How to correct count amount of licences of Confluence

[krzysztofzarebski]

Hi, I've hudge problem to get correct amount of licences in our instances (Jira/Confluence). We manage users of Confluence in Jira directory. So when I try to filter anyone with ,'confluence-users' group, I get 214 results. I have one Admin account for both instances, plus one admin-confluence local account. When I try to check licences on the Confluence side, I get 249 used licenses. Using postgresql query, I get the same result.

[Nic Brough -Adaptavist- · Accepted solution]

SQL isn't the right way to look at this.

Log into Confluence as a full admin, and go to Admin (general) -> Security -> Global permissions. 

Look at the groups and individuals who have "can use".  I suspect you've got more than just "confluence users" in there.

[krzysztofzarebski]

@Nic Brough -Adaptavist- I control also this setting. Only three groups have an access to the licence. Confluence-Admin (1 user) and Jira-Admin (1 user). That's all

[Nic Brough -Adaptavist-]

I had a bad feeling that was the case, but it's been the answer arounf 75% of the time this question comes up.

The next one is a long slog - you'll need to look at the full list of users and identify the ones (although it's likely you only need to find the first one to find out the underlying cause)

However, before trying to do that via the UI, if you are on Confluence 7.0.2 or above and can get to your logs, there is a trick that can help.

• Go to logging and profiling and find a class - from memory, it is something like com.atlassian.User.DefaultUserAccess (or defaultUserAccessor?).  Set the log leg to "debug".
• Go back to the licence view and belt "refresh".  Now go back to the logging and profiling and change the setting back to what it was before.
• Then read the log - you should find it has dumped out 249 lines of user details which you can then try to match against the users in the three groups who can log in.

Note - this can be slow and cause heavy load, so do it when it is quiet.   And remember it's going to dump personal data (user names) out into a system log, unencrypted and in plain text, so there might be security and privacy risks in this.

[krzysztofzarebski]

Good to know! I must try everything. I get back with any results

[Nic Brough -Adaptavist-]

Being on 7+ and having this has made it a LOT easier - the list that comes out in the log can be dumped into a spreadsheet alongside "members of groups X, Y and Z" and then a lookup function used to match the two sets and highlight where they don't match!