Say ‘hi’ to our new user admin role

[#1]

What's changing?

Many customers have asked for a new role to allow them more flexibility when delegating administrative permissions to manage users. To address this, we're excited to introduce the user admin role to admin.atlassian.com. It will replace two of our current roles – trusted user and site admin.

The following example shows an organization (Acme), with one site (acme.atlassian.net) and two products: Confluence and Jira Software. A deeper explanation of the user admin role is below, read on!

This example illustrates the existing and new admin roles for an organization with one site and two products.

How does this affect me?

All customers across all plans – Free, Standard, Premium, and Enterprise – will be able to use this new role to delegate user management for admins to specific products.

Existing organization admins (org admins) will have the choice to set their current trusted users and site admins to:

• the current org admin role

• the new user admin role for their existing products

  • additionally, their product access can be chosen for existing products

• no admin role

What do I need to do?

When we migrate an organization to the new admin experience, we’ll provide a workflow for org admins to grant or deny the new user admin role to their current trusted users and site admins.

Before migration, org admins can minimise any impact to their trusted user and site admin users by changing them to org admin or basic user roles earlier. This isn’t necessary to do upfront, but it can help to make your migration more seamless for these users.

This is a high level example of the workflow to migrate site admins and trusted users.

Why is Atlassian doing this?

With the latest changes to admin.atlassian.com, we’re in a better position to build more delegated admin roles, address a lot of our customer feedback, as well as help scale administration for our larger customers.

The biggest piece of customer feedback we get around our admin roles, is how trusted user and site admin roles force users to be granted access to product content – and are therefore paid for/billable – even if they may not use those products. With the new user admin role, these users don’t need to be granted access to the product content – and won’t be counted as a billable user.

What can the user admin role do?

How do I grant the user admin role to a user?

There are three ways to add a user admin.

1. Add the user to a group with the user admin role

You can add the user admin role to a group for one or multiple products, then add users into that group. This will also work for groups synced via SCIM.

2. Grant a user the user admin role

Coming ~September 2022

You can add a user admin role to an existing user, in the same way you would add any product access to them via the user details screen.

3. Use the invite feature

Coming ~September 2022

You can invite a user admin in the same way as inviting any other user.

Note: For those with keen eyes... Bitbucket will not be available as part of this update, we’re working on this as a future release.

When will this happen?

We’re aiming to start rolling out the user admin role around April 2022 and this will continue through to the end of 2022. About a month before we start to migrate an organization, we’ll send an email to the org admins outlining the migration plan.

Tell us what you think

We'd love to get feedback about these changes. Influence the future of Atlassian Cloud and send us a message via the Give feedback link in admin.atlassian.com!

P.S.

The name User Admin could change before launch, but we wanted you to know all this as soon as possible! 😀

[Joseph Blasi]

User admin can't remove users if they have access to an app? So really to remove an user you need org admin?

[Yatish Madhav]

@Kieren thanks for this update, Kieren! I think this helps and has great potential ... One question, if this removes the need for site and trusted admins. Is there possibility in future for custom admin roles at all? Looking forward to the new comments on this ... Thank you

[Kieren]

Hi @Joseph Blasi - Apps don't have a separate user access, their access is derived from the product access. So this new admin role will be able to remove users from any product, regardless of app usage.

@Yatish Madhav - No plans right now. But it is something we'll look into, once we have this fully rolled out.

[Yatish Madhav]

OK thanks for that @Kieren  -  I will be sure to look out for that :) As for this, when can we expect this and the other user/groups UI updates to be rolled out?

[Kieren]

@Yatish Madhav - We'll starting rolling out this new role in April 2022. The other UI updates have been rolling out for a while now, and will continue to do so for a number of months.

If you'd like to know when your specific Site will be updated, you can raise a support ticket with the question, and they'll redirect it to my team.