nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

User admin permissions

Yatish Madhav

I have an odd question that I MIGHT'VE asked before but still confused ...

What permission do I give someone that needs to simply manage user passwords, user account MFA only? Not org admin permissions or any extra permission other than that and what they have access to through permission schemes on projects/issues.

Please advise?

Thank you

Yatish

Accepted answers

Adam Jones_zvhy3z

According to the documentation, only the Organization Admins can Manage Passwords and MFA like the two-steps verification.

What are the different types of admin roles? | Atlassian Support

All comments

Anandhi Arumugam _Cprime_

Hi @Yatish Madhav You could try the user access admin permission against the Product that they need access to.

User access admins can perform these organization operations:

View users in your organization at admin.atlassian.com.

For the product they administer, they can:

Make other users product admins.
Invite users, change their product access, and alter groups.

Hope this helps!

unknown

Hi Yatish,

You can grant someone the ability to manage user passwords and multi-factor authentication (MFA) without giving them full organization admin permissions by assigning them the User Administrator role in Atlassian Access.

User Administrators have the following capabilities:

Manage Users and Groups: They can add, remove, and edit users and groups.
Reset Passwords: They can reset user passwords when necessary.
Manage MFA: They can disable two-step verification (MFA) for users who are locked out.

They will not have access to:

Organization Settings: They cannot change organization-wide settings.
Billing Information: They have no access to billing or subscription details.
Security Policies: They cannot modify security policies or SSO configurations.

Here's how to assign the User Administrator role:

Access Organization Administration:
- Go to admin.atlassian.com.
- If you have multiple organizations, select the one you want to manage.
Navigate to the Administrators Page:
- In the left-hand sidebar, click on Administrators.
Add a User Administrator:
- Click on Add administrators.
- Enter the email address of the person you want to assign the role to.
- From the Role dropdown, select User administrators.
- Click Grant access.

Once assigned, the user will have the necessary permissions to manage user passwords and MFA settings without additional access to sensitive administrative areas.

Adam Jones_zvhy3z

Hello Saif,

I'm trying to find the role you are suggesting but I struggle to do so. Is this valid for a Cloud?

Anyhow. I think the correct role is still the Org Admin as the table of abilities suggest the other roles can't do what Yatish is trying to achieve - Org admin only.png

What are the different types of admin roles? | Atlassian Support

Perhaps it will possible to edit the default admin group to remove some permissions?

Adam Jones_zvhy3z

According to the documentation, only the Organization Admins can Manage Passwords and MFA like the two-steps verification.

What are the different types of admin roles? | Atlassian Support

Yatish Madhav

Thanks @Anandhi Arumugam _Cprime_ - unfortunately ... this does not give the needed access. Please see other comments.

Thank you though. Much appreciated

Yatish Madhav

Thanks @Adam Jones - i dreaded to see this as the responses.

Is my frustration on this just that org admin is the only permission ... I would have expected and wanted user access admin to allow this but it does not.

Thank you for this comment though.

Yatish Madhav

Thanks @[deleted]for that response - I'm with @Adam Jones on his response.

Is the User Administrators on Jira Server perhaps? I am looking for improved user admin on Jira cloud here.

I hope Atlassian can see this post and provide some feedback.

Thank you

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud

administration

user-management

admin