How get the List of Users and Roles for Jira Project Specific

[Nischal B K]

Hi, I am Jira Project Admin (Not Jira Admin) and I need to fetch the list of Users and their roles in a given Jira Project Area. The below is the information which I am looking for and I want this info to fetched from a python Script. Is there any way where I can fetch this Info. Thanks

[Nic Brough -Adaptavist-]

Welcome to the Atlassian Community!

Can you explain what problem you are trying to solve here?  How does a list of people in roles in projects help?  As you don't have the context of what any role can do, it's not realy that useful.

[Nischal B K]

Hi Nic,
This is for the Application Auditing. I am trying to generate a report out of it on Users where a Approver cannot be having a different Role something like that. So, if I get this Info, I can format in Python and put into a proper Report which will help for Auditing. Thanks

[Nic Brough -Adaptavist-]

The role does not tell you what the users in the role can do.  So it won't help you.

[Nischal B K]

Nic,

A Person who is a Jira Project Admin, can go, delete, update anything like for example Comment in a given Jira Card. So, it is super access who can setup the Jira Project Area. A Person who is tagged as Approver, will have the authority to Approve, where as the Team member role will surely not have these. So, is this not enough to tell roles defined to the users will be actually able to perform pre-defined set of operations defined under that ?

[Nic Brough -Adaptavist-]

But you can change those permissions.

[Nischal B K]

Nic,

Yes, I can change. I am not trying to define/edit any roles here. I am trying to ease the work of the Technical Owner who will prepare a Report stating which user has what roles/permission for Auditing.  So, Currently Technical Owner has manually create these reports in the Excel. So, I am trying to automate this process here, where if an API would give me this info, I can format the data extract and put in the report which a Technical Owner would need.

[Nic Brough -Adaptavist-]

The point here is that a list of roles people are in is utterly useless for audting.  It does not tell your auditors who can do what.

Could you go back to your auditors and clarify exactly what they want to audit?  Do they just want a list of people with access (to do anything), or are they wanting to know who can do what?  Do they want a list with tens of thousands of lines like "Bob can edit (most) issues in project X"?