Individual vs. group permissions across modules

I'm part of a supporting team for a fairly small Atlassian instance which includes JIRA, Confluence, and Stash. We rely on LDAP for authentication. Since we're limited on licenses, we need a way to not add our entire active directory to Atlassian, but at the same time give project owners/leads in Atlassian the ability to manage users for their project without having access to any other projects.

So far we've explored using groups vs. individual permissions. From what we understand, in order for a project owner/lead to manage a group they must be able to manage all groups for that Atlassian environment. Is that true? This is a deal breaker for us. Alternatively for individual permissions, we can let the project owner/lead manage the permissions, but again without giving the project owner/lead the ability to adjust the global permissions as well it can't work. The workaround has been to create a single global group which we as the supporting team have to individually add users to each and every time someone new needs access. This isn't a scalable solution for us.

Are we missing something? I understand theres another module called Crowd, but not sure this helps us attempt to keep our license usage under control while also allowing project owners/leads the ability to manage their own users.

1 answer

I didn't completly get the question, but my guess is that you are missing the usage of Project Roles.

Define project roles, and use them in the project permissions schemes. Once done, the project admins can decide who is in which role which essentially means they can manage who has permissions to their projects.

https://confluence.atlassian.com/display/JIRA/Managing+Project+Roles

Thanks Renjith for your response. We are using project roles, but when a project admin adds another user, doesn't that user also have to exist in a global permissions group?

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Julia Dillon
Posted Tuesday in Jira

Tell us how your team runs on Jira!

Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...

241 views 1 18
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you