Permission scheme Jira Premium

BenWade

Hi everyone, 

I am trying to set up permission scheme in Jira. I am watching this video(Alex ortiz) right now.

I found his approach confusing and wrong. 

He suggests:
create groups->assign people to groups->create roles->assign groups to roles->grant permissions to roles. It does not make sense for me. this approach just overcomplicates the whole process. creating roles should be skipped as it is pointless for me.

What I think is the correct approach: Create groups->assign people to group->grant permissions to groups. Am I correct or I am missing smth?

 

 

Dave Mathijs

Hi @BenWade I understand the confusion.

Best practice is to use project roles over groups for more flexibility.

• When you grant a permission to a group, it is valid for all projects associated with that permission scheme.
  • The advantage is that group membership can be done via Active Directory (only when Atlassian Cloud is connected to an identity provider via Atlassian Access)
  • The disadvantage is that you need to be a Site Admin to manage group membership via Atlassian Administration directly.
• On the other hand, when you grant a permission to a project role, you can grant permissions to users/groups by adding them to the project role. This is done per project.
  • The advantage is that the Project Administrator can manage access to their project themselves.
  • The disadvantage is that Project Administrators need to be well aware of this and that you have no control over this as a Site Admin.
• The confusion comes from the fact that you can also add groups to project roles.
• To make things even more complex, you can add default members to project roles as well. These can be users or groups.