How can I use the rest api to get a list of ALL of a users permissions

Question

So far I see I can use permissions schemes to get permissions that are given to groups and then query which users are in that group. However how am I supposed to track permissions on application roles or to types like "Project Lead". For example, when I query permission schemes there's no way for me to see which application role gets that scheme. Same for which users have 'Project Lead' type permissions. Any advice?

Marios Marneros · Answer

@Max Brooks you are right, users can get permissions from being in a group as well. The above is for being a member of a role in a project. You will need to get the permission schemes, look at the roles and groups and then get the members of those roles and groups. Keep in mind that the roles are created globally but are specific to a project, group membership is set instance wide.

Max Brooks · Answer

@Marios Marneros Are these the projects the only source of permissions for a user? can't they also receive direct permissions outside of a project via a group or role?

Marios Marneros · Answer

Hey @Max Brooks , welcome to the Atlassian Community!

You can use the API to get the project role membership. This will give you a list of users that are members of a specified role in a specified project.

You will need the project id and role id. Here is the API documentation - https://developer.atlassian.com/cloud/jira/platform/rest/v2/api-group-project-roles/#api-rest-api-2-project-projectidorkey-role-id-get

There are other options in the API documentation as well!

Let me know if you have any other questions regarding this. If the above was helpful please don't forget to accept the answer!