Uploaded image for project: 'Atlassian Guard'
  1. Atlassian Guard
  2. ACCESS-1384

User provisioning not updating the group - account association

      Issue Summary

      User provisioning not updating the account <--> group association in a specific scenario. 

      Steps to Reproduce

      1. Create a new user in Azure - make sure it is disabled
      2. Create a group in Azure and assign this group to the user
      3. Assign "Atlassian Cloud" app to the group created in step 2
      4. User provisioning will create the Group in Atlassian but user will not be added to it as Azure will say the object is not active in source
      5. Enable the user in Azure
      6. User provisioning will not change anything in Atlassian
      7. I had to do on demand provisioning for the user - this did create the user in Atlassian but in default group (all members ...) but not in the group to which user is added in Azure!

      Expected Results

      Account should be added to the group once the user is enabled in Azure

      Actual Results

      Account is not added to the expected group

      Workaround

      Re-add the user to the impacted group in Azure (and do an on-demand provisioning) 

      or

      You can use Provisioning on demand to fix this without having to update the user:

      In Azure/Entra ID select provision on demand
      Select the group the user is missing from in Atlassian Cloud
      Select to provision specific users
      Select up to 5 impacted users
      The provisioning will say the group was skipped due to RedundantImport, but the add member operation will still take place for the missing members.

            [ACCESS-1384] User provisioning not updating the group - account association

            Andrew Delaney made changes -
            Description Original: h3. Issue Summary

            User provisioning not updating the account <--> group association in a specific scenario. 
            h3. Steps to Reproduce
             # Create a new user in Azure - make sure it is disabled
             # Create a group in Azure and assign this group to the user
             # Assign "Atlassian Cloud" app to the group created in step 2
             # User provisioning will create the Group in Atlassian but user will not be added to it as Azure will say the object is not active in source
             # Enable the user in Azure
             # User provisioning will not change anything in Atlassian
             # I had to do on demand provisioning for the user - this did create the user in Atlassian but in default group (all members ...) but not in the group to which user is added in Azure!

            h3. Expected Results

            Account should be added to the group once the user is enabled in Azure
            h3. Actual Results

            Account is not added to the expected group
            h3. Workaround

            Re-add the user to the impacted group in Azure (and do an on-demand provisioning) 
            New: h3. Issue Summary

            User provisioning not updating the account <--> group association in a specific scenario. 
            h3. Steps to Reproduce
             # Create a new user in Azure - make sure it is disabled
             # Create a group in Azure and assign this group to the user
             # Assign "Atlassian Cloud" app to the group created in step 2
             # User provisioning will create the Group in Atlassian but user will not be added to it as Azure will say the object is not active in source
             # Enable the user in Azure
             # User provisioning will not change anything in Atlassian
             # I had to do on demand provisioning for the user - this did create the user in Atlassian but in default group (all members ...) but not in the group to which user is added in Azure!

            h3. Expected Results

            Account should be added to the group once the user is enabled in Azure
            h3. Actual Results

            Account is not added to the expected group
            h3. Workaround

            Re-add the user to the impacted group in Azure (and do an on-demand provisioning) 

            or

            You can use Provisioning on demand to fix this without having to update the user:

            In Azure/Entra ID select provision on demand
            Select the group the user is missing from in Atlassian Cloud
            Select to provision specific users
            Select up to 5 impacted users
            The provisioning will say the group was skipped due to RedundantImport, but the add member operation will still take place for the missing members.
            SET Analytics Bot made changes -
            Support reference count Original: 16 New: 17
            SET Analytics Bot made changes -
            Support reference count Original: 15 New: 16
            jhaloot made changes -
            Workflow Original: JAC Bug Workflow v3 [ 4244792 ] New: JAC Bug Workflow v4 [ 4567580 ]
            SET Analytics Bot made changes -
            Support reference count Original: 16 New: 15
            SET Analytics Bot made changes -
            Support reference count Original: 15 New: 16
            Kat N made changes -
            Due Date New: 31/Dec/2026
            Kat N made changes -
            Development Effort New: L [ 13033 ]
            Was this caused by a recent change? New: No [ 19032 ]
            Status Original: Needs Triage [ 10030 ] New: Gathering Impact [ 12072 ]
            Kat N made changes -
            Resolution Original: Answered [ 9 ]
            Status Original: Closed [ 6 ] New: Needs Triage [ 10030 ]

            Can't understand how a big tech company like Atlassian can't have direct contacts for things like this. We pay a lot of $ for Atlassian, same for Microsoft and still need to open multiples cases for features that are "standalone" in every other SaaS solution.

            fdossantostavares added a comment - Can't understand how a big tech company like Atlassian can't have direct contacts for things like this. We pay a lot of $ for Atlassian, same for Microsoft and still need to open multiples cases for features that are "standalone" in every other SaaS solution.

              df1442399d33 Krishna Turlapati Venkata
              dae5a2657689 Rumman Siddiqui (Inactive)
              Affected customers:
              20 This affects my team
              Watchers:
              24 Start watching this issue

                Created:
                Updated: