Auditing User Access Rights on Jira

[#1]

Why User Audits in Jira

As part of good governance process, some organisations will conduct audits periodically to ensure only authorised users are given access to their Jira projects. This ensures that project information will not be leaked unnecessarily to people who should not be involved. 

User Audit is a tedious task

For Jira administrators, it is a time consuming and tedious task to generate accurate and up-to-date reports on a regular basis for auditing.

To create a report on user access within Jira for a project, the Jira admin has to cross reference multiple screens

• project roles
• permission schemes
• group memberships

This might not be difficult if we are looking at 1 project only, but it could take some time for administrators to tie all the different permissions into a report with usernames that auditors could use to review and identify what needs to be updated. 

Doing this on a regular basis (e.g monthly or quarterly) for several projects, a lot of time could be wasted unnecessarily on generating these reports manually.

Making life easier with User Auditor for Jira

With this in mind, we developed User Auditor for Jira to automatically collate users access within projects on Jira. With an easy click of a button, Jira admins can easily generate an Excel report which summarises the permissions provided for each user within each project. 

What is inside the report

The report helps to answer the following questions:

• Who has access to the project?

• What kind of access the user have?

• How come the user has access to the project?

Benefits

This report can be circulated to team leaders or managers, allowing them to review team member's access rights and feedback to administrators if changes needs to be made.

With the permission JSON values provided within the report, administrators will be able to tell easily what should be updated if they have to add/remove user permissions for a project. 

It also captures a snapshot of the current permissions at the point in time.

Conclusion

Authorisation management for a project requires continuous effort. So if you are looking to add it to your process, you can refer to our User Guide for more information and grab a trial of our app here. It's available for both Jira Data Center & Jira Server.

If you have any queries or suggestions for improvement, do get in touch at our ServiceDesk to leave a comment. 

😇 The first 10 contributors for additional features will be given a free license 😇

[Yossef Levi]

Nice, but what about cloud version of the tool?

[Sim]

Hi @Yossef Levi ,

I did not get the notification of your comment. Only saw it when I came back to the page today.

The app is only available for Server and DC currently.

We do not have plans for the Cloud version presently. If there are a lot of requests for a Cloud version, we can look into it.