Global Permissions: The group 'SYSADMIN' is not allowed to be added to the permission 'JIRA User'

John Westlund

I've got an AD group for system administrators that I've given the all the other Jira permissions, but when I try and give the group the "Users" permission I get the error:
The group 'SYSADMIN' is not allowed to be added to the permission 'JIRA User'

I seem to be able to add any other AD group, just not this one. I don't see anything being reported in the logs. Is there setting I need to fix?

The issue appears to be the same as this question.

Nic Brough -Adaptavist-

Jira is trying to stop you from accidentally granting ALL your users complete system admin rights.

• If a group has either of the global permissions that grant "administrate Jira", then they have most, or all admin rights. All administrators can log in, even if they're not in the "Use Jira" permission (usually given to the group "jira users")
• If a group is added to the "Jira user" permission, like "jira users" is by default, then the users in the group can log in.
• The problem here is with new users. When you add new users, they automatically get added to ALL groups that are named in the "jira user" permission.

So... if you could do what you're trying to do, then from the point at which you did it, any new users you add would be granted system adminstration rights. Which is probably a bad idea.

Anyway, there's a really simple fix - don't do it. There's absolutely no point in adding admin groups in there. All the "use jira" permission does is let you log in. All administrators can log in as well. So they already have all the rights you'd be giving them by adding the group.