Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Info

Approved for Jira Data CenterCenter Approved (tick)

OWASP Security Verified (tick)


Simple add-on to

Deactivate users who left organization and remove license or security

remove License for Inactive users and Deactivate or remove Security access groups for

Inactive

users who left organization.

Use Cases:

  • To remove License for Jira users who are Never Login or Not active and exists.
  • To remove License for JSM users who are Never Login or Not active and exists
in organization directory
  • .
  • To remove License or Access Security Groups for Jira users who left company or Not exists in organization directory
  • To restore license Or Grant Access on Successful Login attempt.
  • To search inactive users certain number of days and export to CSV.
  • To notify license alerts.

Features:

  • Supports to process Large enterprise users base.
  • All Atlassian provided user directories are supported.
  • Supports custom remote external Directories, to check user status either active or deactivated.
  • Option to choose Multi User Directories to process users.
  • Option to process
user deactivation
  • users from specific
groupOption to configure schedule to run user deactivation
  • groups.
  • Option to skip
specific group usersOption to remove
  • users from specific groups.
  • Option to
add groups for Inactive usersOption to
  • rename Deactivated user to {username}_inactive_yyyyMMdd
  • Useful REST APIs
    • Get Deactivated users
    • Get Active Users Never Login created before N days
    • Get Active Users Not active last N days
    • Remove Specific groups for User
    • Remove All groups for User
    • Deactivate User
    • Reactivate User
Info

Top Trusted Users

Image Removed  Image Removed Image Removed Image Removed



Info

Top Trusted Users

  • BNP Paribas Bank Polska S.A.
  • Paytm Bank
  • OTP Bank
  • OCBC Bank
  • Autodesk, Inc
  • Thales
  • Expedia
  • Mercedes-Benz
  • Broadcom
  • Intel


Info

Quick Start Steps.

Here is Quick Start Steps to start using this plugin.


Status
colourBlue
titlestep-1

Go to, add-ons admin page > Click Manage Inactive Users.

Step-1A: Configure Skip users for inactivation or deactivation process.

Image Removed

Step-1B: Verify Admin user in App settings > Click update again to confirm.

Image Removed

Note. If your admin username is email prefix then please ensure this email address is not associated for other users.

Status
colourBlue
titlestep-2Green
titleUse Case #1

Go to, add-ons admin page > Click Manage Inactive Users


Info
titleUse Case 1 > --- To reduce the license count.

Configuration to Remove License or Access Security Groups for Jira users who are Never Login or Not active.

Image Removed

Note:

  • User Directory Name: To process users for inactivation specific to these directories
  • Processing Group (Optional): It gives flexibility to process users for inactivation from specific group (e.g jira-software-users).
    • For testing you can use the group with small number of users.
    • If empty it processes all users
  • Deactivate Users (Optional):
    • Set False to reduce license count.
    • Set False if user directory is read-only.
  • Remove Groups: Enter a comma separated license groups to remove for inactive users.
  • Add Groups (Optional): To add those users inactive users e.g. jira-inactive-users.
  • All Atlassian provided user directories are supported:
  • Supports license groups removal and helps to reduce license count.
  • For Deactivation: User Directory must have read + write permissions.
  • For Crowd Directory: Enable Read/Write access at crowd properties.

    Please see, Jira Manage Inactive Users


    Status
    colourGreen
    titleUse Case #2

    Info
    titleUse Case 2 > --- To deactivate users. (Optional)

    To remove License or Access Security Groups for Jira users who left company or Not exists in organization directory.

    It validates user status in remote user directory.

    Image Removed

    Note:

    • User Directory Name: To process users for inactivation specific to these directories
    • Processing Group (Optional): It gives flexibility to process users for inactivation from specific group (e.g jira-software-users).
      • For testing you can use the group with small number of users.
      • If empty it processes all users
    • Deactivate Users (Optional):.
      • Set False to remove defined license / access groups for deactivated users and reduces license count.
      • Set False if user directory is read-only.
    • Remove Groups: Enter a comma separated license groups to remove for inactive users.
    • All Atlassian provided user directories are supported:
      • Supports license groups removal and helps to reduce license count.
      • For Deactivation: User Directory must have read + write permissions.
      • For Crowd Directory: Enable Read/Write access at crowd properties
    • For Internal Directory you need to consider using custom remote directory to validate user status.
    • In addition to default Jira Supported User Directories, it also Supports custom remote external Directories.
    StatuscolourBluetitlestep-3
    • Validates user status either active or deactivated in Atlassian supported user directories or a custom remote user directories like Okta, Google G-Suite and Azure AD.

    Please see, Jira Manage Former X Users


    Status
    colourGreen
    titleUse Case #3

    Go to, add-ons admin page > Click Manage Inactive JSM Users > Click Schedule

    Define interval hours to run the user deactivation automatically.

    Image Removed

    Note:

  • Admin Username (Required): Plugin uses this admin user privileges to deactivate users
  • For Manual runs:
  • Go to, On Demand Run > Click Never Login Users Clean
  • Go to, On Demand Run > Click Inactive Users Clean
  • Go to, On Demand Run > Click Former Users Clean

    Info
    titleUse Case 3 --- To reduce the license count for JSM

    Configuration to Remove License or Access Security Groups for JSM users who are Never Login or Not active.

    Please see, JSM Manage Inactive Users


    Status
    colourGreen
    titleUse Case #4

    Info
    titleUse Case 4 --- Automatic license reclamation

    To enable / grant Login access back to those inactive users automatically

    :See 

    .

    Please see, Jira License reclamationImage Removed



    Status
    colourBlueGreen
    titlestep-4
    To
    Debug

    Two ways to Debug Manage Inactive Users App :i.e.

    >>> Through atlassian log file — atlassian-jira.log

    Go to, System General Configuration > Logging and profiling > Default Loggers > Click Configure.

    Code Block
    Class/Package Name: com.tse.jira.deactivateusers.plugin
    Level: Debug
    Click Add.

    >>> Through Audit log.

    Go to, System General Configuration > Audit log.


    Please see, Common Asked Questions and Hints