Uploaded image for project: 'Identity'
  1. Identity
  2. ID-167

Support Nested Groups in Atlassian Cloud platform

    • Icon: Suggestion Suggestion
    • Resolution: Won't Do
    • None
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Problem Definition

      "Enable Nested Group" is turned off in Atlassian Cloud platform. Atlassian Cloud customers would like to get this feature enabled as since Jira 4.3 release, the new user management has the ability to use nested groups.

      It seems that the reason behind disabling this is that: there is a potential risk that Atlassian Cloud licence will not work properly with nested groups.

      Suggested Solution

      Implement nested group feature as implemented in Jira Server.

      Workaround

      Nested groups flattening via Cloud IdP - nested groups aren’t supported in Atlassian Cloud, but you can keep the nested structure in your external user directory and use the flattened one in Cloud. A flattener keeps proper group memberships by automatically recreating memberships from your nested structure in the flat structure, and then adding users to all the required groups.

      Consider syncing groups via IdP that supports the feature - here’s a summary of how identity providers supported in Atlassian Cloud handle nested groups:

      https://support.atlassian.com/migration/docs/prepare-nested-groups-for-cloud-migration/ 

      For example, Azure AD supports nested groups:

      If you'd like to use flattened nested groups with AzureAD, please can check Early Access Program for Nested groups flattening between Atlassian cloud and Azure AD 

            [ID-167] Support Nested Groups in Atlassian Cloud platform

            Should be a basic feature.
            Really need this, please consider implementing it!

            Dominique Dames added a comment - Should be a basic feature. Really need this, please consider implementing it!

            Another request for nested groups in Atlassian cloud. 

            Matt Bailey added a comment - Another request for nested groups in Atlassian cloud. 

            Doron Gill added a comment -

            must have feature

            Doron Gill added a comment - must have feature

            We really need this

            Jonas Runningen added a comment - We really need this

            Milad S. added a comment - - edited

            I hope our votes/comments make you reconsider the decision regarding this feature.

            Milad S. added a comment - - edited I hope our votes/comments make you reconsider the decision regarding this feature.

            Count me as another puzzled person as to why you won't do this.

            The whole architecture for how groups are managed in the cloud doesn't seem sustainable for large organizations as there is no way for anyone but an ORG ADMIN to make group changes. And now you can't even leverage nested groups. Are you trying to make user management a nightmare?

            Krista Stellar added a comment - Count me as another puzzled person as to why you won't do this. The whole architecture for how groups are managed in the cloud doesn't seem sustainable for large organizations as there is no way for anyone but an ORG ADMIN to make group changes. And now you can't even leverage nested groups. Are you trying to make user management a nightmare?

            It is a very much needed and basic functionality. Please reconsider and implement it.

            Subodh Sohoni added a comment - It is a very much needed and basic functionality. Please reconsider and implement it.

            @kdight Any update on this? You said "(...) we will look at easier ways to provide bulk group management via Atlassian Access." but then that was the last we heard about it. An update would be welcome. Thanks.

            Frans Flippo added a comment - @kdight Any update on this? You said "(...) we will look at easier ways to provide bulk group management via Atlassian Access." but then that was the last we heard about it. An update would be welcome. Thanks.

            I echo what Romeo wrote above.. this is a helpful feature that makes user management much easier (from my standpoint).. any chance we can change the outlook on this functionality?

            Mariam Ahmadi added a comment - I echo what Romeo wrote above.. this is a helpful feature that makes user management much easier (from my standpoint).. any chance we can change the outlook on this functionality?

            It is quite a disappointment to find the request I was looking with the resolution already filled in.

            Resolution: Won't Do

            Is there any chance this will be revisited in the near future? Or do we need to create a new request for it?

            Romeo Bollen added a comment - It is quite a disappointment to find the request I was looking with the resolution already filled in. Resolution: Won't Do Is there any chance this will be revisited in the near future? Or do we need to create a new request for it?

            Phil James added a comment -

            Again - another organisation struggling to have sustainable governance on a key product because some basic features are unavailable.

            Phil James added a comment - Again - another organisation struggling to have sustainable governance on a key product because some basic features are unavailable.

            This was closed as "Won't do" nearly four years ago without a satisfactory explanation, considering that it's an option in the datacenter version.  I think it's time for someone at Atlassian to revisit this issue.

            Chris Power added a comment - This was closed as "Won't do" nearly four years ago without a satisfactory explanation, considering that it's an option in the datacenter version.  I think it's time for someone at Atlassian to revisit this issue.

            Paul added a comment -

            Please add this!

            Paul added a comment - Please add this!

            Need this!  Yet another item related to user/group management that was ignored or forgotten about.  

            Devin Ponda added a comment - Need this!  Yet another item related to user/group management that was ignored or forgotten about.  

            Ferris added a comment -

            A true deal breaker. Stunned that this isn't a highly prioritized feature.

            Ferris added a comment - A true deal breaker. Stunned that this isn't a highly prioritized feature.

            Anil added a comment -

            Access management is a cumbersome process in Atlassian products. I am very surprised that still there is no resolution on this issue. The administration panel is lacking so many other basic features too. Very frustrating.

            Anil added a comment - Access management is a cumbersome process in Atlassian products. I am very surprised that still there is no resolution on this issue. The administration panel is lacking so many other basic features too. Very frustrating.

            Please enable Nested Groups

            Christopher Chalmers added a comment - Please enable Nested Groups

            It will be good to have a nested group to manage access effectively. Please consider this feature in future enhancements. 

            Jay Chapani added a comment - It will be good to have a nested group to manage access effectively. Please consider this feature in future enhancements. 

            This is needed in order to reduce user management overhead and error. It is quite error-prone to manually add new users to multiple groups instead of adding them to single group that represents their role and have them automatically in other needed groups.

            Oren Ben-Meir added a comment - This is needed in order to reduce user management overhead and error. It is quite error-prone to manually add new users to multiple groups instead of adding them to single group that represents their role and have them automatically in other needed groups.

            We wont be building nested groups, we want to keep our group structure flat. But we will look at easier ways to provide bulk group management via Atlassian Access.

            Kieren (Inactive) added a comment - We wont be building nested groups, we want to keep our group structure flat. But we will look at easier ways to provide bulk group management via Atlassian Access.

            JVHE added a comment -

            I was reading the same blogpost : 

            https://www.atlassian.com/blog/jira-software/share-jira-external-partners

             

            How can i expose our cloud instance to external partners ?

            JVHE added a comment - I was reading the same blogpost :  https://www.atlassian.com/blog/jira-software/share-jira-external-partners   How can i expose our cloud instance to external partners ?

            Alex added a comment -

            Any updates on this?

            Alex added a comment - Any updates on this?

            That's bad. Why has it been pending from so long?

            Sanmat Jhanjhari added a comment - That's bad. Why has it been pending from so long?

            Chad Meyer added a comment -

            Inexcusable that this is not part of basic functionality.  Rally is a much better featured agile workflow management tool.

            Chad Meyer added a comment - Inexcusable that this is not part of basic functionality.  Rally is a much better featured agile workflow management tool.

            brian.plexico183007149 added a comment -

            I was looking to implement this:

            https://www.atlassian.com/blog/jira-software/share-jira-external-partners

            Too bad nested groups aren't available in the cloud version.  Seems like a basic feature that should be available.

            brian.plexico183007149 added a comment - I was looking to implement this: https://www.atlassian.com/blog/jira-software/share-jira-external-partners Too bad nested groups aren't available in the cloud version.  Seems like a basic feature that should be available.

            It's nearly a year now since this was last looked at?

            Michael Duncan added a comment - It's nearly a year now since this was last looked at?

            Has there been any feedback from Atlassian on why this is not enabled?  The functionality for organizations with many teams is pretty important.  The loss of efficiency of having to manually update groups and spaces when nested groups would allow for less direct interaction is significant.

            Tony Morrison added a comment - Has there been any feedback from Atlassian on why this is not enabled?  The functionality for organizations with many teams is pretty important.  The loss of efficiency of having to manually update groups and spaces when nested groups would allow for less direct interaction is significant.

            Raghu Rao added a comment - - edited

            This is a basic feature that has been there in multi-user systems for decades. Right now it is a real pain juggling multiple groups with redundant user specifications rather than grouping them hierarchically. Atlassian wake up from the stone age and pl. enable!

            Raghu Rao added a comment - - edited This is a basic feature that has been there in multi-user systems for decades. Right now it is a real pain juggling multiple groups with redundant user specifications rather than grouping them hierarchically. Atlassian wake up from the stone age and pl. enable!

            this is kinda crazy. How is this not a feature. I have to have the same users in different groups or, change the permission scheme every time there is  a change in users. 

            Joshua Harris added a comment - this is kinda crazy. How is this not a feature. I have to have the same users in different groups or, change the permission scheme every time there is  a change in users. 

            Please add this feature.  Attempting to manage security via "flat" groups is terribly inefficient; tedius; and generates an inordinate amount of maintenance

            Thanks

            Michael Duncan added a comment - Please add this feature.  Attempting to manage security via "flat" groups is terribly inefficient ; tedius ; and generates an inordinate amount of maintenance !  Thanks

            We would really need this feature. Can we expect it anytime soon?

            Alexander Wegener added a comment - We would really need this feature. Can we expect it anytime soon?

            +1. Right now we have separate groups for each of the new JIRA products to control licencing, and being able to sum them all into an "everyone who has access to JIRA" group would be extremely useful.

            Haddon Fisher added a comment - +1. Right now we have separate groups for each of the new JIRA products to control licencing, and being able to sum them all into an "everyone who has access to JIRA" group would be extremely useful.

            Craig Ross added a comment -

            Would be a great addition to the access controls of the system!

            Craig Ross added a comment - Would be a great addition to the access controls of the system!

            We really need this feature. We have separate private customer access levels and this is painful to have to enter the same individual names into multiple groups. Please let us know when we can expect the ability for nested groups.

            Alicia Pena added a comment - We really need this feature. We have separate private customer access levels and this is painful to have to enter the same individual names into multiple groups. Please let us know when we can expect the ability for nested groups.

            @Jon Kern
            Yeah, there are issues with thousands of votes that aren't being worked on or that have been verified as issues, and then dropped off the roadmap for OnDemand/Cloud... I would not hold my breath on this one.

            Andrew Rose added a comment - @Jon Kern Yeah, there are issues with thousands of votes that aren't being worked on or that have been verified as issues, and then dropped off the roadmap for OnDemand/Cloud... I would not hold my breath on this one.

            Jon Kern added a comment - - edited

            If this is verified, how soon before it is deployed (to On Demand)? Oh, DUH. Verified just means the request has been verified as legit. It does not mean the implementation has been verified on the QA server. Geesh.

            Jon Kern added a comment - - edited If this is verified, how soon before it is deployed (to On Demand)? Oh, DUH. Verified just means the request has been verified as legit. It does not mean the implementation has been verified on the QA server. Geesh.

            Much older request. I think this is not in the strategy of Atlassian, but should.

            Giovanni Silva added a comment - Much older request. I think this is not in the strategy of Atlassian, but should.

            This feature is clearly a must have !

            Simon-Pierre LAURENT added a comment - This feature is clearly a must have !

            The ability to nest groups is a basic feature of any group based user permission hierarchy. My organization requires this to properly establish user permissions.

            Benjamin Rosenbloom added a comment - The ability to nest groups is a basic feature of any group based user permission hierarchy. My organization requires this to properly establish user permissions.

            Please, this action has to be done, because my team needs to classify the groups and divide their members into subgroups.

            Darly Senecal-Baptiste added a comment - Please, this action has to be done, because my team needs to classify the groups and divide their members into subgroups.

            This is a big lack of functionality for our instance.
            Also , it is not mentioned in the Atlassian OnDemand Restrictions page.
            Is it possible to define a fix version for this improovement?

            Tihomir Nikolov _Nemetschek Bulgaria_ added a comment - This is a big lack of functionality for our instance. Also , it is not mentioned in the Atlassian OnDemand Restrictions page . Is it possible to define a fix version for this improovement?

              Unassigned Unassigned
              adiallo Abdoulaye Kindy Diallo (Inactive)
              Votes:
              65 Vote for this issue
              Watchers:
              109 Start watching this issue

                Created:
                Updated:
                Resolved: