Modify Global Permission Groups in bulk

[Ste Wright]

Hi All,

Has anyone removed Groups from a Global Permission in bulk?

We have:

• A custom (app-based) global permission, giving access to an app
• ~30-50K groups in the global permission
• Jira Data Center

We'd like to:

• Remove all groups, aside from jira-software-users, and a few other platform-wide groups

^ Has anyone done this before without doing it manually? We have ScriptRunner, if that helps!

Ste

[PD Sheehan · Accepted solution]

Assuming this app global permission are stored like all the other global permissions, you should be able to use https://docs.atlassian.com/software/jira/docs/api/8.13.6/com/atlassian/jira/security/GlobalPermissionManager.html

With Scriptrunner console, print the list of permission keys:

import com.atlassian.jira.security.GlobalPermissionManager
import com.atlassian.jira.component.ComponentAccessor

return ComponentAccessor.getComponent(GlobalPermissionManager).allGlobalPermissions*.key

If you can identify the key for you app that you want to modify, plug it in here:

import com.atlassian.jira.security.GlobalPermissionManager
import com.atlassian.jira.component.ComponentAccessor
import com.atlassian.jira.permission.GlobalPermissionKey

def PERMISSIONKEY_TO_CLEANUP = 'XXX'
def GROUPS_TO_KEEP = ['jira-software-users', 'other-group-name']

def gpm = ComponentAccessor.getComponent(GlobalPermissionManager)
gpm.allGlobalPermissions.each{ perm->
   if(perm.key == PERMISSIONKEY_TO_CLEANUP){
      gpm.getGroupsWithPermission(GlobalPermissionKey.of(perm.key)).each{group->
         if(!GROUPS_TO_KEEP.contains(group.name)){
            gpm.removePermission(perm, group.name)
         }
      }
   }
}

I haven't actually tested this or used this manager before, I just found it by searching the Javadoc... so be careful with it.

[Ste Wright]

Hi @PD Sheehan 

Finally got a chance to test this, it works awesome!

Thanks so much for this!

Ste

[Jatinder Kumar]

Thanks @PD Sheehan , It worked for me as well.