Automation of User Management

[Sanjivani Ganpat Wayal]

Hi,

Can we automate this process that if user does not access JIRA for 1 month need to deactivate his access even though he is still part of the organization only the access for jira is not required for him anymore.

Iam aware that this can be done manually by fetching the report of Last Used and then deactivating the access, just wanted to know if we can do it through any automation rule or by any third party app.

[Ed Letifov _TechTime - New Zealand_]

Hello, @Sanjivani Ganpat Wayal 

Please check our User Management for Jira Cloud and User Management for Confluence Cloud (you will only need one).

Both apps will do exactly what you are asking: "if user does not access Jira for 1 month – need to remove his Jira access automatically"

This is done through "Scheduled User Actions" and is available for the "new user management experience". Not all actions available in the old user experience, and yes, not everything we have on Data Center is available in Cloud. See comparison page.

Follow our getting started guide, view documentation, or if you have any questions – don't hesitate to reach out to our 24x7 support.

[Deepak Menezes]

If user access is granted product access via dedicated Azure AD group membership, can the plugin be configured to interact with AD to take the user out of the AD group to revoke the license?

[Sanjivani Ganpat Wayal]

Hi All,

Thank you for the help found an app on marketplace which works with cloud versions-

https://marketplace.atlassian.com/apps/1224360/automated-user-management-auto-deactivation-for-jira?tab=overview

I think this could fulfill the requirement, could you please suggest for the same

[Mahima_miniOrange]

Hi Sanjivani,

Yes, it’s absolutely possible to automate this process and I’m glad you brought it up!

The miniOrange Automated User Management app is designed precisely for this use case.

🔄 Here’s what it can do for you:

• Automatically detects user inactivity (e.g., no Jira access for 30 days)

• Deactivates users based on configurable rules

• Helps keep your environment secure, clean, and license-efficient

✨ Bonus: It’s also one of the most cost-effective solutions available on the Atlassian Marketplace offering powerful automation at a very reasonable price point.

This eliminates the need for manual report pulling or spreadsheet tracking, giving admins back their time and peace of mind.

If you'd like to see how it works in action or explore it further, feel free to schedule a quick walkthrough via my Calendly📅

Best regards,
Mahima from Pune
Senior Business Analyst, miniOrange

[Staffan Redelius]

Currently there is no way to do this.

But I agree that it would be a very nice feature. I is not unusual that customers has 10-20% of the users not been logged in for 6 months (still working in the company though). 

There is a ticket "Under consideration" please go in and vote for it to give attention to this feature.

https://jira.atlassian.com/browse/ID-7726

[Bill Sheboy]

Hi @Sanjivani Ganpat Wayal -- Welcome to the Atlassian Community!

Short answer: perhaps check the Atlassian Marketplace for a solution, however...

One could use a global scope, automation rule to call the Admin REST API endpoint to gather the users with the Send Web Request action, and check their last_active date / time to decide next steps.  This could process at most up to 100 users due to automation branching limits.

Regardless of that limit, I recall reading developer community posts and public backlog defects where last_active was not consistently reliable in that endpoint's results.  You may experiment to learn more, and I would not recommend using a rule to deactivate users this way.  Perhaps just use it to create a notification for an admin to check the results and perform the actual deactivation.

Kind regards,
Bill

[Dick]

You can always list the persons if you have access to the database:

USE YOURJIRAINSTANCE
SELECT d.directory_name AS "Directory", u.active AS "AD-Active",
u.user_name AS "Username",
DATEADD(second, cast(attribute_value as bigint)/1000,{d '1970-01-01'}) AS "Last Login"
FROM dbo.cwd_user u

JOIN (
SELECT *
FROM dbo.cwd_user_attributes ca
WHERE attribute_name = 'login.lastLoginMillis'
) AS a ON a.user_id = u.ID
JOIN dbo.cwd_directory d ON u.directory_id = d.ID

where DATEADD(second, cast(attribute_value as bigint)/1000,{d '1970-01-01'}) > '2023-01-01 00:00:00.000'
ORDER BY "Last Login" DESC;

[Aron Gombas _Midori_]

On Data Center, there are several apps that offer this functionality (one example), but none of them has a Cloud version. I guess it just cannot be built on the Cloud...

[Mahima_miniOrange]

@Aron Gombas _Midori_ Totally understand where you're coming from, Cloud has its limitations compared to Data Center.

That said, we’ve actually built this functionality for Jira Cloud at miniOrange! 🎉
Our Automated User Management app supports inactivity-based deactivation, group cleanup, and more without manual effort or scripts.

Happy to share more if you'd like to check it out!

Thanks,
Mahima
Senior Business Analyst, miniOrange