Unable to set password for internal directory user
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Problem
Cannot set password for internal directory user .
Below message appears when trying to click on the change password .
"You can not change your password here because users are managed outside of Confluence."
Diagnosis
Get the directory configuration summary and check the allowed operations for internal directory
The allowed operation can appear empty
Allowed operations: []
You can also ask for the below query for confirming if the required operations are allowed for the internal directory
select * from cwd_directory_operation where directory_id=<internal_directory_id>;
Remember you need to exclude the '<' and '>' from the above query.
Cause
Internal directory does not have the all the allowed operations , this could be lost if user updated the database directly.
The below operations should be allowed to Internal directory
CREATE_ROLE, CREATE_USER, DELETE_ROLE, UPDATE_USER, UPDATE_USER_ATTRIBUTE, DELETE_GROUP, CREATE_GROUP, UPDATE_ROLE_ATTRIBUTE, DELETE_USER, UPDATE_GROUP_ATTRIBUTE, UPDATE_GROUP, UPDATE_ROLE
Resolution
Manually insert each operation in the database table cwd_directory_operation for the internal directory
Remember to take a database backup before you perform any operation on the database and test on a test instance before executing the SQL on production database.