Learn More About User Management in Atlassian Cloud

(+ Tips to Reduce Licensing Cost!) 

1. Atlassian Cloud Licensing(Assign License)

In Atlassian Cloud, users are granted access to Atlassian products based on the following conditions: 

2. Atlassian Cloud Licensing(Remove License)

In Atlassian Cloud, license access will be removed based on the followings:

3. User Management via AD integration (SCIM-based Provisioning)

Atlassian Cloud integrated with External Identity Provider(IDPs) like Azure AD and Okta to provide user and group synchronization based on the Standard for Cross-domain Identity Management(SCIM)

• Automatic Synchronization Features:
  • User Provisioning

• User created in AD will automatically be registered in Atlassian Cloud. 

• User Deactivation

• Users deactivated in AD will automatically be suspended in Atlassian Cloud(license reclaim)

• Group Synchronization and Manage License

• The group structure in AD is automatically replicated to Atlassian Cloud, allowing you to use AD groups directly when configuring Access groups in Atlassian.

• 💬In other words, you can manage Jira and Confluence licenses via group directly from AD.

Common Use Cases

4. AD integration + manage license directly within Atlassian Cloud

By integrating the IDP (e.g., Azure AD, Okta) with Atlassian Cloud via SCIM, users and groups are automatically synchronized, while license assignment (Access Group allocation) is managed manually within Atlassian Cloud.

Operating Model: 

1. User Provisioning Automation

• Users provisioning are automatically created in Atlassian Cloud through SCIM integration with AD(or IDP).
• At this stage, users are only added to the directory and are not granted access.

2. Limited Use of Group Synchronization

• Groups from the IDP are synchronized to Atlassian; however, Access Groups (e.g., jira-users, confluence-users) are created and managed manually within Atlassian Cloud.
• This allows selective license assignment by adding only eligible users to the appropriate Access Groups.

3. Automatic User Deactivation

• When a user is deactivated in AD, the corresponding user in Atlassian Cloud is automatically suspended, ensuring they no longer have access to the app.

4. User Access (License Assignment) Managed by Atlassian Admins

• Whether a user will actually use Jira or Confluence is determined by the accountable team in Atlassian Cloud. They manually assign access by adding users to the appropriate Access Groups.

💬This model is especially suitable for organizations where IDP administrators and Atlassian administrators are two separate roles.

Common Use Cases

5. Direct User Management in Atlassian Cloud

• User invitations, removals, and group settings must be performed manually. (Registration and deletion via CSV are possible.)
• Identification of unused users/licenses and updates require separate monitoring and manual management by administrators.

6. User and License Management Using the Flexible User License Plugin

Flexible User License is a plugin designed to efficiently manage users and licenses in Atlassian Cloud, both automatically or manually.

Automatic User Management Features:

• Target Specification

• All users
• Specific groups
• Specific domains
• External users (based on domain)

• Rule-Based Settings

• Last activity date (e.g., users inactive for 30 days)
• Total license count (e.g., remove users if license seats exceed 100)

• Automated Workflow

• Removal from Access Groups automatically upon events triggered
• User suspension
• Schedule for recurrence workflow (e.g., daily, every Monday)

Manual User Management Features:

• Rule-based manual execution

• instantly run rules set for automatic management

• Direct user search and bulk operations

• Search all users, specific groups, inactive users, etc.
• Select users for the following actions:
  • Remove from Access Groups
  • Suspend user
  • Remove user

Common Use Cases

👉Visit Flexible Studio Atlassian Marketplace for a free trial

👉Visit Flexible Studio Official Website for more info about the plugin