​Does each confluence user require a jira license, when using remote user management?

[Bill Goodall]

Does each confluence user require a jira license, when using remote user management?

Hi community, this question seems like it must have been answered somewhere but I cant find where! I have spent over 20 min looking, I promise.  Please point me in the right direction.  

I am using Remote user Management in Confluence (where JIRA dictates the users/groups available to confluence).

Can I have more Confluence users than I have JIRA user licenses?
Or in other words: Can I have a 10 pack of JIRA users (dev's), and a 25 pack of Confluence users (dev's and business)?

[Giuliano C_ · Accepted solution]

Hey Bill, 

Actually, depending on the permissions given to the users from JIRA (or groups from JIRA), it will count. So, the answer would be that we will not need a JIRA license for the users in Confluence side. For example:

Confluence's license count is based on Global Permissions: https://confluence.atlassian.com/display/DOC/Global+Permissions+Overview 

Users will count towards the license in the following ways:

• If the user belongs in a group that has global permissions to use Confluence
• If the user is individually granted global permissions to use Confluence
• If the user have the Can Use permission in Confluence

Within the UI, you can get a listing of users that are assigned Global Permissions by navigating to Confluence Admin > Global Permissions. From there, you can see a list of users and groups that will count against your license. You can click on each group individually to reveal their members

Also, this query will return users that belong in a group which has global permissions:

SELECT DISTINCT u.lower_user_name
FROM cwd_user u
JOIN cwd_membership m ON u.id = child_user_id
JOIN cwd_group g ON m.parent_id = g.id
JOIN spacepermissions sp ON g.group_name = sp.permgroupname
WHERE permtype='USECONFLUENCE' AND u.active = 'T';

If using LDAP, you can use filters to restrict the scope of the LDAP search. The best option would be to use filters based on Group Memberships. Example:

(&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=jira-users,OU=Sydney,DC=example,DC=com))

To get your user count down, the following guidelines may be helpful:

* If you have more than one directory, ensure that the same user does not exist in multiple directories.
* We recommend that you allow only particular groups to log in to each application, rather than entire directories.
* Remove the Can Use permission for users/groups from JIRA that you don't want to count against the Confluence license.

Hope it helps ya!

Regards, 

Giuliano T.

[Bill Goodall]

Thanks that was the confirmation I was looking for.