JIRA - User groups not modifiable

[Steven Lam]

We have gone through a couple of JIRA upgrades and found that legacy users' user-groups are not modifiable.

It allows the action but does not reflect the removal after the action is completed.

This issue still persists in our JIRA 5.1 test environment with backup data.

• using a downloaded instance of JIRA
• tested on 4.3.2, 5.1, 5.1.3, 5.1.4 versions of JIRA
• system administrator privileges
• using Active Directory authentication
• applies to users that have been disabled via Active Directory at one point (not necessarily disabled now)
• existing groups prior to being disabled are no longer removable (applies to user being both enabled or disabled in Active Directory)
• new groups can be added and removed

[Steven Lam · Accepted solution]

Marcus from Atlassian support found that the cwd_membership table had some inconsistencies regarding the groups and directory ids of such groups.
He managed to fix all these memberships by updating the parent_id with the correct group id of the membership directory with a fairly detailed query.

[Steven Lam]

It is currently leveraging Active Directory.

This only happens for users that at one point have been disabled, even after re-enabling they are still left in a stale state.

Adding and removing new groups is allowed, however, removal of older groups (prior to being disabled) are not.

[Penny Wyatt (On Leave to July 2021)]

Is the instance using an external user directory such as Crowd, LDAP or Active Directory?