Is there an admin API(organisation level) to revoke a specific product access for a user?
Asked by sam saas:

I have gone through the User Management API ,specifically the disable user API mentioned here:  
<https://developer.atlassian.com/cloud/admin/user-management/rest/api-group-users/#api-users-account-id-manage-lifecycle-disable-post>

but this disables the user revoking its access from all the products.  
Is there an API at org level...where user access can be revoked for a particular product only?


Answers:
author: Prince Nyeche
body: Hi [@sam saas](/t5/user/viewprofilepage/user-id/4153878)

Welcome to Community! I think the way to go about disabling a user is by removing the user from the default Product access group, this way the user doesn't consume any licenses anymore. I believe there's previous discussion on the notion of disabling a user only in one application versus to all application via that API which isn't available right now.

so probably if you hope to "disable a user" (deny access to a user on a specific application) going through the [API to remove the group](https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-groups/#api-rest-api-3-group-user-delete) the user belongs to, that is the default Product access would be much feasible.

comments: author: sam saas
body: Thanks for the reply [@Prince Nyeche](/t5/user/viewprofilepage/user-id/1928483) .  

I have tried removing users from the default Product access group(eg. For Confluence Cloud, default group being 'confluence-users'),but it does not reclaim the license.  
I had to remove the user from all the groups he is part of for that Product, in order to free the license.  

For example, in Confluence Cloud, if a user is part of 2 groups(confluence-users, custom-group) and both these groups have access to Confluence Cloud. Only when I remove user from both the groups, the user count in billing is reduced.  

Please correct me if I am wrong.  


author: Prince Nyeche
body: Hi [@sam saas](/t5/user/viewprofilepage/user-id/4153878)

Yes that's how it works if there are multiple Product access groups. Just to clarify the "Default Product access" is usually a group a user can be put into, if automatic sign up is enabled. So if there are multiple user groups there, removing the user from all the groups the users belong to that has Product access to Confluence should do the trick.


author: sam saas
body: Thanks for the confirmation [@Prince Nyeche](/t5/user/viewprofilepage/user-id/1928483) !  


author: Mark_Hortman
body: [@sam saas](/t5/user/viewprofilepage/user-id/4153878) Note that doing the above does not remove them from the license. I don't think Atlassian has provided any way to remove the license for a specific product yet. Seems incredible to me they haven't done this yet.


author: Yatish Madhav
body: Hi, thanks for the post and comments [@sam saas](/t5/user/viewprofilepage/user-id/4153878) and [@Prince Nyeche](/t5/user/viewprofilepage/user-id/1928483) - I will be trying this out now.

One note, the docco says "Connect apps cannot access this REST resource" - any idea if any when that will change so custom connect apps may allow this?

Thank you

comments: author: Yatish Madhav
body: Any idea on this, anyone?


Tags: administration

cloud

confluence-cloud

rest-api