Distinguish between Administrator and Creator role in JPD?

[John Bright]

There is clear difference between Creator and Contributor roles in JPD.  However, we don't see the difference between Administrator and Creator  roles in JPD.

@Tanguy Crusson Could you help us answering this quickly.

[Gary Spross · Accepted solution]

@John Bright, "Administrators", like "Creators", would need to be licensed to JPD. This is because of the abilities they would be provided within the project. By default, the "Administrators" role has the following elevated permissions (beyond the "Creators" role):

• Administer project
  • This setting provides access to the project settings area where the user can:
    • Edit access
    • Manage people and permissions
    • Create and delete fields
    • Create and edit automation rules
    • Edit notifications
    • Delete the project
• Delete any idea
• Edit and delete any insight
• Delete any attachment
• Edit and delete any comment
• Publish a view
• Publish a view to anyone with the link
• Edit and delete any view comment

[Manish Arya]

Thanks Gary!!

[John Bright]

@Gary Spross Thanks for quick response.

Here is what that looks to be tricky and not the right behavior in terms of access controls and privileges.

Once a person gets creator access, they can promote themselves as Administrator. This is a risk as the Administrator can even edit access privileges, and also delete the project.

Screenshot 1 with only creator access

Screenshot 2 which let me to promote myself with Administrator access

FYI @Manish Arya 

[Gary Spross]

@John Bright , It sounds like the "Creator" role in your project has the "Administer projects" permissions. To check this, click the "Manage roles" button (on the access page in the project settings) and select the "Creator" role (just click the role (don't click the little "duplicate" symbol to the right). If you're using the default roles provided by Atlassian, you wouldn't be able to change the permissions though...

I just tested with a JPD project having different "Project access" settings and user set in the "Creator" role. I am not able to access the "Project settings" when logged in as that user.

I believe a JPD project requires at least 1 admin, so if you had no admins defined, maybe that is why you were able to access the project settings and update your role?

[Manish Arya]

Thanks Gary, It is working fine with above justification.

[John Bright]

Thanks @Gary Spross 
This answers the question.