We want to have a setup for our users which defines 3 levels of accessibility within your Jira software. We call the usergroups “jira”, “keyuser” and “admin”.
Users in the “jira” group should do simple tasks like create issues and move them in the workflow. Users in the group “keyuser” should provide support to the users in the group “jira” on a project level. Create projects and acts as a first level support. Keyusers should neither make any changes to the application itself nor should they access the global permissions page. Users in the group “admin” should administrate the application, access the global permissions page and have access to any function within Jira.
To overcome this problem we tried to integrated a group for Keyusers which has not the global permission “Jira System Administration” but “Jira Administration”. The “admin” group has both global permissions. After some testing Keyusers still have access to the workflow screen and the Global Permissions screen and can make changes that affect everybody.
How can we restrict the access level of keyusers to fit our needs that they support in the projects but are not allowed to make changes in the whole application which affects our company?
