Did you use JIRA Service Request to auto provision AAD groups?

[Eva Dezsi]

Hi all,

We have the following scenario:  we have a 3rd party app - and the licences for that app are based of AAD groups.

That means if user X is in group YES - he will have access to the 3rd party app, if he is in NO group, then he won't.

At the current moment the current process is:

- user X creates a JIRA service request 

- somebody goes and assigns manually user X to group YES, and removes him from group NO

As this is a highly repetitive task, I would like to know if somebody from uses self provisioning, what we would like to achieve is to have an automation, that based on teh service reuqest assigns user X to YES, and removes him from group NO.

Thank you all,

Eva

[Andrew Laden · Accepted solution]

By AAD groups you mean Azure Active Directory groups?

We use Deviniti's Active Directory Attribute Sync, which has post functions to add/remove users from groups.

https://deviniti.com/support/addon/server/active-directory/latest/getting-started-ad/

Using that, you should be able to automate this. (though to be fair, I can't speak to Azure)

Of course, with scripting, you can call out to any command so if you can use a command line to add/remove users (via powershell script etc) then you could do that as well.