new users from azuread directory assign to default group confluence-users

[salihzett]

Hello,

for two weeks ago, i setup our azuread with atlassian access and so far everything works. Users / Groups and provisioning as well.

I have a group from azuread where every employee is inside.

I have also a group from confluence (confluence-users - default group) where also every employee is inside, which was created directly from atlassian.

What I want is, that every new user which is coming from azuread is assigned to confluence-users group, because i dont want to add the group from azuread to every space. 

btw, is there any way to change the default-group? but more important is to find a way to assign users to confluence-user group. 

I hope someone has a solution for this :/ thanks

[Diego]

Hello @salihzett ! As I understand, you need to automatically add Azure AD users to the confluence-users group.

As I understand, after reading Atlassian Documentation, the group you need to manage is not available for management via Azure AD.

Here is what I found:

Supported group operations

Use groups to manage admin permissions and product access (new licenses) from your identity provider and these updates will sync with your Atlassian organization.

Groups created manually and by default (e.g. confluence-users, site-admins) in your Atlassian organization can't be managed via SCIM integration. You can only manage groups synced from your identity provider directory via SCIM.

For further details on this, you can check this Atlassian documentation:

• [Atlassian Cloud] User provisioning

I was able to find some Microsoft documentation about this here:

• [Microsoft Docs] Azure Active Directory single sign-on (SSO) integration with Confluence SAML SSO by Microsoft
  
• [Microsoft Docs] Integrate Atlassian Cloud with Azure Active Director
• [Microsoft Docs] Configure Atlassian Cloud for automatic user provisioning

As I understand, we can grant access to Atlassian Cloud to any group within your Azure AD and then go into each space and grant Permissions to that specific group.

Since there is no Group Nesting in our Cloud platform, we are unable to include a group inside another, so this is ruled out as an option.

Let us know if this helps!

[salihzett]

I did it on my way. So add my AzureAD group in all spaces and set the group in the confluence permissions as default. 

[Diego]

Glad to know you were able to sort this out. Let us hear from you in the future.