Deactivate users on JIRA

[Eva]

Hi,

I want to know if there is a way to deactivate a user after he/she left the project. I dont know if deleting the user would means all his/her work on JIRA woudl be gone. And deleting the users from the groups seems a tedious process and could be hard when we maintain all those active and inactive users together. Any thoughts?

[Markus Lepper · Accepted solution]

We have a separate group "_ExpiredUser" which is the only one any expired user is assigned to. (This group is of course not added to "Global Permission > Jira Users" ;)

By this you could sufficient easily recognize expired users when scrolling though the full user list.

==> In addition you need to take care that the user email is changed to an internal one like expired@xxx.com as Jira continues sending emails via Notification schemes although the user has no right to login to Jira! <==

BR, Markus

BTW: It's a pity that the user table is NOT sortable (by clickiung on column headers). => Improvement idea.

[Eva]

Thanks marcus! That sounds a good idea to me. and Good point on the notification, i completely forgot about. Well, I assume (again, never assume on things) that once users are off the group they wont get the email, I guess that will not be the case.

[Markus Lepper]

Hi Eva,

Well, I've assumed the end of mails sending when deactivating users...but got requests by ex-employees why the still get mails (only for accounts with non company email addresses, of course).

BR, Mar_K_us ;-)

[Dennis Kromhout van der Meer]

Have you tried removing the affected user from the jira-users group?

[Nic Brough -Adaptavist-]

Just removing them from Jira-users is the basic way to say "user is not here any more", as it effectively kills off their ability to log in (assuming you've still got the standard setup in global permissions)

[Eva]

well thats what I meant when I said "remove users from groups", but it doesnt necessary tell me when this users is deactivated (I guess you can do a SQL on last modified date?)

[Nic Brough -Adaptavist-]

Mmm, well you didn't mention any question about expiry before, but the easy answer is "look at the last logged in date" (feature added in Version 4.0). It won't tell you the last usage, but most humans move away from their Jira sessions within a few hours of starting it, so it's probably good enough.

That's in the database somewhere, although I've accidentally bypassed it in our system with a custom authenticator, and I don't know where to look.

If you mean "when was the user removed from jira-users", it's not logged. But http://www.plugenta.com/jiraauditor/tour.html can add the audit...

[Markus Lepper]

Right Kenneth; we have on the leaving-person checklist that no unresoved issues shall stay assigned to this person.

As quite some do not follow this ;) I've as well this kind of query where I get a mail in case an unresolved issue is still assigned to an expired_person.

[Ken Wood]

We also remove former users from "jira-users" group and assign them an 'expired_users' group. In addition, we have a query that finds all issues assigned to someone in the "expired_users" group so the issue can be re-assigned to someone still with the company.