Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements

  • Global
  • Personal

Recognition

  • Give kudos
  • Received
  • Given

Leaderboard

  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage
Highlighted

Jira Service Desk Admins

We recently integrated Jira Service Desk to an existing Jira Software Instance. We noticed the existing Jira admins for Jira software automatically became admins for Jira Service Desk - only existing admins could create projects and other admin functions.

Is there a way to separate this admin functions so one group completely administer Jira Service Desk while the Jira Software admins only manage/administer Jira software?

1 comment

Ismael Jimoh Community Leader Mar 07, 2020

Hi @Stephen O. Haruna 

With regards your request, please note that at the bottom, the applications are both based on JIRA Core which means that when a user has admin privilege in one application, they will have admin privilege to do some basic configuration across both applications.

For example, your JIRA Software administrators will still be able to create JIRA Service Desk (SD)projects, however without a JIRA Service Desk license, they will not be able to configure SD specific settings.

If you must separate them, then do the following:

  1. Create a group jira-software-admins
  2. Create another group jira-service-desk-admins
  3. Add the users who need each role to the respective groups.
  4. Go to your Global Permission page and add the groups to the Administer JIRA permission.
  5. Go to the Application Access page and add the groups to the corresponding Applications(don't make them default).
  6. Go back to the impacted administrators and adjust the groups they belong to.

As mentioned again, this does not mean JIRA software admins cannot create service desk projects and vice versa. They just will not be able to perform functionalities that are tied to the specific applications they have access to.

Cheers.

Taranjeet Singh Community Leader Mar 09, 2020

@Stephen O. Haruna I agree with suggestions from @Ismael Jimoh . Did you try them and get your issue resolved?

Thanks for your responses.  Following the suggestions, I was only able to deny JSD admin privileges and both groups still have "some" JSW admin privileges.

See my implementation below:

I created 3 projects: A, B, and C with 3 users.

A - JSD -----> user1 is site owner. Added userb and userc 

B - JSD ---> basic, can access both JSW and JSD, Jira-software-admin group - userb

C - JSW ......> basic, can access both JSD & JSW, Jira-service-desk-admin group - userc

Only userb can administer JSD projects. userc does not have admin rights in JSD. 

However, both users b and c still have admin privileges in JSW.

Also with this implementation, both users do not have certain system admin rights like view users with "administer Jira" permissions or view "Product access" settings. 

My use case involves having only the specific groups administer their products i.e jira-software-admins should be the sole admins for jira software and jira-service-desk admins the same privileges for jira service desk. I might be missing something and i haven't been able to figure this out. 

group.PNGder.PNGpa.PNG

Ismael Jimoh Community Leader Mar 10, 2020

Hi @Stephen O. Haruna 

Please see my quote here:

As mentioned again, this does not mean JIRA software admins cannot create service desk projects and vice versa. They just will not be able to perform functionalities that are tied to the specific applications they have access to.

An administrator of the application will still be able to administrate other projects(irrespective of type). The problem comes when they want to make changes that impact specific functionalities tied to the application. 

For example, as a JSW admin, you should not be able to configure things like:

  • Request type
  • Customer permissions,
  • Portal settings to name a few.

These functionalities are tied to just the JIRA SD administrators since you do not have a valid license.

Likewise, it will likely be near impossible for a JIRA SD agent to configure a board because this is tied to JSW.

All basic functions are still tied to the JIRA core so if you have the administer JIRA permission, you can perform these. The restrictions only start setting in when you attempt to configure functionalities that are tied to the license you have.

Hope this clarifies things.

Cheers.

Like Stephen O. Haruna likes this

That settles my queries. Thanks for your insights and support.

Comment

Log in or Sign up to comment
TAGS

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you