How to add global permissions to groups via REST API in Jira Cloud

[Chelluri Durga_ Venkata Sai Keshav]

Hi Community,

We are working on a Jira Cloud auto-provisioning project where we want to automate the setup of groups and permissions. We haven’t found any supported REST endpoint to grant global permissions (like “Browse users and groups”, “Administer Jira”, etc.) to a group. In the Jira UI (System → Global Permissions), this can be done manually, but we’d like to automate it as part of our provisioning workflow.

My questions:

1. Is there any official REST API to programmatically add or remove global permissions for a group in Jira Cloud?

2. If not, are there any recommended workarounds for automating this as part of a provisioning pipeline?

Any guidance or experience from others who tried automating global permission assignments would be really helpful.

Thanks in advance!

[Staffan Redelius]

Hi @Chelluri Durga_ Venkata Sai Keshav 

I don't think that is possible, it sounds like a security concern.

Permissions are granted to Groups or roles, Global permissions can only be assigned to groups. You can via an IDP add/remove users to/from those groups which will grant/revoke permissions based on the group they are part of. Groups needs to be administrated by a Organization admin. 

Users can be assigned to Roles by a project admin and based on the permission schema for the project be granted permissions (if you are using Company managed projects).

Best regards,
/Staffan

[Sunny Ape]

Is there any official REST API to programmatically add or remove global permissions for a group in Jira Cloud?

No, Jira Cloud's REST API does not have an endpoint that does that

You know, you and the rest of the people in your team can save themselves a lot of time and trouble by using Google to find the answers to questions like that. If any single person in your team had Googled "Using Jira Cloud's REST API, can I set Global permissions for a group?" you would have instantly gotten the answer you needed.