Site-Admin & Trusted and Admin Problems !!!

[Y_ Oezl]

Hello Everyone, 

I am suffering because of admin rights and I need your help or if there is no possiblity to arrange settings, please get this as a recommend and bring a new solution. I read almost everything from internet and there is no clear answer from Atlassian or other users !

You have 3 different user roles. Normal users, Trusted? users and Site-Admins and also there is one more global admin. 

I have no problem with normal users. It is simple to understand. 

Now problem is starting here: 

1- Why do we have a "Trusted" user role ? I'm asking this because there is no meaning and I can't restrict their rights and change any settings. I can't revoke their licences. 
I'm assigning a user as a "Trusted", user gets all licences and all admin rights only they can't reach "Payment" options. There is not global Trusted group. I cant remove from there too. 

I'm repeating again : Why is there a meaningless user group ? 

2- Why I can't give permission to other admins. I have 40 site-admins because there is not an other option. As a global admin, I shall give or revoke their rights. Create a group etc.... it is not working perfectly. Especially for Trusted. 

I created a group for Trusted, (Because there is not global group!!!!) and added user to this group and removed the licence option from product access and added Confluence. (for test)

But still user can access to Jira. But I dont want it, however I wanna give to user full access except jira or confluence. User needs to invite new users etc. but cant reach to jira software !! I can't do that. It is unfortunately very annoying !!!

3- I created again a group and gave them full admin rights for Jira and Confluence. But at this time user can't add (can invite) new user to the system. Because user has no access to Atlassian Admin page. 

4- I want to revoke our some rights, especially revoke their licences. I found a solution for it but I'm not sure it will work or not: 

I will remove site-admins group from Product access. May be it works but I'm not sure ! Beucase they are getting licences automatically like trusted user. And it does not matter, I remove them from product access, I cant revoke their licences 


So my real question : 

How can I revoke a licence from Trusted or site-Admins ? 


Best Regards
Yigit. 

[Y_ Oezl]

Finally I found my own solution. 

I will also explain it, may be someone wants to use : 

1. Open your admin page

2. go to "Product Access".

3. remove "site-admins" group from Product and Administration Access

if you check the users, they can reach the admin page but not products.

Best Regards
Yigit. 

[Jack Brickey]

Glad you found your solution!o

[Jack Brickey]

@Y_ Oezl , first you may find this article of use - how-do-jira-permissions-work 

Trusted users is used to allow users to have access to "user management". In some cases you might want to have some users be able to add and remove or deactivate users. But you don't want to give them access to the system configuration options. This also includes billing.

you could certainly give users system administration permissions if you want them to have full access of being able to pretty much change anything. Finally there is the Organization admin which by the fault except the user that starts of the instance. You can add additional Org admins if that's desired.

[Y_ Oezl]

Hi, 

Thanks for answer but this is not answering my real question : 

How can I revoke a licence from Trusted or site-Admins ? 

or one more question : 

Why I cant create myself global group like "administrator" or "site-admins" ? 

[Jack Brickey]

Maybe this will help?

1. go to user management 
2. find user and click on view details 
3. under Roles change them fro Trusted or System to Basic
4. inspect any groups they are in and the associated permissions and update as necessary.

[Y_ Oezl]

hi Jack,

I know, this is working like that but you are missing one point :

users stay as a Trusted or Site Admin, on the other hand they must not access jira or confluence etc. 

let's think simple: 

There is an user and his role at this company adding users to the system however this user cant access to the product(s) 

As a System admin I want to specify user rights ! but Atlassian is blocking me. This method is not working.