How do I configure the app roles a user gets from my IDP (Entra ID)?

Question

We want to sync all company users to JIRA as a contributor so they can comment on stuff.  We don't want the users to have that role only.

In Azure / Entra, I do not see a way to assign that role to sync over to Atlassian.  How do I make a certain targeted security group only have contribute access in JIRA?

Petru Simion [Simitech Ltd.] · Answer

Hi @John Morrow ,

While using roles in a project is more or less straight forward, envisioning this over an entire enterprise can be challenging.

Roles can be associated directly with users, or indirectly with users, via groups that users are part of.

If you are open to using apps, you can use Roles Dashboard for Jira, an app released by our company.

You can easily depict the way users are assigned to roles either directly or via groups.

You can view the Project -> Role -> User Relationship

And the User -> Role -> Project Relationship

You can search all or filter for specific project(s) and Role(s), export to csv for further analysis.

Regards,

Petru

Walter Buggenhout · Answer

Hi @John Morrow,

Best practice is to link groups from your Entra directory to project roles in Jira. That way, you manage group membership of your users in Entra, but leverage those to unlock certain permissions in Jira.

Hope this helps!