How do you handle stale accounts?

[Thomas]

Hi all,

for pretty much all systems, we run a stale account policy where

- created accounts are removed if the user has not (never) logged in for X weeks

- existing accounts are reminded to use/log in if they have not done so for X months

- existing accounts that are still inactive X weeks after the reminder are removed

Jira Service Management does not have such a GDPR feature. Looking at the marketplace, I can only find an app for Service Management Server (https://marketplace.atlassian.com/apps/1219079/gdpr-for-service-management?hosting=server&tab=overview).

I have been trying to run my own script and use the REST API but certain information like account creation date, last activity (not log in) are not available.

So, how do you do this?

Thanks,

Thomas

[Christopher Yen]

Hi @Thomas 

It's been a manual process for us that we do periodically. From https://admin.atlassian.com/ under the Directory tab I'll do an export of accounts and it will email a spreadsheet to you, in the spreadsheet there will be last login dates for each product and we'll do some filtering to find licenses to free up. 

[Thomas]

Yes, we do the same for customers (users/licenses is not a problem as this is managed via SSO).

However, it's a manual process and it's time consuming. It should be a standard feature to help satisfy GDPR requirements. :(