Can't unassign Jira license from Active Dir user

I have one disabled (not deleted) Active Directory user that I cannot remove from several local Jira groups including the jira-users group so I cannot recover the Jira license. I have unassigned other AD users from these local jira-* groups with no problems. It is just this one AD userid.

I tried to enabled the AD account. I disabled the entire AD user directory so see if there was an associated local account -- there wasn't.

Any ideas, Brent

5 answers

1 accepted

This widget could not be displayed.

In the end, separate groups were setup in Active Directory and I setup Jira User Directories pointing to these separate AD groups. The AD synchronize is periodically run by Jira and new users show up. I wrote a separate perl script to query the users from Jira(MySQL) database versus querying all the users associated with every Jira group using the JIRA::Client perl module. From there the script would send me an email if new users showed up in the db but haven't been assigned to any Jira groups yet.

This widget could not be displayed.

Thanks for the quick response Christian. Reading through that supplied answer and its associated CWD-2478 indicates you need to disable in both Crowd and AD to regain the license but I'm not using Crowd. As well, I was able to remove all jira groups from other AD users and regain the license. For this one user, I may have disabled the user in AD first before removing all the jira groups now even if I enable that user I can't remove any jira groups. Note: I add and delete new groups to the user but the "original" two groups are locked and cannot be removed.

This widget could not be displayed.

Why don't you try to query for that user and see what issues show up. If there are any active issues with his name, then reassign those issues and then try disabling the user again. I am assuming the user did not belong to any group when you tried to disable the user.

This widget could not be displayed.

Norman:

That's the problem, the AD user did belong to several groups including "jira-users" which dictates whether the user can log into Jira or not and therefore consumes a license or not. This AD user also belongs to jira-developers group, another out of the box group. Both these groups are locked to this user now and I can't remove them.

As a test, I removed all groups including jira-users and jira-developers from several active AD users (i.e. numerous open issues) with no problems and the license count was reduced. Cleaning up issues only comes up when you want to delete users then Jira wants to know what to do with their issues.

I must have a data corruption possibly.

Thanks, for the comment

Suggest an answer

Log in or Sign up to answer
Atlassian Summit 2018

Meet the community IRL

Atlassian Summit is an excellent opportunity for in-person support, training, and networking.

Learn more
Community showcase
Posted Wednesday in New to Jira

Are you planning to trial, or are currently trialling Jira Software? - We want to talk to you!

Hello! I'm Rayen, a product manager at Atlassian. My team and I are working hard to improve the trial experience for Jira Software Cloud. We are interested in   talking to 20 people planning t...

111 views 2 0
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you