| Info |
|---|
Approved for Jira Data Center |
Simple add-on to Deactivate users who left organization and remove license or security access groups for Inactive users.
Use Cases:
- To remove License for Jira users who are Never Login or Not active and exists in organization directory.
- To remove License or Access Security Groups for Jira users who left company or Not exists in organization directory
- To restore license Or Grant Access on Successful Login attempt.
- To search inactive users certain number of days and export to CSV.
Features:
- Option to choose Multi User Directories
- Option to process user deactivation from specific group
- Option to configure schedule to run user deactivation
- Option to skip specific group users
- Option to remove specific groups
- Option to add groups for Inactive users
- Option to rename Deactivated user to {username}_inactive_yyyyMMdd
- Also available for Cloud hosting:In addition to default Jira Supported User Directories, it also Supports Okta | Google G-suite | Azure AD remote external Directories.
- Useful REST APIs
- Get Deactivated users
- Get Active Users Never Login created before N days
- Get Active Users Not active last N days
- Remove Specific groups for User
- Remove All groups for User
- Deactivate User
- Reactivate User
| Info |
|---|
Top Trusted Users |
| Info |
|---|
Quick Start Steps. |
Here is Quick Start Steps to start using this plugin.
| Status | ||||||
|---|---|---|---|---|---|---|
|
Go to, add-ons admin page > Click Manage Inactive Users.
Step-1A: Configure Skip users for inactivation or deactivation process.
Step-1B: Verify Admin user in App settings > Click update again to confirm.
Note. If your admin username is email prefix then please ensure this email address is not associated for other users.
| Status | ||||||
|---|---|---|---|---|---|---|
|
Go to, add-ons admin page > Click Manage Inactive Users
| Info | ||
|---|---|---|
| ||
Configuration to Remove License or Access Security Groups for Jira users who are Never Login or Not active. |
Note:
- User Directory Name: To process users for inactivation specific to these directories
- Processing Group (Optional): It gives flexibility to process users for inactivation from specific group (e.g jira-software-users).
- For testing you can use the group with small number of users.
- If empty it processes all users
- Deactivate Users (Optional):
- Set False to reduce license count.
- Set False if user directory is read-only.
- Remove Groups: Enter a comma separated license groups to remove for inactive users.
- Add Groups (Optional): To add those users inactive users e.g. jira-inactive-users.
- Supported User Directory types:
- Any Read Only Directory with local groups.
- Internal with LDAP Authentication.
- Internal Directory. Crowd Directory (All Atlassian provided user directories are supported:
- Supports license groups removal and helps to reduce license count.
- For Deactivation: User Directory must have read + write permissions.
- For Crowd Directory: Enable Read/Write access at crowd properties in Jira).FAQ toCreate Jira Delegated LDAP Directory
| Info | ||
|---|---|---|
| ||
To remove License or Access Security Groups for Jira users who left company or Not exists in organization directory. It validates user status in remote user directory. |
Note:
- User Directory Name: To process users for inactivation specific to these directories
- Processing Group (Optional): It gives flexibility to process users for inactivation from specific group (e.g jira-software-users).
- For testing you can use the group with small number of users.
- If empty it processes all users
- Deactivate Users (Optional): Choose True/False either to de-activate users.
- Set False to remove defined license / access groups for inactive deactivated users and reduces license count.
- Set False if user directory is read-only.
- Remove Groups: Enter a comma separated license groups to remove for inactive users.
- Supported User Directory types:Any Read Only Directory with local groups. (All Atlassian provided user directories are supported:
- Supports license groups removal and helps to reduce license count)Internal with LDAP Authentication. (Supports Deactivation, license groups removal and helps to reduce license count)
- Internal Directory. (Supports Deactivation, groups license removal and helps to reduce license count).
- Crowd Directory (
- For Deactivation: User Directory must have read + write permissions.
- For Crowd Directory: Enable Read/Write access at crowd properties in Jira).Faq to Create Jira Delegated LDAP Directory
- For Internal Directory you need to consider using custom remote directory to validate user status.
- In addition to default Jira Supported User Directories, it also Supports custom remote external Directories.
| Status | ||||||
|---|---|---|---|---|---|---|
|
Go to, add-ons admin page > Click Manage Inactive Users > Click Schedule
Define interval hours to run the user deactivation automatically.
Note:
- Admin Username (Required): Plugin uses this admin user privileges to deactivate users
- For Manual runs:
- Go to, On Demand Run > Click Never Login Users Clean
- Go to, On Demand Run > Click Inactive Users Clean
- Go to, On Demand Run > Click Former Users Clean
To enable / grant Login access back to those inactive users automatically:
| Status | ||||||
|---|---|---|---|---|---|---|
|
To Debug Manage Inactive Users App:
Go to, System General Configuration > Logging and profiling > Default Loggers > Click Configure
| Code Block |
|---|
Class/Package Name: com.tse.jira.deactivateusers.plugin Level: Debug |
Click Add.