Uploaded image for project: 'Atlassian Guard'
  1. Atlassian Guard
  2. ACCESS-925

Allow User Provisioning Groups Larger than 1000 in a Single Group Operation

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Resolution update

      Hi All,

      We've raised the limit to support a maximum of 10K users per group provisioned via SCIM.

      Thank you,

      Narmada Jayasankar

      Lead Product Managed, Atlassian Access

      Problem Definition

      Large/Enterprise Customers who are Configuring Atlassian Access with User Provisioning are running into an issue where User Provisioning will not create a Group if it contains more than 1000 Users

      Error received:

      Resource [Group] Exceeded group member limit of 1000 per group operation, please use additional group patch operations to add/replace/remove members

      Suggested Solution

      Expand the User Provisioning Group API so that more than 1k group operations can be received

      Why this is important

      Large/Enterprise Customers may not be able to split their Group into smaller groups

      Workaround

      For the initial sync, reduce the Group Membership to less than 1000 Users and push the Group. Once successful, add Users back to the Group in batches less than 1000 (eg 1-1000, 1001-2000, 2001-3000, etc)

          Form Name

            [ACCESS-925] Allow User Provisioning Groups Larger than 1000 in a Single Group Operation

            Narmada Jayasankar made changes -
            Description Original: h3. Problem Definition
            Large/Enterprise Customers who are Configuring Atlassian Access with User Provisioning are running into an issue where User Provisioning will not create a Group if it contains more than 1000 Users

            Error received:
            {quote} Resource [Group] Exceeded group member limit of 1000 per group operation, please use additional group patch operations to add/replace/remove members{quote}

            h3. Suggested Solution
            Expand the User Provisioning Group API so that more than 1k group operations can be received

            h3. Why this is important
            Large/Enterprise Customers may not be able to split their Group into smaller groups
             
            h3. Workaround
            For the initial sync, reduce the Group Membership to less than 1000 Users and push the Group. Once successful, add Users back to the Group in batches less than 1000 (eg 1-1000, 1001-2000, 2001-3000, etc)
            New: {panel:title=Resolution update}
            Hi All,

            We've raised the limit to support a maximum of 10K users per group provisioned via SCIM.

            Thank you,

            Narmada Jayasankar

            Lead Product Managed, Atlassian Access


            {panel}
            h3. Problem Definition

            Large/Enterprise Customers who are Configuring Atlassian Access with User Provisioning are running into an issue where User Provisioning will not create a Group if it contains more than 1000 Users

            Error received:
            {quote}Resource [Group] Exceeded group member limit of 1000 per group operation, please use additional group patch operations to add/replace/remove members
            {quote}
            h3. Suggested Solution

            Expand the User Provisioning Group API so that more than 1k group operations can be received
            h3. Why this is important

            Large/Enterprise Customers may not be able to split their Group into smaller groups
            h3. Workaround

            For the initial sync, reduce the Group Membership to less than 1000 Users and push the Group. Once successful, add Users back to the Group in batches less than 1000 (eg 1-1000, 1001-2000, 2001-3000, etc)
            Narmada Jayasankar made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Gathering Interest [ 11772 ] New: Closed [ 6 ]
            Narmada Jayasankar made changes -
            Link New: This issue was cloned as ACCESS-936 [ ACCESS-936 ]
            Kat N made changes -
            Component/s New: User Provisioning (Okta, Gsync) [ 53304 ]
            Component/s Original: User provisioning via SCIM [ 56703 ]
            Key Original: ID-7330 New: ACCESS-925
            Project Original: Identity [ 16810 ] New: Atlassian Access [ 18910 ]
            Vik made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 478077 ]
            Daniel Brito [Atlassian] made changes -
            Remote Link Original: This issue links to "Page (Confluence)" [ 478056 ] New: This issue links to "Page (Confluence)" [ 478056 ]
            Daniel Brito [Atlassian] made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 478056 ]
            Shawn C (Inactive) created issue -

              Unassigned Unassigned
              scranford Shawn C (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: