Project admins add LDAP users to their projects users role, but they are not members of jira-users

[Sri Vulli]

We have 1200 LDAP users who have access to Jira Service Desk as customers. 

Our Project admins add their project team members to their projects users role, but these team members are not members of jira-users. We have to get our Jira admin to provide group access to jira-users and thus let them get access to Jira.

Is there a way to automate adding the user to jira-users group to give the Jira license when a user is added to a projects user role?

[Andy Heinzer]

Project administrators are not expected to be able to control which users have application access.  They simply do not have the permissions to be able to change this. 

However if the user was a Jira administrator OR a Jira system administrator, then they could manage group memberships in Jira's internal user directory.  In which case, instead of manually adjusting project role members, then could then both add that user in to a group that grants application access as well as a group that grants them a role in that specific project.

I can't see a way in which you could even attempt automate this without a user account that has the jira administrator global permission.