Trusted User with "add User" permission?

[Stephan Lieb]

Hello Guys,

Is there any way to create a Trusted User, which is able to add Users to a project?
Aim is that Trusted Users can invite external Users to projects.

Site-Administrator is also not possible because there are too much permissions we dont need for this user.

Does someone know this problem or has any solutions for that?

Have a nice day!

[Walter Buggenhout · Accepted solution]

Hi @Stephan Lieb,

Anyone with project administrator permissions in a project can add (existing) users to that project. That user does need any additional permissions outside of the project. Most commonly, that would be your project manager or lead of the project.

Hope this helps! 

[Stephan Lieb]

Hi Walter Buggenhout,

thank you, that works. But it does not seem to be possible for a project admin to give the new user a specifiic group.

Is there a possibility to also assign a group to a new user which has been added by a project admin?

Best Regards,

Stephan

[Walter Buggenhout]

Hi @Stephan Lieb,

You are mixing user management / governance at your organisation level with project level permissions here.

Managing users and groups is part of your site / organisation administrator's job. If your users are managed through an external IDP, even they might be depending on central management of users and groups by a dedicated team within IT. Everything related to managing users and group membership happens there. Jira users can only use the available users and groups to assign them to project roles in their project, nothing more, but also nothing less.

As a benefit and according to best practices, though: if your IT team or site administrators do a good job of managing users and group membership, you (or your project admins) can assign user groups to roles in Jira projects. That way no additional actions are necessary other than letting the admins properly manage those memberships when a user joins or leaves. 

[Stephan Lieb]

Hi @Walter Buggenhout ,

Thank you and you are right that we are trying to mix these topics.

i.E.:
We have a customer with whom we are working since a couple of years a nd have ~10 Projects in our Jira by now. We also have a user group for this customers employees. This user group has access rights in all of this customers projects.

We currently have project admins who are creating and managing these projects. We would now like these project admins to be able to invite new users (our customers employes with whom we may have never worked before / who do not yet have an account in our Jira) to new projects. When our project admins invite a new user, these new user should also have access to all other projects of this customer. Therefore they need to be added to the customers group.

Currently it would be necessary to add a new user to a project ba a project admin and when there is time in our IT department, we would inform them about a new project user, so they can remove the project specific acces from the user and add him to the appropriate group.
-> This is the step we would like to avoid by giving our project admins also the possibility to add users to groups directly.

Best Regards,
Stephan 

[Walter Buggenhout]

I totally understand. That last part:

This is the step we would like to avoid by giving our project admins also the possibility to add users to groups directly.

is unfortunately not possible. Unless you grant your project admins site admin rights, which is something you simply should not do.

[Stephan Lieb]

Yes, we don´t want to give them Site Admin rights thats true.

Thank you very much for your time and your help @Walter Buggenhout !