AryonForge
License Guardian for Confluence
Reclaim unused Confluence licences safely, with an exception list, approval roles and one-click rollback.
Overview
License Guardian finds inactive and never-logged-in Confluence users, and helps you reclaim their licences using rules you control.
Every exception has a reason, an owner and a review date, so you can always explain why an account was changed, or why it wasn’t. Accounts are suspended, never deleted, and every batch can be rolled back.
Features
Find inactive users
See who hasn’t used Confluence recently, and who has never logged in.
Governed exception list
Protect users, groups or service accounts, each with a reason, an owner and a review date.
Safe mode by default
Every scan starts as a dry run. Live changes need safe mode switched off and a typed confirmation.
Roles and approvals
Give people view, run, approve or exception-management rights. They’re kept separate on purpose.
One-click rollback
Undo any batch and restore accounts, including their group memberships.
Licence breakdown
See how each user became billable, through groups or space permissions.
How to use
Dashboard
Apps → License Guardian
API key, roles and rules
The Setup tab
Rollback
Audit → Action runs
Create an API key
admin.atlassian.com → Settings → API keys (organization admin)
-
Create an organization API key
At admin.atlassian.com → Settings → API keys, create a key and note its expiry date. Atlassian only provides user activity through this key.
-
Connect the key
In Setup, paste the key, click Verify key, choose your organization and directory, then save.
-
Assign roles
Grant Viewer, Operator, Approver or Ignore-List Admin roles to the people who need them. Site administrators have full access automatically.
-
Build your exception list
Add users, groups or name patterns that must never be changed, each with a reason and an owner.
-
Run a scan in safe mode
Review the results. Accounts that look like service accounts are held for review rather than changed.
-
Apply changes
Switch off safe mode and type
EXECUTEto confirm. You can roll back any batch from Audit → Action runs.
Good to know
- Without an API key, the app can still show who holds a licence and how, but not who is inactive.
- Only managed accounts on your verified domains can be measured. Other accounts are never changed.
- A user who logs in during their notice period is automatically kept active.
- Optional notifications can be sent to Slack or Microsoft Teams.
Privacy
- Reads last-active dates, names and email addresses from Atlassian’s Organization API, using the key you provide.
- The API key is kept in Forge’s encrypted secret storage and is never shown back.
- Scan results, settings and an audit log are stored in Atlassian Forge storage.
- Optional Slack or Microsoft Teams notifications are sent only to a webhook an administrator sets up.
Our privacy policy covers every AryonForge app.
What the first version includes
- Detection of inactive and never-logged-in users, with a licence breakdown.
- A governed exception list with reasons, owners, expiry dates and reviews.
- Safe mode, role-based access, audit log and one-click rollback.
Questions about License Guardian for Confluence?
Open a request in our support portal or email support@aryonforge.com. We reply within one business day, Monday to Friday.