We have a Confluence instance that was running on it's own internal directory for a long time, but now we've connected it to Crowd. No issues for merging in the user profiles, as their usernames matched our AD usernames.
However, even with admin credentails, I can't add users to groups inside the instance. I can move to another Confluence instance we have hooked up to the same Crowd, modify the groups there, then sync on the troublesome Confluence instance and the user is now in the group. This is the error I get when attempting to add a user to a group in the troublesome Confluence instance:
The following error(s) occurred:
- Could not add user 'myusername' as a member of group 'mygroup'. Check your server logs for more information.
And this is the first line of the error that is spawned in the logs:
2020-01-23 13:02:06,047 ERROR [http-nio-8090-exec-384] [bucket.user.DefaultUserAccessor] addMembership Failed to add 'myusername' as a member of 'mygroup'
-- referer: https://myurl.com/admin/users/adduserstogroup.action | url: /admin/users/adduserstogroup.action | traceId: 4e4b3941d63ca37d | userName: myAdminUser| action: adduserstogroup
com.atlassian.user.EntityException: com.atlassian.crowd.exception.OperationNotPermittedException: com.atlassian.crowd.exception.ApplicationPermissionException: Did not have update groups permission in any of the directories [com.atlassian.crowd.model.directory.DirectoryImpl@2c42bad2[lowerName=crowd server,description=<null>,type=CROWD,implementationClass=com.atlassian.crowd.directory.RemoteCrowdDirectory,allowedOperations=[UPDATE_USER_ATTRIBUTE, UPDATE_GROUP_ATTRIBUTE],attributes={crowd.sync.incremental.enabled=true, application.password=********, crowd.server.url=https://myCrowdURL.com/crowd/services/, com.atlassian.crowd.directory.sync.laststartsynctime=1579300529503, crowd.sync.group.membership.after.successful.user.auth.enabled=only_when_first_created, directory.cache.synchronise.interval=3600, com.atlassian.crowd.directory.sync.lastdurationms=140325, useNestedGroups=false, com.atlassian.crowd.directory.sync.issynchronising=false, application.name=myAppName}]]
I have for that user directory in the Crowd Application Permissions, all permissions enabled except Add/Remove User, same as the Confluence Application that works. Any idea what's causing this?
