How do I move admin permissions from the Jira Internal Directory to my Active Directory user?

[Scott Smith]

Both my Internal Directory user (admin) and my AD user (username) are in these groups:

• jira-administrators
• jira-servicedesk-users

When I login as username I don't get the same options as admin.  It's like username is a sort of poweruser and admin is the "real" admin.  What am I missing?  I'd like to ditch the Internal Directory.

[Andy Nguyen]

Hey Scott,

Some screenshots would be useful. What are the differences that you see when logging in as those users?

I would be focusing on these to figure out the possible causes:

1. From Administration -> User Management -> Users, do they belong to exactly the same set of groups?
2. From Administration -> System -> Global Permissions, are these 2 permissions granted to different groups: JIRA System Administrators and JIRA Administrators?

My suspicion is, username may be JIRA Administrators, but not JIRA System Administrators. You may refer to Managing global permissions for more info.

Best,

Andy

[Scott Smith]

#1 is true.

#2 I don't have JIRA System Administrators as an option.  I can see that and assign it to my group but when I login as username I'm still just a JIRA Administrator.

[Andy Nguyen]

Hey Scott,

#2 I don't have JIRA System Administrators as an option.  I can see that and assign it to my group but when I login as username I'm still just a JIRA Administrator.

What does this look like and how do you do that exactly? It's very hard to imagine all of these without a screenshot of what you see and attempt to do.

If you're afraid that this kind of info is sensitive and prefer not to share it here, and if you have a license that entitles you for Atlassian Support, feel free to raise a Support ticket at https://support.atlassian.com/contact/#/. In case nothing is problematic from the GUI, something may not be right in the database and it's better to work on that in a private Support ticket.

Cheers,

Andy

[Scott Smith]

I'm in the Jira System Administrators group now but I'm missing a step.  Apparently that AD group still doesn't have the correct permissions?

[Andy Nguyen]

Hey Scott,

Thanks for the screenshot.

Just a heads-up, JIRA System Administrators global permission and jira-system-administrators group are 2 different things.

You need JIRA System Administrators global permission to be a sysadmin, and that permission may not be granted to jira-system-administrators group. In other words, adding the user to the group doesn't necessarily mean that he will become a sysadmin.

What I really want to see is this one from Administration -> System -> Global Permissions:

Am I correct that:

• When you log in as admin, you see JIRA System Administrators
• When you log in as username, you don't see it

If so, when you log in as admin, what are the groups to which JIRA System Administrators is granted, and is username a member of any of those groups?

[Scott Smith]

Looks like this:

[Mohamed Adel]

Try to use that one    

Troubleshooting permissions with the JIRA admin helper