Auditing users and groups

Question

Hello,

I am looking for an audit way to get the following insights:
- Which project settings are changed and by whom.
- Where are users within Jira and what roles do they have within various projects
- What is the best practice for deleting old accounts. Currently we disable the accounts

Maybe someone here have some tips for monitoring users and groups other other tips that is usefull for auditing.

Nic Brough -Adaptavist- · Answer

The data you're asking for is useless for auditing, it doesn't contain the context within which the users can act.

Cleaning up is always a good thing to do, but in this case, it's a hideous amount of work for doing something that is pretty much cosmetic.  A disabled user can't do anything, nor be assigned or otherwise used by other people as new data.

There's nothing wrong with tidying them out of project roles and groups for simplification, but it doesn't change anything in the way Jira works.

At larger places where I was an admin and they were using the internal users, I had a simple weekly or monthly task to go through the recently disabled users and remove them from the groups.  I also had a policy of only ever using roles unless groups were absolutely necessary, which kept that task simple.  Then we asked project owners/admins to remove deactivated users from the project roles whenever they went into their project roles to add/remove people.

Patrick Vijgeboom · Answer

@Nic Brough -Adaptavist- Clean Desk so to speak and for our audits.

Nic Brough -Adaptavist- · Answer

Why do you want to remove accounts (that can't do anything) from a project?

What problem are you solving by removing them from projects?