In Stash, how can I get a of list of all users with Admin or Sys admin permission?

[Wayne Wylupski]

We need to periodically aurdit the permissions of users on our system.  Is there a way within Stash to find all users with ADMIN or SYS_ADMIN permission?  Or must this be done purely by REST calls?

Thanks,

Wayne

[Tim Crall]

Permission Viewer plugin is helpful for this: https://marketplace.atlassian.com/plugins/com.orbitz.stash.plugins.permission-viewer-plugin/versions#b100000020

[Bob Swift (personal)]

getPermissionList from Stash Command Line Interface (CLI) will provide global permissions and there are a number of related permission actions as well.

"Group","User","Permission"
"stash-users","","LICENSED_USER"
"group1","","PROJECT_CREATE"
"","admin","SYS_ADMIN"
"","automation","SYS_ADMIN"

[Mark McCormack _Adaptavist_]

Wayne,

You probably know that you could at least look up who belongs to certain groups through the Admin console - Groups.

However, that won't guarantee the permissions. You may want to take a look at a paid Marketplace Add-on called ScriptRunner for Bitbucket / Stash. We outline in our documentation how you can update permissions across your Bitbucket Server instance which could easily be changed to a report that simply shows you those instead.

You could also make use of the functionality that sends an email whenever the global permissions change (or variations of events like global permission created, updated or revoked).

I hope you find it useful.