Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To preserve users, permissions, and history when moving Jira and Confluence from Server or Data Center to Atlassian Cloud, plan each product separately, align shared identities by email, review group access, migrate users and groups before projects or spaces where practical, and test the move before production cutover. Then check the Cloud results against the source and confirm that each required app has its own supported migration path.

What should you prepare before migrating?

Jira and Confluence have separate Cloud Migration Assistants and pre-migration checklists. Treat them as coordinated but independent migrations: prepare each source and Cloud destination, and use the live checklists for current supported versions, limits, and requirements.

Start with an inventory of active users, groups, external directories or identity providers, accounts shared between Jira and Confluence, and groups already present in Cloud. Synchronize external directories and resolve duplicate or invalid email addresses before moving content. Atlassian’s Confluence pre-migration checklist and Jira Cloud Migration Assistant pre-migration checklist cover these and other preparation areas, including permissions, apps, backups, and test migrations.

Use the same email for shared users

Cloud accounts are matched by unique email address. If someone exists in both source applications, make sure the Jira and Confluence records use the same email so their content can map to the same Cloud identity. Review identity-provider configuration and sync state as part of that cleanup. See Atlassian’s guidance on Confluence user and group migration and Jira user and group migration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Compare groups before linking them

Compare source and Cloud group names, memberships, and intended access; a matching name does not prove that the groups contain the same people. Jira can link a source group to an existing Cloud group with the same name, and Atlassian warns that this can cause permission escalation. In Confluence, a space permission that refers to a group absent in Cloud may not migrate. Create or migrate the necessary groups and check their effective access before and after the move.

How should you choose the user migration scope?

Choose scope based on who needs access and whose references must remain attached to the content being moved. The assistants offer different scope choices; the options described by Atlassian are summarized here.

Product Documented scope choices What to consider
Jira All users and groups, or users and groups related to selected projects. The assistant also offers options to include project-role assignees and members of included groups. A project-only selection can omit people whose references or access needs fall outside the selected projects. Review the assistant’s available inclusion options against your required scope.
Confluence All directory users and groups, or users related to selected spaces. Users related to a space can include people with space access, page creators, commenters, or people mentioned there. Consider users tied to calendars or other related content when selecting scope.

Atlassian recommends migrating users and groups before Jira projects or Confluence spaces so later migrations can link references such as mentions, assignees, and comments. See Migrate users and groups before other data. Migrating a user record does not necessarily grant that person product access in Cloud, so include group and application access in the plan.

What is a safer migration sequence?

  1. Inventory identities and access. List source users and groups, directory sources, shared Jira and Confluence accounts, destination accounts, and existing Cloud groups. Resolve duplicate or invalid emails and compare group membership and intended permissions.
  2. Prepare each product. Work through the current Jira and Confluence pre-migration checklists independently. Coordinate the shared identity plan across both products, including matching emails for people present in both source databases.
  3. Migrate users and groups first where practical. In each assistant, select all users and groups or the subset required by the projects or spaces in scope. Check inclusion options for people assigned to project roles, group members, or linked to related content. Review product access separately from whether the user record migrated.
  4. Run a trial in a test or staging Cloud site. Atlassian strongly recommends a Confluence trial before final migration and includes test migration in both product checklists. Keep the production Jira Cloud Migration Assistant version the same as the version used for the test, as Jira’s migration guidance advises.
  5. Compare trial results with the source. Use a representative sample of directory types, shared accounts, inactive or deleted users, group-based permissions, restricted projects or spaces, comments, mentions, and app-dependent data. This sample is a practical validation approach, not a universal Atlassian test specification.
  6. Run production migration and validate the agreed scope. Check identities, access, references, history, and app results in Cloud before treating the move as complete.

Atlassian’s Confluence Cloud Migration Assistant instructions state: “We strongly recommend doing a trial run of your migration to a test or staging site before running your final migration.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How do you check users, permissions, and history after the move?

Compare the destination with the source and the migration scope you agreed before the move. Check concrete records rather than relying only on an assistant’s completion status.

  • Users: Confirm intended people resolve to the right Cloud accounts and that mismatched emails or identity-provider identifiers have not left duplicate or incorrectly mapped identities.
  • Groups and permissions: Confirm expected groups and memberships exist. Test representative Jira project and Confluence space access, including restricted areas, and check that access has not broadened unexpectedly or disappeared because a referenced group was missing.
  • Content references and history: Inspect representative Jira issue owners, assignees, comments, mentions, and issue history, as well as Confluence page creators, comments, mentions, and page history. Confluence’s related-user migration is intended to keep mentions, comments, and page history active; Jira’s migration scope includes issue history. See Confluence user migration details and Jira data migration scope.
  • Applications and integrations: Verify each required app’s data and connected workflows in Cloud using the app vendor’s instructions.

What can the migration assistants miss?

People outside the selected scope

A selected-space or selected-project migration may not include every person referenced by related content. For example, Confluence’s user-scope guidance flags Team Calendars invitees who are not linked to selected spaces. If those people must remain available, consider all directory users or include the related spaces they depend on. Jira’s scope choices include options for project-role assignees and members of selected groups.

Marketplace app data

A successful core data transfer does not establish that Marketplace app data migrated. Atlassian says Jira app data needs an automated migration path from the app partner; Confluence app migration is available for apps assessed as needed where the vendor provides a path. Confirm the approach with each app publisher and validate that app’s data separately. See what gets migrated with the Jira Cloud Migration Assistant.

Changed Jira entity IDs

Jira entity IDs change in Cloud. If scripts, integrations, exports, or downstream systems rely on old IDs, plan to update them or use Atlassian’s ID-mapping API. The migration guidance identifies that API but does not provide its procedure in the linked scope page.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
The Hard Rock Book
  • Used Book in Good Condition
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Which migration scope is the better fit?

There is no universal best scope: broader inclusion can help preserve identity references, while narrower selection requires more careful checks for people and permissions outside the chosen projects or spaces.

Choice Advantage Risk to manage
All directory users and groups Reduces the chance that a person referenced outside selected content is omitted. Atlassian notes that migrating all users can be faster than checking only a subset against spaces. Review resulting memberships and product access; migrating records alone does not ensure appropriate Cloud access.
Users and groups related to selected projects or spaces Limits migration to the selected content’s related population. Check for people tied to other content, project roles, group membership, or Confluence calendars who may not be captured by the selection.

Atlassian also notes that pre-migrating users, groups, and attachments can reduce downtime. Balance operational speed against identity completeness, permission safety, required app coverage, and the ability to validate the selected scope.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.