What is the ideal and industry tested way for JIRA permission scheme?

[Amitava Mallick]

Is it advisable to grant permission by groups or permission by roles? What is the format that is followed by majority of the software companies worldwide?

[John Funk]

Hi Amitava,

I don't know that there is an exact or ideal way, but I tend to use Project Roles in my Permission Scheme and the assign individuals and/or groups to the project role. 

[Amitava Mallick]

Even I think going by role is a more secure way of limiting permissions from project to project

[Nolan McConnell]

Agreed to both of these comments.

[Niranjan]

Hi @Amitava Mallick  - If a team owns a group of projects with same team members in a jira instance, then permission scheme can use groups and it can be shared among the projects.

If group management can be delegated to non-admin users, group management is a good option. If the team operates with defined roles, then permission schemes with roles can be effective. Not to forget that we can also add users groups to project roles and that makes project role based permission scheme slightly preferable. Thanks

Regards

Niran

[Nic Brough -Adaptavist-]

Standard recommendation is to use roles over groups.  This delegates the project user maintenance to the project owners,  and you still have the flexibility to put groups into roles to let groups maintained globally have access too.

[Amitava Mallick]

Absolutely agreed. This should be a industry practice across