What is the purpose of "disabledsystemuser" account on Confluence
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
Security Advisory for CVE-2022-26138
On July 20, 2022, Atlassian released a Questions for Confluence Security Advisory. We recommend that you review this advisory immediately to prevent misuse of this account.
Confluence instance has disabledsystemuser account created automatically.
Solution
The user disabledsystemuser is a Confluence internal user, created by Questions for Confluence app in order to perform specific actions during the migration of Confluence server to Confluence Cloud.
⚠️ It is possible for this account to be present if the Questions for Confluence app had previously been installed and uninstalled. To determine if this account is present, perform a User search for this account. If found, we recommend that you immediately review security advisory Questions for Confluence Security Advisory (released on July 20, 2022If you have any questions about the disabledsystemuser account after reading the advisory, please contact Atlassian support.
Was this helpful?