Disable "Log in as another user" feature

[Sachindra Narayan]

Is there any way to disable "Log in as another user" feature in the Cloud instance of JIRA and Confluence?

[Del Jensen · Accepted solution]

Only those in the administrator group should be able to do that.  It is a tool used to help diagnosis what other users experience.

[Sachindra Narayan]

is there a way to stop people from availing this feature?

[Del Jensen]

Under Settings -> User Management -> Groups enter site-admins and see who belongs to this group.  It should only be the site administrators.

[Sachindra Narayan]

does it mean that whoever we mention under Groups will only have access to "Log in as another user"? Is there a possibility that we do not allow anyone to use this feature?

If not, can we create a role/group assigning no users to it and mention it under Settings -> User Management -> Groups ? This way no-one will be able to use this feature?

[Del Jensen]

The group site-admins should only be for site administrators.  Administrators for projects can be set up within each project.  Generally the site-admins are limited to a few people for site administration:  added applications, backups, site configuration, etc.

[Sachindra Narayan]

Thanks @Del Jensen actually from a security point of view, I wish to ensure that no-one get to use this feature. Just wanted to know if that's feasible through any setting or by any means. 

Moreover, there would ideally be one Organization Admin and multiple Site Admins, so thought to leverage access to as fewer people as possible.

[Sachindra Narayan]

can this "Log in as another user" be kind of more restrictive? restricted to no one preferably? Can the organization admin disable this feature altogether?

[Del Jensen]

Not that I am aware of.

[Sachindra Narayan]

@Del Jensen what activities can be performed by the site admins who are logging in as another user? Everything that the user can do or just a kind of view only access? Can the site admins delete my support tickets, change my comments, delete my uploaded files???

[Del Jensen]

@Sachindra Narayan correct.  While "logged in" as that user it would appear that user is doing the actions.

[Sachindra Narayan]

@Del Jensen ooohh.. that's a concern.. If I would have a heated discussion someday, he will delete/modify my comments the same night then.. LOL.. what would the logs say, I made the change or my Manager made them on my behalf?

[Del Jensen]

@Sachindra Narayan  I went into Atlassian Admin, cog icon upper right, selected User Admin, then the Security tab along the top, then Audit log on the right.  It does show me logging in as someone else but not the actions that I did while them.  It would give a datetime stamp though that you could tie to the history of the comments made.  And you can export the logs for safe keeping.  ;-)

[Sachindra Narayan]

@Del Jensen atleast that's comforting.. thanks.. :)

[Del Jensen]

@Sachindra Narayan  you're welcome!  Have a great day!