FAQ
- 1 Frequently Asked Questions
- 1.1 Where is Data stored?
- 1.2 What Data is stored?
- 1.3 Is there a Migration tool for CSUM (Server/DC) to CSUMC?
- 1.4 Space Permissions are not carried over for the Group Rename feature
- 1.5 Page security is not inherited for the Group Rename feature
- 1.6 An error occurred whilst loading the app
- 1.7 Adding or Removing Group membership takes a long time
- 1.8 I cannot Bulk upload Membership via CSV like in CSUM Server/DC
- 1.9 I cannot assign Delegated Group management like in CSUM Server/DC
- 1.10 There is no Audit History of changes made
- 1.11 How can i view app logs
- 1.12 I cannot search for a User via Email address
- 1.13 I keep seeing ‘Restricted Access’ in User search or Group membership tables
- 1.14 There are two app listings - which one should I use?
- 1.15 I have an Issue, or I want to get in touch?
Frequently Asked Questions
This section covers a list of FAQ’s regarding CSUM Cloud
Where is Data stored?
CSUM Cloud is a Forge app, and so data is hosted internally by Atlassian using the Forge Storage API: https://developer.atlassian.com/platform/forge/runtime-reference/storage-api/. This platform ensures data is host secure, meaning one customers' data cannot be accessed in another customers instance.
Atlassian manage where apps ‘run’ and where data is ‘stored’, currently multi-region data pinning is not yet released (by Atlassian)
https://community.developer.atlassian.com/t/data-residency-for-marketplace-apps-status-update/63381
https://community.developer.atlassian.com/t/rfc-27-data-residency-for-forge-hosted-storage/73645/12 (access limited for developers)
As a Forge app with no external egress, the data stored in Forge Storage will be automatically transferred by Atlassian during the migration.
What Data is stored?
The storage API is used to store CSUM Cloud Global system configuration. This data is primarily checkbox and input selections for various features.
Data for the Auto Join Groups feature is also stored by saving the selected Groups unique Group ID’s only. Additional Group Data or membership data is not saved for this feature.
Space Admin changes to Groups or Group membership are not stored by CSUM Cloud, as these changes are made to the Groups and memberships stored by Atlassian.
Note: The Delegated Groups feature is not currently released, but when made publicly available, will store Delegation data of Groups and Users inside the Forge Storage API. The data stored will be Unique Group ID’s and Account ID’s, additional data for Groups or Users will not be saved.
Is there a Migration tool for CSUM (Server/DC) to CSUMC?
Currently, there is no migration tool due to the difference in configuration (both storage and functionality).
For example, the Space group pattern in CSUMC is different to the original pattern & prefix/suffix approach. This is primarily due to limitations with Atlassians Confluence Cloud REST API limiting the search functionality of groups - The decision to retain a fully Forge-hosted app infrastructure (where data is not stored or computed outside of the Forge-app scope), the decision to limit space group pattern behaviour was made.
Please refer to the setup guide to help configure CSUMC System Admin Documentation | Installing CSUM app.
Space Permissions are not carried over for the Group Rename feature
Please Note: At present, all Space Permissions from the old Group are transferred except the Delete Mail permission.
If your Group being renamed has this Space Permission, you will need to manually add it to the renamed group under Confluence Space Permissions page.
If Space Permissions are not being carried over, this may be due to current Confluence plan. When on the Free Plan, it is not possible to alter Space Permissions. This means that Customers on the Free plan cannot rename a group and automatically transfer Space Permissions from the existing Group.
Page security is not inherited for the Group Rename feature
The existing CSUMCloud group rename feature is limited to copying Space Permissions. Additional page security for multi-tier space content is not copied over.
System Admins can use the build in ‘Edit group name’ feature to rename groups. See https://community.atlassian.com/t5/Atlassian-Access-articles/Org-admins-can-now-rename-groups-in-cloud/ba-p/2276321 .
We have an internal ticket https://thepluginpeople.atlassian.net/browse/CSUMC-98 about this, but the latest update indicates that no API is available to access this edit group name behaviour. Due to this, CSUMCloud cannot access this endpoint, which is why the limited group rename feature can only transfer space permissions.
An error occurred whilst loading the app
If you are seeing this message, there may also be an additional error message:
User did not have access to specified resource(s)
This error can occur when Admin access Keys (https://support.atlassian.com/confluence-cloud/docs/bypass-access-restrictions-on-a-page-with-admin-key/ ) are granted to accounts that do not have Space Admin permissions inside a given space.
At present, the only solution available is to grant the user(s) you wish to access CSUMCloud within this space the Space Admin permission, allowing app requests to be made.
If you are granting permissions using Admin Access keys, the issue may still occur. In order to ensure permission grants are applied correctly, please configure them through the Space Permissions page. See Privileged User Permissions for more information.
Could not retrieve space details using context space key
This error can occur when the Space context provided by the Forge Platform does not correlate to a valid Space in your site.
In this case, we suggest reaching out to support if you are experiencing this error, clearly indicating the Space Key and Confluence site used to access the app.
Adding or Removing Group membership takes a long time
Currently, the Confluence Cloud REST API allows CSUM Cloud to make a request for a single User to be Added to, or Removed from, a single group.
Because of the inability to add or remove Users in bulk, these operations with large Group membership numbers can take longer than expected. There are plans for the Confluence Cloud REST API to be expanded to allow bulk User operations. When this is complete, CSUM Cloud can utilise the API to improve performance.
Our team is investigating improvements to bulk user membership operations to run in the background. https://thepluginpeople.atlassian.net/browse/CSUMC-105
I cannot Bulk upload Membership via CSV like in CSUM Server/DC
Currently this feature is not yet available in CSUM Cloud. We are looking into implementing this feature, and have an ongoing ticket for this feature: https://thepluginpeople.atlassian.net/browse/CSUMC-19
Additionally, until the changes for Confluence Cloud REST API have been made to allow bulk User Add/Remove actions, this feature would also be impacted by performance.
I cannot assign Delegated Group management like in CSUM Server/DC
Currently this feature is not yet available in CSUM Cloud. We are looking into implementing this feature, and have an ongoing ticket for this feature: https://thepluginpeople.atlassian.net/browse/CSUMC-3
There is no Audit History of changes made
CSUM Cloud does not currently offer an Audit History of changes made to Groups or Group Membership. These changes can be seen within:
The Confluence Audit Log: https://support.atlassian.com/confluence-cloud/docs/view-the-audit-log/
App logs:https://developer.atlassian.com/platform/forge/access-app-logs/#access-app-logs
Our team is looking into ways of auditing historic operations performed within a Space. https://thepluginpeople.atlassian.net/browse/CSUMC-105
How can i view app logs
App logs are not exposed to customers, but can be requested from support. Please view the Atlassian app log page for further information on retrieving app logs: https://developer.atlassian.com/platform/forge/access-app-logs/#access-app-logs
Log access must be enabled for the app to enable our support team to view the latest logs when assisting with problems. If you have disabled log access, we may ask you to re-enable and reproduce the error.
I cannot search for a User via Email address
We have an open ticket for this https://thepluginpeople.atlassian.net/browse/CSUMC-25 , however the limitations with Confluence’s CQL search means searching by name is the only option currently available.
I keep seeing ‘Restricted Access’ in User search or Group membership tables
When CSUM Cloud cannot find a Users Email, it will display a lozenge in the group memberships table indicating ‘Restricted Email Access’. This notice is also displayed in the user search field for add/remove group membership.
For the user to allow their Email to be visible, the User must change their Email visibility setting from ‘Only you and Admins’ to ‘'Everyone’. Without this, Installed Apps (CSUMCloud) cannot access user Emails.
There are two app listings - which one should I use?
You should be using the cloud version of the existing listing: https://marketplace.atlassian.com/apps/133/custom-space-user-management-csum-server-dc?hosting=cloud&tab=versions.
Please view https://thepluginpeople.atlassian.net/wiki/spaces/CSUMC/pages/4220846098 for further information if you are an existing customer using the sunsetted CSUM-Cloud app (Your app will display a notification banner indicating this if you are affected).
I have an Issue, or I want to get in touch?
Your Confluence instance is hosted by Atlassian. Questions relating to support and availability of your instance should be directed to support.atlassian.com
For questions relating to support and availability of CSUM Cloud should be directed to support@thepluginpeople.com , or via our Customer Support Portal