youngmon/atlassian-qna huggingface dataset:
Mandatory SSO login for specific user groups
Asked by Jakob KN:

Hi Community,

We're about to test out Crowd for our Jira and Confluence instances, to assess whether or not we should be implementing this for user management.

I know it's possible to enable SSO and disable basic authentication for logins, but I'd like to know if it is possible to disable basic authentication for specific groups.

For example, we'll allow basic authentication for certain integration/service accounts where the 3rd party system can't use access tokens, but regular users have to use SSO and will not be allowed to log in with basic authentication.

Is this possible?

(We're on Data Center versions of both Jira and Confluence)


Answers:
author: Craig Castle-Mead
body: Hi [@Jakob KN](/t5/user/viewprofilepage/user-id/1204559)

I'm not sure if you can really achieve what you're after, but the way I'd approach it (in testing, on a non-prod environment \</disclaimer\> )

1. Setup a Crowd directory with two applications linked to it (one you use for SAML, one you use for "traditional" Crowd auth) use the "Groups that can authenticate" option to limit which set of users could authenticate to each type of app, setup your Jira/Confluence User Directories pointing to Crowd
2. Then setup <https://jira.company.com/plugins/servlet/authentication-config> to give you SAML auth, one issue we had with this type of approach (in testing):
   1. This would give your users a choice of which directory they needed to login via, and may be confusing

CCM
User Lifecycle, Anonymisation and GDPR
Asked by Bastian Stehmann:

Hi,

We are currently working on our user Lifecycle.

We are currently using Crowd as user management and Jira and Confluence.

I know that Jira and Confluence supports anonymization, but Crowd does not. Are there any best practices to comply with GDPR in regards to users that are not needed anymore.

A first idea is to anonymize in Crowd manually, then use the anonymization function in each other application.

Do you have other/better ideas?


Answers:
author: Craig Castle-Mead
body: Hey [@Bastian Stehmann](/t5/user/viewprofilepage/user-id/1186496)

I'm not aware of any GDPR functionality in Crowd (native or on the marketplace). <https://confluence.atlassian.com/gdpr/crowd-right-to-erasure-949761091.html> does have some information on where PII may be stored in the database - even if you anonymise the user entry itself.

CCM

comments: author: Bastian Stehmann
body: Hi Craig,

Thanks a lot. This is helpful, but still looking for a solution with the combination of tools.


Tags: confluence

data-center

gdpr

jira

lifecycle

server

user

user-management
Can Crowd, version 2.7.2 (Build:#626 - 2014-05-13) be hosted on Win Server 2022?
Asked by Shraddha Sudheendra:

Hi Team,

We are currently using Crowd, version 2.7.2 (Build:#626 - 2014-05-13) hosted on Windows Server 2012 R2 Standard. We do have plans of upgrading Crowd to a higher version. But before that, we need to address a security concern raised by our IT Team.  
Accordingly, we need to upgrade the OS of the VM where Crowd is being hosted from Windows Server 2012 R2 Standard to Win Server 2022. So please answer our following questions.  
1. Can Crowd, version 2.7.2 (Build:#626 - 2014-05-13) be hosted on Win Server 2022?  
2. If not, which is the latest Windows server version that we can upgrade to in order to support hosting of Crowd, version 2.7.2 (Build:#626 - 2014-05-13)?

Thanks and Regards,  
Shraddha G S


Answers:
author: Charlie Misonne
body: The Windows version itself should not be a problem. Crowd runs on Java so you need to make sure the Java version that Crowd 2.7.2 supports can run on your new Windows version. For Crowd the JDK is necessary (not just the JRE)

I was ableto find the [*supported plaforms*page for v2.7.2](https://confluence.atlassian.com/display/CROWD027/_System+Requirements+-+Software)Since that version Crowd can run on Java 8 and according to [this page](https://www.java.com/en/download/help/sysreq.html) Windows Server 2022 supports Java 8.

So you can definitely give it a shot. But as always: try it on e testr environment first :-)

comments: author: Shraddha Sudheendra
body: Thank you for the answer! It helps :)


author: Charlie Misonne
body: You're welcome!

Please mark it as accepted if it solves your question. Or don't if you need more info.


Tags: server
Do I retrieve user login dates from the Crowd API or database?
Asked by Aaron_Khan:

I'm creating an automation Python script that will remove Crowd users that haven't logged in for more than 90 days.

Looking through the Crowd 3.2.3 REST API Reference documentation, I'm not seeing any API endpoints for "lastAuthenticated" or "lastActive" under user attributes. Though, I was able to find an Atlassian Support entry from 2019 titled "[How to get last authenticated in confluence using rest api?](https://community.atlassian.com/t5/Confluence-questions/How-to-get-last-authenticated-in-confluence-using-rest-api/qaq-p/1064204)" where an Atlassian team member explains that a user's last login date won't be available via UI as there is no API endpoint for it and will need to be retrieved from the database.

Because this support entry was from 4 years ago, I wanted to ask if accessing the Crowd database is still the recommended way of retrieving user login dates.

Thank you for your time!


Answers:
author: Craig Castle-Mead
body: Hi [@Aaron_Khan](/t5/user/viewprofilepage/user-id/5129293) ,

Accessing any content via the database is never the recommended option. There may be changes to the structure with version upgrades, you'd need to reverse engineer the structure of the tables to figure out how to extract the right information - safely and reliably.

There may be an existing Marketplace app that does what you're looking for too, not sure if you've checked out that path.  

That being said, sometimes certain data you need/really want is not exposed via a REST API, so you're left with two options.

1 - the "proper" way, build your own add on that uses the relevant Java APIs to extract the data and then expose this via a REST API

2 - access the data via the database, only use read only access when doing this, never write changes back to the database as this will only cause issues and headaches. This approach is at your own risk.

CCM


Tags: api

database

login

rest

rest-api

user
Is there a way to see what groups a group is in?
Asked by Jacob Dokos:

So I have group A that contains my users. That group is then put into group B and C. Is there a way to check what groups A is in? I can see that group A contains, but not where A is being used in other groups.


Answers:
author: Craig Castle-Mead
body: Hi [@Jacob Dokos](/t5/user/viewprofilepage/user-id/4876544)

You're not able to see this data via the UI, there's no "Member Of" type of output.

You can query the cwd_membership table from the database, but this approach is at your own risk.

CCM


author: Nic Brough -Adaptavist-
body: Atlassian stuff works on a flattened basis - group within group can be set up in Crowd, but the rest of the applications ignore it. So there's no reporting on it. You will have to look at the Crowd settings to work this out.


Tags: server
Managing bulk users on Crowd
Asked by KB:

Hey folks,

We have close to 2000+ users on our Crowd and as part of a recent audit we discovered, close to 500+ users not might need a valid license for Atlassian services and we would like to delete them in Crowd.

Is there an easy method to do that? I came across a plugin from Mini Orange but the challenge with it is that there's no way we could upload a CSV or an excel and have it manage the users but rather users would need to be selected one by one - which as you can imagine will be cumbersome to do for 500+ users.

Looking for some advice here.


Answers:
author: Craig Castle-Mead
body: Hi [@KB](/t5/user/viewprofilepage/user-id/1192464)

Bulk deleting users could also be done by writing a bash (or powershell, or batch) script that loops through your list of users and calls the delete REST API for each user.

Take a look at the miniOrange offerings as [@Harshit bhagat](/t5/user/viewprofilepage/user-id/5106032) mentioned though. We use a number of their products and have found the pricing reasonable and support has been excellent. We have not used the Premium Bulk Use Management for Crowd.

CCM


author: Harshit bhagat
body: Hello Kishore,  

I am Harshit from miniOrange Business Team.  
We do provide the functionality of uploading a CSV or an excel in our **Premium Bulk User Management for Crowd** plugin.  

Please reach out to us on atlassiansupport@xecurify.com or raise a support ticket [here](https://miniorange.atlassian.net/servicedesk/customer/portal/2) and we will be happy to assist you and provide you with the further steps to satisfy your requirement.  

Looking forward to hearing from you soon.  

Thanks,  
Harshit.


Tags: server
Knowledge base suggestion do not show up on summary field
Asked by Alain Vertefeuille:

Hi,

I implamated JSM and created project 'Support Informatique' (SI) and associeted KB succesfully from confluence.

Help center research field suggest help page from the KB (confluence) correctly. However, when I open a new ticket the summary field do not show up any suggestion. I cannot figure out why?

Also, Help center research field still suggest me demand form even if I desactiveted all of them under th KB seting project "autorize suggestions"


Answers:
author: Mark Higgins
body: Hi [@Alain Vertefeuille](/t5/user/viewprofilepage/user-id/4819811)

Welcome to the comunity.

To put a picture to [@Aaron Geister](/t5/user/viewprofilepage/user-id/4585692) response:

![Screenshot 2024-09-25 151242.png](https://community.atlassian.com/t5/image/serverpage/image-id/349157i3F644AEA991DEFCF/image-size/large?v=v2&px=999 "Screenshot 2024-09-25 151242.png")

If you have linked a space, then it may be permissions on your Confluence space?

Hope this helps

Mark

comments: author: Aaron Geister
body: Thanks [@Mark Higgins](/t5/user/viewprofilepage/user-id/3517340) for the assist here. Great add to show a picture.


author: Aaron Geister
body: [@Alain Vertefeuille](/t5/user/viewprofilepage/user-id/4819811) Welcome to the community.   

In JSM configuration in project settings \> Knowledge base, did you map request types to KB articles?  

That should help with suggestions that populate form the summary so there are random articles populating.   
Also, at the Help Center portal are you able to search for articles there. If not, you should map the Confluence KB space to the JSM project.   

Here is tutorial from Atlassian   
[Using Confluence and Jira Service Management Together (atlassian.com)](https://www.atlassian.com/software/confluence/resources/guides/extend-functionality/confluence-jsm#overview)  


Tags: cloud

jira-service-management

jira-service-management-cloud
How to update ticket status from one instance to another
Asked by Ghata Singhal:

We have 2 Jira instances.

When a user creates a ticket in 1 instance (Ins A), the ticket details are captured in an email and emailed to another project in the other instance (Ins B).

Once the ticket is created in Ins B, agents start working on the ticket.

The requirement is that everytime there is an update on the ticket in Ins B, the update should also reflect on the ticket created in Ins A.

Is there a way around this?

PS: We are also open to cloning tickets in another way (not through email, as we do currently), if it helps us with updating the ticket status/comment updates.


Answers:
author: Rudy Holtkamp
body: Hi [@Ghata Singhal](/t5/user/viewprofilepage/user-id/5370834) ,

You can do this more easily via Jira automation.

In site B you can create an automation rule which listens to a webhook and create the update/a new issue with the provided payload.

In site A you create an automation rule that triggers on a certain event (e.g. a change of status) this rule will then call the webhook of site B with a payload of the change \& (very important) the original key of the issue.

This key is used in the first rule to determine if there is already an issue with that key, if so it will create the comment, if not it will create a new issue with all the info you provided in the payload.

comments: author: Ghata Singhal
body: Thank you for replying.

I figured webhooks would a way around this problem. Is there any detailed use case with solutin for refeence? I have never worked on webhooks before and seems a little complicated rn.


author: Rudy Holtkamp
body: I'm sorry I don't have a detailed use case typed out.


Tags: cloud

jira-service-management

jira-service-management-cloud
Can the 'Open requests on behalf of' field be editable in Jira Service Management?
Asked by Luis Felipe Viana:

Is the following statement true?

"The 'Open requests on behalf of' field is not directly editable in Jira Service Management forms, as it is a standard field that only appears for logged-in users. This behavior is intentional to allow a user to create a request on behalf of someone else."

The client would like to see only the fixed name of the person opening the request and not the option to choose another person.

Is there any documentation from Atlassian that explains this? Thank you very much, and I look forward to a response from the community.

![Captura de tela 2024-09-24 104314.jpg](/t5/image/serverpage/image-id/349010iA2F4497C1D36F9F1/image-size/large?v=v2&px=999 "Captura de tela 2024-09-24 104314.jpg")


Answers:
author: Robert DaSilva - Adaptavist
body: Hi [@Luis Felipe Viana](/t5/user/viewprofilepage/user-id/5438757) ,

The "Raise a request on behalf of someone" should only be showing up for users who also have JSM Agent privileges. Regular Customers (those with only the JSM Customer) permission should not have this option.
> Customers are unable to raise a requests on behalf of another customer, but admins or agents may raise a request on a customer's behalf in two ways.

[Here's a link to that Atlassian Documentation.](https://support.atlassian.com/jira-service-management-cloud/docs/raise-a-request-on-behalf-of-a-customer/#:~:text=Customers%20are%20unable%20to%20raise%20a%20requests%20on%20behalf%20of%20another%20customer%2C%20but%20admins%20or%20agents%20may%20raise%20a%20request%20on%20a%20customer%E2%80%99s%20behalf%20in%20two%20ways.)

Are you accidentally giving all of your users the "Agent" permission, instead of plain Customer? Agent is usually only given to those who will action tickets raised in a JSM project, so not everyone at your organization requires this. Instead, the "JSM Customer" permission lets those users raise tickets.

Hope that helps,

Robert


Tags: cloud

jira-service-management

jira-service-management-cloud
?????? ?? ???????? ???????? ? ?????
Asked by Andrei Berezaites:

?????? ????, ????? ????????? ???????? ????? ? ???????? ??? ????????????? ??????? (Project Manager) ??? ??? ??????? ???? ?? ????????????? ???????? ?????? ??????. ??? ?????, ??? ?? ? ???????????? ??????? ??????????? ??? ??????? ?????????? ? ??????? ? ???? ??????????????, ?? ??? ???? ?? ?? ??? ??????? ?????? ? ?????? ? ???????. ??????????, ????? ?? ??? ???????, ???? ??, ?? ????


Answers:
author: Owen Pyatt
body: ????????, ??? ????????? ???????? ????? ?????????? ? ???????????? ? ???????????? ????? ???????. ?? ?????? ?????????? ????????? ????????? ????????????? ? ?????????? \<\<????????? ?????????\>\> ? ????? ????? ??????????, ????? ?????????????, ??? ?????? ????????? ???? ?????? ??????? ???????.

???????? ?????????? ???????? ?? ?????????? ?? ?????????? ???????? ? ?????, ?? ?????????? ?? ? ?????? ????? ??????? ?????? ???? ????????.

??? ??????? ???????:

1. ????? ?????????? ????? ???? ?????? ??? ?????? ????????, ??????? ?????????, ??? ?? ??????, ??? ????????? ? ????? ??????? ????? ????? ???????? ?? ?????? ???????.

2. ?????????, ??? ?? ?? ???????????? ????? ?????????? ?? ?????????. ???? ?? ?????? ??????????? ????? ?? ?????????, ? ????? ??????????????? ????????????? ????? ? ??????? ?? ? ?????????? ????????.

??? ????? ????????? ?????? ? ???, ??? ??????? ????????? ? ???? ????? ??????????.

[??????? ?? ????? ??????????](https://support.atlassian.com/jira-cloud-administration/docs/manage-project-permissions/)


Tags: cloud

jira-service-management

jira-service-management-cloud
Automatic reply to non registered users?
Asked by Niclas Moberg:

Hi!  

I've set up our JSM with restricted access. Most of our issues are emailed to us, with the customer being registered.

But I'm having a lot of trouble with customers that aren't registered. They don't seem to get an automatic reply saying they aren't granted access, and we don't get any notifications that someone tried to email us.

I tried googling and asking gpt without any success. All I got was to set up an automation rule, but I can't find out what trigger to use.

Does anyone know how to solve this? Is it even possible?


Answers:
author: Natalya Ozhigova
body: Hi [@Niclas Moberg](/t5/user/viewprofilepage/user-id/5600463)

As I see, it has not implemented yet. Atlassian has a ticket with suggestion to implement this:

<https://jira.atlassian.com/browse/JSDCLOUD-2517>

(<https://jira.atlassian.com/browse/JSDCLOUD-4140>)

You can allow to create a portal-only accounts for all users or if you won't like to allow this, you can use a plugins from Atlassian Marketplace. Some plugins allow to send a response to customer if the ticket isn't created.

Best regards

Natalya


author: Sravan Indukur
body: Hi [@Niclas Moberg](/t5/user/viewprofilepage/user-id/5600463) ,

Greetings of the day.

You can achieve this in two ways:

1. **Using Automation** (Allows for customization of notifications)
2. **Using Email Notification Scheme** (A built-in Jira feature, with no customization---notifications will follow the standard Jira format).

**For Automation:**

* **Trigger:** Issue created
* **Condition:**
  * JQL Condition: `"request type" = "Emailed request (Project Key)"`
  * Or Field Condition:  
    Field = Request Type  
    Condition = Equal  
    Value = "Email Request"

**For Notification Schemes:**

* Navigate to **Project Settings** \> **Notifications**
* Click on **Actions** \> **Edit Notifications**
* Under "An Issue is Created," add the roles, groups, or individual users as per your requirements.
* Refer the below link : <https://support.atlassian.com/jira-cloud-administration/docs/configure-notification-schemes/>

Regards,

[@Sravan Indukur](/t5/user/viewprofilepage/user-id/5301477)

comments: author: Niclas Moberg
body: Hi [@Sravan Indukur](/t5/user/viewprofilepage/user-id/5301477)

Thank you for your response!

However, this doesn't solve my issue.

The problem is that some senders aren't registered as customers. Since Channel access is set to Restricted access, these emails won't create an issue to start with.

We want to keep it that way to be able to control who is granted access and not. But there has to be some way to notify the sender that they aren't granted access.

As it is now, nothing happens at all. The customer does not receive confirmation that the issue has been created, because the issue has not been created. But they also don't get a message that it hasn't been created because they don't have permission.


Tags: cloud

jira-service-management

jira-service-management-cloud
Different Level of Approvers based on Amount Requested
Asked by Karim Mohamed:

Hi,  

I want to create a workflow where based on the amount entered on the form by the customer. Here are the two use cases I'm trying to do:

* If the amount is below 500 $ for example, it will only need approval of the direct manager
* If the amount is above 500 $ on the form, it will require approval from the manager of the manager.

Challenges: How would I leverage the manager of the manager ? Using Assets ?  

Thank you


Answers:
author: Mark Higgins
body: Hi [@Karim Mohamed](/t5/user/viewprofilepage/user-id/5046408)

We have implemented a Level 2 Approver using Assets.

Example:

Software Catalog:

Approval Required: True / False

Approver: User

L2 Approval Required: True / False

L2 Approver: User

We then use automation/assets and a L2 Status to achieve a 2nd level of approval.

Hope that helps

Mark


author: Jim Knepley - ReleaseTEAM
body: I think you'll need to use ScriptRunner and the UserPropertyManager API. With ScriptRunner, you can implement whatever business logic you like and set an "Approver" field that you would use for the approval configuration.


Tags: cloud

jira-service-management

jira-service-management-cloud
Is it possible to link a question/answer from a Form to the field used for Satisfaction?
Asked by Daniel_Adersteg:

Is it possible to link a question/answer from a Form to the field used for Satisfaction?

I want to trigger a Jira form and I want the answer from the from to update/edit the Satisfaction score (i.e. 1-5 star / CSAT).

Is this possible?


Answers:
author: Rudy Holtkamp
body: Hi [@Daniel_Adersteg](/t5/user/viewprofilepage/user-id/3650288) ,

No you can't link it directly.

However you can create a satisfaction form and make a 'Star' form field, rating 1 to 5. After the user submits the form, you can trigger an automation which calls the REST API end point (<https://developer.atlassian.com/cloud/jira/service-desk/rest/api-group-request/#api-rest-servicedeskapi-request-requestidorkey-feedback-post>) where you can add the Atlassian default CSAT scores.

I hope this helps.

Rudy


Tags: cloud

jira-service-management

jira-service-management-cloud

jira-software
how to create jira tickets from an external page for unregistered users
Asked by Camila Lorena Reyes:

Hi! I am trying to create jira tickets from an external page for unregistered users.

I found inside de API the method POST-Create customer request but it asks me for a user id. For new users, how can I do?

<https://developer.atlassian.com/cloud/jira/service-desk/rest/api-group-request/#api-rest-servicedeskapi-request-post>


Answers:
author: Anusha A
body: Hi Camila,

Thanks for your question on community.

Using **Issue Collectors** in Jira is a great way to create tickets from unregistered users on an external page.

An Issue Collector is a feature in Jira that allows you to embed a form on your website, enabling users to submit issues directly into Jira without needing an account. More information on Embedding an issue collector into your website is here -

* <https://support.atlassian.com/jira-cloud-administration/docs/use-the-issue-collector/>

At the moment, this is available **only** for Company Managed Projects however we have been tracking a feature request with our developers requesting the implementation on Team managed projects. Here is the reference for you to vote and watch -

* <https://jira.atlassian.com/browse/JRACLOUD-76487>

Hope this is helpful.

Regards,

Anusha A


author: Vijay Dadi
body: Hello [@Camila Lorena Reyes](/t5/user/viewprofilepage/user-id/5464154) ,

The best way to create an issue for external users is to have a default account and pass that in the payload. Hope this helps

Vijay


Tags: cloud

jira-service-management

jira-service-management-cloud