Can you nest AD groups in JIRA internal groups?

[Adam White]

This is the layout we are trying to get to:

JIRA-Users (Internal JIRA group)

---- Product Management (AD)

----Software Engineering (AD)

--- etc (AD)

I don't believe you can map AD groups to internal groups, because when I try and do this it says I do not have permission.

The main goal here is that whenever somebody is onboarded with the company and joins one of those groups, they will always get access to JIRA being since it is mapped to the JIRA-users group. We do not want just anyone with an AD account to be able to log into JIRA.

[Adam White · Accepted solution]

It looks like this can't be done:

https://jira.atlassian.com/browse/JRA-24671

I guess we'll have to go with option #2 of only pulling people in the JIRA OU.

[Adam White]

The other potential option is to have those security groups be members of a jira OU and then only pull those users in the AD filter, and when they log in, automatically add them to jira-users. Seems a bit roundabout though.