Conquering Jira Permissions

Ben Thoma
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
November 19, 2019

On Tuesday, November 19, 2019 we hosted an Atlassian University Live webinar to cover the topic of Jira Permissions.

You can learn more about Jira Permissions—including topics not covered in the webinar—in this free, complete Skillbuilder course.

Please use this Community forum to ask any questions about the Skillbuilder course or Jira Permissions for your organization.

3 comments

Comment

Log in or Sign up to comment
Vickey Palzor Lepcha
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
November 25, 2019

Thank You.

Like Ben Thoma likes this
Nick Fannin December 9, 2019

Hi @Ben Thoma  and Team,
Thank you for the great webinar on 11/20.  A few weeks after the course, it became very apparent my company with over 250 and (growing quickly) jira users needs a better permission scheme.  We have about 20 distinct business units (with some cross over) that will be using Jira and Confluence with a corporate oversight over them.


I started mapping this out and wanted to ask for a critique of my approach based on the webinar content.


As you aptly pointed out several times, I want to distribute to the the lowest level possible the management of projects, and even people and roles if possible.  I intend to limit groups to just be based on permission scheme differences: Site Admins, Jira Admins, Confluence Admins, Jira Users, Confluence Users.  Eventually, Jira Users will only be able to view most projects with project roles dictating additional permissions.


Project Admins will add Jira users themselves to the appropriate roles for the proper project permissions.


I also eventually plan on rolling out SSO/LDAP.


This above approach is moving away from a current approach where individual business units have one or several of their own groups defined.  This of course needs to be managed at the site admin level with group permissions, which is not ideal.  One question here, how can I keep users organized based on those business units if not with groups?


I'd love your thoughts on my approach.  Is there anything I may have missed or any advise you could give me?


Thank you very much, and these webinars have been very useful.
-Nick Fannin

Like Ben Thoma likes this
Ben Thoma
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
December 10, 2019

Interesting question @Nick Fannin. What do you think, @Christian Czaia _Decadis AG_? Anyone else have thoughts?

Christian Czaia _Decadis AG_
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 10, 2019

I think there is no real way to cluster users into business units apart from mapping them to groups (or organizations in a Service Desk context). Group management will be a pain though I guess :-) I worked for companies that had full-time admins that were just in charge of group management. 

Either way I suggest using LDAP rather sooner than later;-)

Like Ben Thoma likes this
Ben Thoma
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
January 14, 2020

FYI: We just announced our next webinar in this series: Is Your Jira Instance Secure?

TAGS
AUG Leaders

Atlassian Community Events