nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

List of all groups and where they are used

Neha Pande

Need A way to extract all groups and there usage through SQL

Accepted answers

All comments

Nic Brough -Adaptavist-

I'd suggest asking your admins for a more human answer.

I can think of around 30 different SQL queries that, while "accurate", won't tell you what you really need to know about access.

Instead of giving you a "Microsoft" answer (technically accurate, but completely useless), could you tell us what you are trying to do? What question are you trying to answer, and why?

Neha Pande

Hi Nic,

I am currently an Intern and trying my hands in every Area of JIRA, I tried my hands in JIRA, EasyBI, BigPicture, so My JIRA admin gave me a assignment to figure out where all the groups are getting used in JIRA for Ex.

Permission schemes
Any other shares:

Filters
Dashboards
Agile Boards
Tempo
eazyBI

I want to extract the list.

I found this link but I have to insert all the roles and run separate query for for each which kind of make it complicated.

https://confluence.atlassian.com/jirakb/how-to-identify-group-usage-in-jira-441221524.html

Need some work around for this.

Matt Doar_tzgiej

A manual way is to look at all your permission schemes and notifications schemes for the groups they use. Then go through all project roles and do the same. Groups can also be used for sharing of filters and dashboards. Finally check all workflows for group usage in the XML. Very tedious!

I would love to see a plugin that does all this for admins

Neha Pande

Hello Matt I want an SQL query for that since my admins want to automate the process

Matt Doar_tzgiej

Me too!

Nic Brough -Adaptavist-

Right, that's a significant project in itself, even in a small Jira.

Your list is a start, but you also need to look at

Fields
Filters referring to fields (of many types)
Notifications
Subscriptions
Workflows (conditions, validators, post functions, triggers)
Integrations (application links for example)
Outgoing calls
And
And
And

As you can tell, this is not a simple task. However, it is generally of limited use too, and hence pretty much a massive waste of time.

Go back to the real question. "I want to know where groups/users are used" is not the real question. Why do you want to know where they're used? What's the point? Why does it matter?

Neha Pande

The JIRA admin wants it for tracking process and she wants to automate the process instead of looking into JIRA manually

Alexander_Grimstad

This article comes on the top of google queries for "jira find where group is used", and does sadly not contain the answer from other similar questions.

So I'm therefore pointing out that there is a knowledge-base article for it: https://confluence.atlassian.com/jirakb/how-to-identify-group-usage-in-jira-441221524.html

Nic Brough -Adaptavist-

Problem is that article doesn't reference the complexities or how to actually answer the question. That's why Google lands here - it explains it properly.

Alexander_Grimstad

Your answer explains the complexity on the details and nuances in the question -- I wholeheartedly agree.

The kb-article gave me the answer I needed, based on a very similar question to this community post, nevertheless

Todd Lair

I usually never comment on forums but can attest that this post is worthless and I don't understand why the question is so hard. All I want to see is the all the permission schemes (and potentially others schemes like notifications) that have a reference to the group in question. Inside the JIRA admin all you see is that the group in question has no product access which is flat garbage because the users access the product every day and are on multiple permission schemes. My use case might be far less complex than ones above, but maybe simplicity is a good place to begin?

Nic Brough -Adaptavist-

And fields, and the configuration of dashboard gadgets, and use in saved filters, and, and, and...

Rinaldi James Michael

(COMMENT DELETED)

Benjamin Horst

Hello @Rinaldi James Michael , thanks a lot for sharing your work. The scripts saved me a lot of our time.

Rinaldi James Michael

(COMMENT DELETED)

Nic Brough -Adaptavist-

Do these scripts cover all the aspects listed before?

Rinaldi James Michael

(COMMENT DELETED)

Rinaldi James Michael

Deleted my older comments. Sharing a comparatively better solution now.

SELECT
DISTINCT(group_name) as "Jira Group Name",
CASE
WHEN TABLE1."Group" = group_name THEN 'Used'
ELSE '-'
END AS "Projects Roles",
CASE
WHEN TABLE2."Group" = group_name THEN 'Used'
ELSE '-'
END AS "Global Permissions",
CASE
WHEN TABLE3."Group(s)" = group_name THEN 'Used'
ELSE '-'
END AS "Custom Fields",
CASE
WHEN TABLE4."Group" = group_name THEN 'Used'
ELSE '-'
END AS "Shared Dashboards",
CASE
WHEN TABLE5."Group" = group_name THEN 'Used'
ELSE '-'
END AS "Shared Filters",
CASE
WHEN TABLE6."Group" = group_name THEN 'Used'
ELSE '-'
END AS "Filter Subscriptions",
CASE
WHEN TABLE7."Group" = group_name THEN 'Used'
ELSE '-'
END AS "Board Administrators",
CASE
WHEN TABLE8."Group" = group_name THEN 'Used'
ELSE '-'
END AS "Application Access",
CASE
WHEN TABLE9.groupname = group_name THEN 'Used'
ELSE '-'
END AS "Permission Scheme",
CASE
WHEN TABLE10.groupname = group_name THEN 'Used'
ELSE '-'
END AS "Permission Scheme Granted to Group",
CASE
WHEN TABLE11.actionlevel = group_name THEN 'Used'
ELSE '-'
END AS "Comment Visibility",
CASE
WHEN TABLE12.sec_parameter = group_name THEN 'Used'
ELSE '-'
END AS "Issue security level",
CASE
WHEN TABLE13.grouplevel = group_name THEN 'Used'
ELSE '-'
END AS "Work Log visibility",
CASE
WHEN TABLE14."JQL" LIKE CONCAT('%',group_name,'%') THEN 'Used'
ELSE '-'
END AS "Saved Filters (JQL)",
CASE
WHEN TABLE15."VALUE" LIKE CONCAT('%',group_name,'%') THEN 'Used'
ELSE '-'
END AS "Automation Rules",
CASE
WHEN TABLE16."Descriptor" LIKE CONCAT('%',group_name,'%') THEN 'Used'
ELSE '-'
END AS "Workflows"


FROM cwd_group cg





LEFT JOIN
(
SELECT
DISTINCT(pra.roletypeparameter) AS "Group"
FROM
projectroleactor pra
LEFT JOIN projectrole pr ON pra.projectroleid = pr.id
LEFT JOIN project p ON pra.pid = p.id
WHERE
pra.roletype = 'atlassian-group-role-actor'
)
as TABLE1 ON TABLE1."Group" = cg.group_name






LEFT JOIN
(
SELECT
DISTINCT(gp.group_id) AS "Group"
FROM
globalpermissionentry gp
)
as TABLE2 ON TABLE2."Group" = cg.group_name







LEFT JOIN
(
SELECT
DISTINCT(cfv.stringvalue) AS "Group(s)"
FROM
customfieldvalue cfv
LEFT JOIN customfield cf ON cf.id = cfv.customfield
LEFT JOIN jiraissue ji ON cfv.issue = ji.id
LEFT JOIN project p ON ji.project = p.id
WHERE
cf.customfieldtypekey IN (
'com.atlassian.jira.plugin.system.customfieldtypes:grouppicker',
'com.atlassian.jira.plugin.system.customfieldtypes:multigrouppicker'
)
)
as TABLE3 ON TABLE3."Group(s)" = cg.group_name









LEFT JOIN
(
SELECT
DISTINCT(shp.param1) AS "Group"
FROM
sharepermissions shp
LEFT JOIN portalpage pp ON shp.entityid = pp.id
WHERE
shp.entitytype = 'PortalPage'
AND shp.sharetype = 'group'
)
as TABLE4 ON TABLE4."Group" = cg.group_name






LEFT JOIN
(
SELECT
DISTINCT(shp.param1) AS "Group"
FROM
sharepermissions shp
LEFT JOIN searchrequest sr ON shp.entityid = sr.id
WHERE
shp.entitytype = 'SearchRequest'
AND shp.sharetype = 'group'
)
as TABLE5 ON TABLE5."Group" = cg.group_name










LEFT JOIN
(
SELECT
DISTINCT(fs.groupname) AS "Group"
FROM
filtersubscription fs
LEFT JOIN searchrequest sr ON fs.filter_i_d = sr.id
)
AS TABLE6 ON TABLE6."Group" = cg.group_name






LEFT JOIN
(
SELECT
DISTINCT(ba."KEY") AS "Group"
FROM
"AO_60DB71_BOARDADMINS" ba
LEFT JOIN "AO_60DB71_RAPIDVIEW" rv ON ba."RAPID_VIEW_ID" = rv."ID"
WHERE
ba."TYPE" = 'GROUP'
)
AS TABLE7 ON TABLE7."Group" = cg.group_name





LEFT JOIN
(
SELECT
DISTINCT(group_id) AS "Group"
FROM
licenserolesgroup
)
AS TABLE8 ON TABLE8."Group" = cg.group_name





LEFT JOIN
(
SELECT
DISTINCT(SP.perm_parameter) AS GroupName
FROM
schemepermissions SP
INNER JOIN
permissionscheme PS ON SP.scheme = PS.id
WHERE
SP.perm_type = 'group'
)
AS TABLE9 ON TABLE9.groupname = cg.group_name





LEFT JOIN
(
SELECT
DISTINCT(SP.perm_parameter) AS GroupName
FROM
schemepermissions SP
INNER JOIN
permissionscheme PS ON SP.scheme = PS.id
WHERE
SP.perm_type = 'group'
)
AS TABLE10 ON TABLE10.groupname = cg.group_name






LEFT JOIN
(
select DISTINCT(ja.actionlevel)
from jiraaction ja
)
AS TABLE11 ON TABLE11.actionlevel = cg.group_name







LEFT JOIN
(
select DISTINCT(sec_parameter)
from schemeissuesecurities sis
where sis.sec_type = 'group'
)
AS TABLE12 ON TABLE12.sec_parameter = cg.group_name




LEFT JOIN
(
select DISTINCT(wl.grouplevel)
from worklog wl
) AS TABLE13 ON TABLE13.grouplevel = cg.group_name





LEFT JOIN
(
SELECT
DISTINCT(reqcontent) AS "JQL"
FROM
searchrequest
) AS TABLE14 ON TABLE14."JQL" LIKE CONCAT('%',cg.group_name,'%')





LEFT JOIN
(
select "VALUE" from "AO_589059_RULE_CFG_COMPONENT"
) AS TABLE15 ON TABLE15."VALUE" LIKE CONCAT('%',cg.group_name,'%')




LEFT JOIN
(
SELECT
jw.descriptor AS "Descriptor"
FROM
jiraworkflows jw
) AS TABLE16 ON TABLE16."Descriptor" LIKE CONCAT('%',cg.group_name,'%')