Auditing User Access Rights on Jira

User Auditor for Jira.png

Why User Audits in Jira

As part of good governance process, some organisations will conduct audits periodically to ensure only authorised users are given access to their Jira projects. This ensures that project information will not be leaked unnecessarily to people who should not be involved. 

 

User Audit is a tedious task

For Jira administrators, it is a time consuming and tedious task to generate accurate and up-to-date reports on a regular basis for auditing.

To create a report on user access within Jira for a project, the Jira admin has to cross reference multiple screens

  • project roles
  • permission schemes
  • group memberships

This might not be difficult if we are looking at 1 project only, but it could take some time for administrators to tie all the different permissions into a report with usernames that auditors could use to review and identify what needs to be updated. 

Doing this on a regular basis (e.g monthly or quarterly) for several projects, a lot of time could be wasted unnecessarily on generating these reports manually.

 

Making life easier with User Auditor for Jira

With this in mind, we developed User Auditor for Jira to automatically collate users access within projects on Jira. With an easy click of a button, Jira admins can easily generate an Excel report which summarises the permissions provided for each user within each project. 

Single Project Scope.png

 

What is inside the report

The report helps to answer the following questions:

  • Who has access to the project?

  • What kind of access the user have?

  • How come the user has access to the project?

auditj awesome report.png

Benefits

This report can be circulated to team leaders or managers, allowing them to review team member's access rights and feedback to administrators if changes needs to be made.

With the permission JSON values provided within the report, administrators will be able to tell easily what should be updated if they have to add/remove user permissions for a project. 

It also captures a snapshot of the current permissions at the point in time.

 

Conclusion

Authorisation management for a project requires continuous effort. So if you are looking to add it to your process, you can refer to our User Guide for more information and grab a trial of our app here. It's available for both Jira Data Center & Jira Server.

If you have any queries or suggestions for improvement, do get in touch at our ServiceDesk to leave a comment. 

 

😇 The first 10 contributors for additional features will be given a free license ðŸ˜‡

2 comments

Comment

Log in or Sign up to comment
Yossef Levi
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
October 21, 2021

Nice, but what about cloud version of the tool?

Like • # people like this
Hua Soon SIM _Akeles_
Atlassian Partner
December 21, 2021

Hi @Yossef Levi ,

I did not get the notification of your comment. Only saw it when I came back to the page today.

The app is only available for Server and DC currently.

We do not have plans for the Cloud version presently. If there are a lot of requests for a Cloud version, we can look into it.

TAGS
AUG Leaders

Atlassian Community Events