Separate user access management and other admin activities

[Simone Drose-Schneider]

We would like a certain group to take care of the user access management only. They should be able to edit the workflows, issue types and other activities a system admin can do. They should also not be able to change any other system setting.

Is there a possibility in Jira to create groups or use other means in order to separate user access management and other admin activities?

[Alexey Matveev · Accepted solution]

There are Poject Administrators, Jira Administrators and System Jira Administrators. That is all you can have. If permissions, which are set for them, do not fit your requirement, then you can not do anything out of the box. You can not add new types of adminsitrators.

[Simone Drose-Schneider]

@Alexey MatveevThanks for your reply! I have tried to make use of the Jira Admin instead of the System Admin. Unfortunately, the permissions behind that role only restricts the users from using import/export projects. Do you happen to be experienced with Jira Crowd?

[Alexey Matveev]

I am not that much experienced with Atlassian Crowd. But basically it has the same functionality as Microsoft Active Directory (of course not exactly like Active Directory). That is why, if you import all your users to Jira from Atlassian Crowd, then you can make your requirement work. You can set admins for Atlassian Corwd and do not give them admin permissions in Jira. These admins will be able only to manage users and groups.

But Atlassian Crowd is licensed differently from Jira. You would need to pay for Atlassian Crowd license.

[Simone Drose-Schneider]

@Alexey MatveevThanks for your input! True, if we have Crowd, then we can remove those users responsible for user access management from the Jira Admin group. We'll be looking into using Crowd. Thanks!