Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Automatically adding agents from active-directory group "x"

Burkhard Voss July 23, 2018

Hi

Is it possible to automatically add users as agents if they are in group "jira-agents" in our Active Directory.

If I want to add an Agent pressing on "add team" I am getting the error "Group does not exist"

Kind Regards

Mathias

1 answer

0 votes
Knut Arne Ristebråten
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 23, 2018

Hi,

It should be possible to add the AD Group into 'Permission Scheme'/'Project Roles' so all members of that group get those permissions/roles. I am using that feature all the time..

You do need first to verify that the group is imported to Jira from AD tho. This is based on your Active Directory connector.

If you have a AD user member of that user group, look up that user in Jira and check if the user have "jira-agents" listed under 'Group Name'.
You should also be able to find the group under 'User management' -> 'Groups'.

If that group is missing, it can be some configuration needed on your Active Directory connector. The scope of the connector could be limited.
Verify this on the settings for the connector in 'User management' -> 'User Directories' -> Edit on the connector, or go to the summary on bottom on the page.
Look for the value ldap.group.dn (Additinal Group DN).
If this have a value set, Jira won't import any groups outside of that DN.
You then have to either move the group in AD (or create a new in the correct DN), or configure the User Directory in Jira to look for groups in the group DN that contain "jira-agents".

Hope this helps.

Burkhard Voss July 23, 2018

Hi,

I imported the complete AD to Jira now.

I wanted to add my user to "jira-administrators" or "jira-servicedesk-users" and got a big error message beginning with:

com.atlassian.crowd.exception.runtime.GroupNotFoundException: Group <Unable to create group jira-administrators in directory 10000 in order to add membership of user mkoprek (group jira-administrators found in directory 10000)> does not exist

What am I doing wrong?

Kind Regards

Mathias

Danyal Iqbal
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 23, 2018

com.atlassian.crowd.exception.runtime.GroupNotFoundException: Group <Unable to create group jira-administrators in directory 10000 in order to add membership of user mkoprek (group jira-administrators found in directory 10000)> does not exist

Can you share the config summary of your crowd directory?

Try the following:

See https://confluence.atlassian.com/jirakb/how-to-prevent-jira-administrators-from-modifying-certain-groups-in-crowd-directory-829063832.html

- Delete the connector, restart the application and create a new one.

Burkhard Voss July 23, 2018

ldap_config.png

 

This is the config. Do you need any more information?

I will delete the connector now and add it completly new.

Thanks

Suggest an answer

Log in or Sign up to answer