| Info |
|---|
Approved for Confluence Data Center |
Deactivate users who left organization and remove license / access groups for Inactive users
Use Cases:
- To Deactivate Confluence users who left or not exists in organization directory
- To Deactivate Confluence users who are not active or never login, but exists in organization directory
- To Remove license or security access groups for inactive users
- To Add User Access groups automatically, On user authentication.
- To Search inactive users certain number of days and export to CSV
Features:
- Option to choose User Directories to process users
- Option to process users from specific group
- Option to skip specific Confluence users
- Option to remove specific Confluence groups for Inactive users (or even without deactivating users)
- Option to rename Deactivated user to {username}_inactive_yyyyMMdd
- Helps to reduce license count, removing Confluence license groups (e.g. confluence-users) for Inactive Users
- Option to add groups for Inactive users
- In addition to default Confluence Supported User Directories, it also Supports remote external directories.
- Useful REST APIs
| Info |
|---|
Top Users |
| Info |
|---|
Quick Start Steps. |
Here is Quick Start Steps to start using this plugin.
| Status | ||||||
|---|---|---|---|---|---|---|
|
Go to, System General Configuration > Click Manage Inactive Users.
Step-1A: Configure Skip users for inactivation or deactivation process.
Step-1B: Verify Admin user in App settings > Click update again to confirm.
Note. If your admin username is email prefix then please ensure this email address is not associated for other users.
| Status | ||||||
|---|---|---|---|---|---|---|
|
Go to, System General Configuration > Click Manage Inactive Users
| Info | ||
|---|---|---|
| ||
Configuration to Remove License or Access Security Groups for Confluence users who are Never Login or Not active but exists in organization directory. |
Note:
- User Directory Name: To process users for inactivation specific to these directories
- Processing Group (Optional): It gives flexibility to process users for inactivation from specific group (e.g confluence-users).
- For testing you can use the group with small number of users.
- If empty it processes all users
- Deactivate Users (Optional):
- Set False to reduce license count.
- Remove Groups: Enter a comma separated license groups to remove for inactive users.
- Add Groups (Optional): To add those users inactive users e.g. confluence-inactive-users.
- Supported User Directory types:
- Any Read Only Directory with local groups.
- Internal with LDAP Authentication.
- Internal Directory.
- Crowd Directory (Enable Read/Write access at crowd properties in Confluence).
- FAQ to Create Delegated LDAP Directory
| Info | ||
|---|---|---|
| ||
Configuration to Deactivate and Access Security Groups for Jira users who left company or Not exists in organization directory. |
Note:
- User Directory Name: To process users for inactivation specific to these directories
- Processing Group (Optional): It gives flexibility to process users for inactivation from specific group (e.g confluence-users).
- For testing you can use the group with small number of users.
- If empty it processes all users
- Deactivate Users: Choose True/False either to de-activate users.
- Set False to remove defined license / access groups for inactive users and reduces license count.
- Set False if user directory is read-only.
- Remove Groups: Enter a comma separated license groups to remove for inactive users.
- Add Groups (Optional): To add those users inactive users e.g. confluence-deactivated-users.
- Supported User Directory types:
- Any Read Only Directory with local groups. (Supports license groups removal and helps to reduce license count)
- Internal with LDAP Authentication. (Supports Deactivation, license groups removal and helps to reduce license count)
- Internal Directory. (Supports Deactivation, groups license removal and helps to reduce license count).
- Crowd Directory (Enable Read/Write access at crowd properties in Confluence).
- FAQ to Create Delegated LDAP Directory
Step-2A (Optional)
- For Manual runs:
- Go to, On Demand Run > Click Never Login Users Clean
- Go to, On Demand Run > Click Not Active Users Clean
- Go to, On Demand Run > Click Deactivated Users Clean
To enable / grant Login access back to those inactive users automatically:
See Confluence License reclamation
| Status | ||||||
|---|---|---|---|---|---|---|
|
Go to, System General Configuration > Scheduled Jobs
Default schedule for Automatic user de-activation.
| Status | ||||||
|---|---|---|---|---|---|---|
|
To Debug Manage Inactive Users App:
Go to, System General Configuration > Logging and profiling > Add New Entry
| Code Block |
|---|
Class/Package Name: com.tse.confluence.deactivateusers.plugin Level: Debug |
Click Add.
| Status | ||||||
|---|---|---|---|---|---|---|
|
- Known Confluence product bug:
- On Confluence restart, if any custom schedule settings are reverted to default but still schedule runs with default settings.
- Workaround, you need to re-save the custom settings. See, https://jira.atlassian.com/browse/CONFSERVER-55455