Can I have AD groups control permissions in Jira and Confluence?

[David Hart]

We use OKTA with SAML as our identity provider and have migrated from server years ago. I want to be able to add users to groups and allow those groups to grant permissions in Jira, JSM, and Confluence. How can I start out going about doing with without completely re-doing our user directory.

Thanks for your time and thoughtful consideration! 

[Kieren _SmolSoftware_]

@David Hart if you want to utilise the default Atlassian groups (e.g. add users to the confluence-users group via AD), then you might want to look at a marketplace app like Admin Automations.

You mentioned not wanting to re-do your user directory, our automations allow you automatically add users to any group in your directory. 

The community might be able to give you more ideas if you can tell us more about what you’re looking to achieve with your changes?

-Kieren

 Co-Founder @ Admin Automations | Ex-Atlassian

[Samuel Gatica _ServiceRocket_]

Hi @David Hart 

Yes, you can use AD groups to control permissions in Jira and Confluence with OKTA as your identity provider.

• Using groups to assign product access
• Assign users to groups, project roles, and applications 
  
  • Once the groups are mapped, you can configure the necessary permissions in Jira, JSM, and Confluence by adding those groups to relevant roles or permissions (e.g., browse projects, edit issues, admin rights).

Hope this helps

Best regards

Sam