Permission to manage users of a certain group

Under the global User management page (i.e. https://company.atlassian.net/admin/users) I'd like certain non-admin users (specifically: project leaders) to be able to add users to/remove users from specific user groups (in this case, their project's user group) but without being a global administrator.

Note: not having a better option I selected JIRA as the affected service, but this is really part of the global Atlassian user management feature, affecting not just JIRA but also Confluence.

Thanks in advance.

2 answers

1 accepted

1 votes

Can't do it (yet).  You're either an admin with access to users and everything else or you're not an admin.

You can do it if you have external management of users (e.g. LDAP or Crowd) because you can use those systems to control it.  But that's not an option on Cloud.

However...

Atlassian are not going to do anything about delegating group management, but they have already fixed

>(specifically: project leaders) to be able to add users to/remove users from specific user groups

Stop using groups and use roles.  Project admins can put any user (or group) into a role in their project.  They don't need global admin to do this, it has no effect on groups and it's really simple.  Forget groups and show your project admins how to add people into roles.

A similar principle applies to Confluence, although that does not have roles - get the space admin to add/remove/update users (or groups) in space admin -> permissions.

Thank you for elaborating this. I've opened a feature request about this, maybe Atlassian will take care: https://jira.atlassian.com/browse/CLOUD-8451 We have a very prudent group management set up and we certainly don't want individual users to be added to anything. Since groups is the link between JIRA and Confluence user management we need to use this to have a single point when a new users needs to be added to a new project (which corresponds to, among others, a project in JIRA and space in Confluence). Using roles instead would be certainly an option but that would mean that now users need to be added to (e.g.) the developer role in JIRA and as a user with individual permissions to Confluence. This is far from the user management we want to apply.

It's always worth asking them to improve stuff. :-)

Ignacio Pulgar Community Champion Nov 22, 2015

I think project administrators cannot add groups to roles, but just users on a one per one basis.

They can add groups to roles as well as users.

0 votes
Micky Caritte Community Champion Nov 30, 2017

Hi,
If you need to empower users and delegate group management to a set of selected users, I've recently published a plugin which might help! It's a brand new plugin so I'm really interested in feedback to give orientations to my roadmap!
You can try it out here, I'll be more than happy to improve it to suit more needs: https://marketplace.atlassian.com/plugins/com.caritteprod.group-ambassadors/server/overview
Cheers

Suggest an answer

Log in or Join to answer
Community showcase
Teodora [Botron]
Published Thursday in Marketplace Apps

Jira Inferno: The Nine Circles of Jira Administration Hell

If you spend enough time as a Jira admin - whether you are managing a single, mid-sized instance, a large enterprise one or juggling multiple instances at once - you will eventually find yourself in ...

247 views 0 11
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot