How to reset the default group membership action of LDAP directories

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Summary

When setting up a Delegated LDAP directory, or a Read Only with Local Groups, we can define a list of groups that users will automatically be added to when they first log in.

However, if a user is removed from a default group, it won't be added automatically again. That's because Confluence stores in the database which user has already been added once to a default group.

Environment

Confluence Server or Data Center

Solution

Remember to backup your database before performing any changes.

  • To have users added to the default groups when they log in once again, run the following query against the Confluence database:

    1 2 3 4 DELETE FROM cwd_user_attribute WHERE attribute_name = 'autoGroupsAdded' AND attribute_value = 'true';
  • It may take some time for this change to be reflected in the application due to Confluence Cache Management. If you need this change to take effect immediately, you'll need to Flush Cache Management.

    1. Go to ⚙ > General Configuration > Cache Management

    2. Click on Flush All, at the bottom of the page

Updated on April 11, 2025

Still need help?

The Atlassian Community is here for you.