my Jira link.

Please help to resolve this issue asap.

 

Thanks,

 

"Your Jira Software license's user limit is exceeded. Users with this license only can't create issues until you have upgraded your license or reduced the number of users."

2 answers

3 votes
Jack Brickey
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
December 13, 2020
  1. Click on the cog to get to the admin selections
  2. choose User management
  3. in the user section deactivate unneeded users (suggest not deleting just deactivate)
Duke An December 20, 2020

I have not been clear about my question in the first place.

 

I'm currently using Jira Software for server(not cloud) and I'm using ldap to synchronize our directory server to Jira Software.

 

I was able to retrieve only 2 groups out of hundreds of groups that are available in the directory servers( I plan to select 4 groups eventually but I'm selecting only 2 groups for testing): 1 group(M_L4200) with 2 people and the other group(M_T02004) with 8 people in it.

 

I would like to know if I can allow only a specific person from group 1 & 2.

For instance, in group 1, we have 332255 and 555888

and in group 2, we have 111111,222222,333333,444444,55555,66666,777777,888888.

 

What if I want only 332255, 11111 and 444444 to access Jira, how do I do this?

 

Below is the current setting of my ldap user directory:

 

LDAP Schema:

- base dn: dc=miraeasset, dc=com

 

LDAP Permission:

- Read Only

 

User Schema Settings

- User Object Class: user

- User Object Filter: (&(objectCategory=Person)(sAMAccountName=*))

- User Name Attribute: sAMAccountName

 

Group Schema Settings:

- Group Object Class: group

- Group Object Filter\: (&(objectCategory=Group)(|(cn=M_L4200)(cn=M_T02004)))

- Group Name Attribute: cn

- Group Description Attribute: description

 

Please help.

 

Many thanks in advance.

Duke An December 20, 2020

I have not been clear about my question in the first place.

 

I'm currently using Jira Software for server(not cloud) and I'm using ldap to synchronize our directory server to Jira Software.

 

I was able to retrieve only 2 groups out of hundreds of groups that are available in the directory servers( I plan to select 4 groups eventually but I'm selecting only 2 groups for testing): 1 group(M_L4200) with 2 people and the other group(M_T02004) with 8 people in it.

 

I would like to know if I can allow only a specific person from group 1 & 2.

For instance, in group 1, we have ID 332255 and 555888

and in group 2, we have ID 111111,222222,333333,444444,55555,66666,777777,888888.

 

What if I want only 332255, 11111 and 444444 to access Jira, how do I do this?

 

Below is the current setting of my ldap user directory:

 

LDAP Schema:

- base dn: dc=miraeasset, dc=com

 

LDAP Permission:

- Read Only

 

User Schema Settings

- User Object Class: user

- User Object Filter: (&(objectCategory=Person)(sAMAccountName=*))

- User Name Attribute: sAMAccountName

 

Group Schema Settings:

- Group Object Class: group

- Group Object Filter\: (&(objectCategory=Group)(|(cn=M_L4200)(cn=M_T02004)))

- Group Name Attribute: cn

- Group Description Attribute: description

 

Please help.

 

Many thanks in advance.

Duke An December 20, 2020

I have not been clear about my question in the first place.

 

I'm currently using Jira Software for server(not cloud) and I'm using ldap to synchronize our directory server to Jira Software.

 

I was able to retrieve only 2 groups out of hundreds of groups that are available in the directory servers( I plan to select 4 groups eventually but I'm selecting only 2 groups for testing): 1 group(M_L4200) with 2 people and the other group(M_T02004) with 8 people in it.

 

I would like to know if I can allow only a specific person from group 1 & 2.

For instance, in group 1, we have id 332255 and 555888

and in group 2, we have 111111,222222,333333,444444,55555,66666,777777,888888.

 

What if I want only 332255, 11111 and 444444 to access Jira, how do I do this?

 

Below is the current setting of my ldap user directory:

 

LDAP Schema:

- base dn: dc=miraeasset, dc=com

 

LDAP Permission:

- Read Only

 

User Schema Settings

- User Object Class: user

- User Object Filter: (&(objectCategory=Person)(sAMAccountName=*))

- User Name Attribute: sAMAccountName

 

Group Schema Settings:

- Group Object Class: group

- Group Object Filter\: (&(objectCategory=Group)(|(cn=M_L4200)(cn=M_T02004)))

- Group Name Attribute: cn

- Group Description Attribute: description

 

Please help.

 

Many thanks in advance.

0 votes
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
December 21, 2020

There are two things in play on this one.  The overall list of users that Jira is getting from LDAP and how the "who can use me" works inside Jira.

Jira's "can use me" is moderately simple - you name one or more groups for the permission, and everyone in those groups is seen as an active user, counting towards your licence count.  (It deduplicates if people are in more than one group, so people don't count many times)

LDAP provides the users and groups, and, as you've said, you can filter it in the connection to LDAP so that only some users and groups are read from LDAP.

To get the licence count down, you simply need to remove people from the "can log in" permission.  To do that, you can:

  • In LDAP, remove the user from the group (or delete them entirely)
  • In Jira, flag the user as "inactive"
Duke An December 21, 2020

Thanks Nic.

 

I tried this already but I couldn't find where I can flag the users as "inactive".

I'm in with the recovery_admin mode but still whenever I go to the user management and change the user flag, I only see View project roes and Anonymize user in the Actions column.  Maybe I'm looking at the wrong thing.

 

Can you tell me where I can change this user flag?

 

Many thanks.

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
December 23, 2020
  1. Select Administration () User Management and find the user in the user list.
  2. Click Edit in the Operations column.
  3. Clear the Active checkbox.
  4. Select Update to confirm the change.
  5. The user will now appear in the user list with a strikethrough their username and full name, and the text '(inactive)'.
Like Duke An likes this
Duke An December 23, 2020

Thanks a lot.

Suggest an answer

Log in or Sign up to answer