Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

The Configuration Debt You Are Missing in Jira (DC or Cloud)

I've been working with Atlassian tools for 12 years — supporting customers before, during, and after their migrations. At one client, we spent weeks cleaning up configuration before we could even start the migration. At another, workflows that had worked fine on Data Center suddenly broke in Cloud because they referenced conditions and validators that don't exist in the Cloud environment. Every engagement reveals the same underlying problem: configuration debt that has been accumulating for years, invisible until it blocks something important.

Quick test: how many permission schemes does your Jira instance have? And how many projects actually use each one?

If you've been running Jira for more than a couple of years — Cloud or DC — chances are the numbers don't add up. You have more schemes than projects. More custom fields than anyone can explain. Workflows that look identical but aren't quite.

How orphans are born

Every Jira admin knows the scenario. A team lead puts in a request: "We need a new project." You create it. If you don't explicitly use shared configuration, Jira generates a unique permission scheme, notification scheme, workflow scheme, and screen scheme — all dedicated to that single project.

Two weeks later, the same team comes back: "Actually, we want the same screen layout as Project ABC. And our workflow should work like Team X's."

Fair enough. You reassign the existing schemes from those other projects. The new project now shares their configuration. Problem solved — except those auto-generated schemes from the initial setup are still sitting there. Orphaned. Not used by anything. But nobody deletes them, because nobody is entirely sure what depends on what.

Now multiply that by 50 projects. Over three years. Across multiple admins who each had their own approach.

The experienced admin asks first

In an ideal world, "We need a new project" is never just executed. As a seasoned admin, I always ask: "Do you know an existing project that already works the way you need it?" If the answer is yes — and it usually is — you use shared configuration from the start. No orphans. No cleanup later.

But not every organization has that discipline embedded. And even when they do, there's staff turnover. A new admin who doesn't know the conventions. A rushed request on a Friday afternoon. One shortcut, and you've created five orphaned schemes without realizing it.

It's not just schemes

The same dynamic applies to custom fields. Someone creates "Priority Level" because they didn't find the existing "Priority Rating" field. Both capture the same thing. Now you have two fields, used across different projects, and consolidating them means touching hundreds or thousands of issues.

Statuses multiply the same way. "Done", "Completed", "Closed", "Finished" — I've seen instances with a dozen statuses that all mean the same thing, each wired into different workflows. Merging them requires understanding every workflow transition that references them.

And then there are the inactive users. People who left the company months ago but still appear in role assignments, filter ownership, dashboard sharing, and automation rules. For organizations subject to GDPR or similar regulations, that's not just messy — it's a compliance risk.

The real problem: nobody dares touch it

The configuration debt isn't the hard part. The hard part is that cleaning it up feels dangerous. Every scheme, every field, every status is potentially connected to something. Delete the wrong one, and a project's workflow breaks. Merge two fields incorrectly, and data disappears.

That's why most Jira admins leave it alone. They know the mess is there. They just don't have the tools to safely resolve it.

The diagnostic tools on the Marketplace are good at showing you what's wrong. But there's a fundamental gap between knowing you have 89 unused custom fields and actually being able to delete them safely. Between identifying two duplicate fields and merging them without data loss across 3,000 issues.

That gap — between diagnosis and safe execution — is what I kept running into at every client engagement. I'd build custom analysis scripts, manually cross-reference schemes against projects, and carefully clean up one entity at a time. Every time, from scratch.

So I built the tool I kept needing

Scalpel for Jira scans all seven configuration layers simultaneously — schemes, custom fields, workflows, statuses, roles, groups, and permissions. It identifies what's orphaned, what's shared, and what's risky.

dashboard.png

The Deep Scan goes further. Pick any project and it decomposes the full configuration into 14 layers, mapping every dependency. You see which schemes are shared with other projects, which fields are actually on screens, and what would happen if you removed something.

deepscan_am.pngdeepscan_am_exp.png

And then it does what the diagnostic tools don't: it executes the cleanup. Field Merge consolidates duplicates across thousands of issues with conflict resolution. Scheme management lets you reassign and clean up in bulk. Every action is logged, every change is reversible.

For GDPR requirements, there's a built-in user anonymizer that handles the full offboarding — roles, groups, assignments, mentions.

 

cf_merge.png

Workflow Manager — complementing Atlassian's new Workflow Editor

Atlassian recently shipped a redesigned Workflow Editor — a big improvement for editing individual workflows. But it doesn't answer the admin's first question: which of my 80 workflows are actually in use, which are nearly identical, and which reference fields that no longer exist?

Scalpel's Workflow Manager picks up where the editor stops. Side-by-side structural diffs, complexity scoring, orphan detection, a Rule Inspector that cross-references every condition and validator against your actual configuration, and an interactive Visualizer. Plus AI-powered Status Reduction for workflows with status sprawl.

Atlassian's editor lets you build workflows beautifully. Scalpel tells you which ones to keep, which to merge, and which to retire.

wfm_rec.pngwfm_vis.png
Imagine you have disabled an App your transitions somehow depend on.
This Visualizer will show you instantly the Transition with broken Rule as detected root cause.

I wish i had something like this years before :D 

Built on Forge — your data stays in your instance

Scalpel runs entirely on Atlassian Forge. No external servers, no data leaving your environment. Three editions, starting with a free tier that covers scanning and export.

If you're a Jira admin who knows the configuration debt is there but hasn't had the right tool to deal with it safely — that's exactly why I built this.

Scalpel for Jira on the Atlassian Marketplace

Happy to discuss configuration cleanup strategies or answer questions — drop a comment below.

2 comments

s_gridnevskii
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Champions.
February 27, 2026

Actually we have 2 permission schemes. One is used for active projects, another is used for projects where no one can create issues. We have a strong security policy and we moved to same scheme for all gradually. Before that everyone had access to everything.

C_ Faysal_CFcon_
Atlassian Partner
February 27, 2026

Thanks for sharing! Having consolidated down to 2 permission schemes is already a great foundation – that puts you ahead of many organizations I’ve worked with.
Would be curious – when you locked down those inactive projects, did you also clean up their underlying configurations, or just restrict access?

cheers

Comment

Log in or Sign up to comment
TAGS
AUG Leaders

Atlassian Community Events