Is there a way to limit User Management access per instance.

[William _Bill_ Klein]

I currently have multi Atlassian Cloud instances (all them running Jira & Conf) in my company.  I would like some of my admins to have access to User Management on some instances but not all.

Example:
For Instance 1:  I would like admins A & B to have User Management access on top of their admin access.

For Instance 2:  I would like admins A & C to have User Management access on top of their admin access.

For Instance 3:  I would like admin C to have User Management access on top of their admin access.

[Kieren · Accepted solution]

Hi William,

We have a new role coming out soon (May-June 2023), called User Access Admin (UAA). The blog post gives a lot of information, but to summarize the role for your use case:

For Instance 1:  I would like admins A & B to have User Management access on top of their admin access.

• For instance 1, you could give Admin A the UAA role for Jira Software and Confluence. For Admin B you could give the UAA role for Jira Software, Confluence and Jira Service Management.

For Instance 2:  I would like admins A & C to have User Management access on top of their admin access.

• For instance 2, you could give Admin A the UAA role for only Confluence, but maybe you want Admin C to have the UAA role for all your products under instance 2.

For Instance 3:  I would like admin C to have User Management access on top of their admin access.

For instance 3, you could give Admin C the UAA role for all products again.

The UAA role will not grant any permission within the products. E.g. If you want Admin A to be a user in Jira Software, and a product admin of Jira Software, and give them the ability to add users to Jira Software, that one user will need 3 different roles:

1. The User role
2. The Product Admin role
3. The User Access Admin role

You can pick and choose which combination of roles to give your users as necessary, which hopefully allows it to be flexible for different use cases, but doesn't make it overly complex.

Hope that helps.

-Kieren Dight

Atlassian Product Manager

[William _Bill_ Klein]

Great news, thank you Kieren!

[Brant Schroeder · Accepted solution]

@William _Bill_ Klein Welcome to the Atlassian community

I am assuming that they are all under the same organization.  If this is the case they would have to have access at the organization level (organization admin) which would give them access to all users of all instances.  

[William _Bill_ Klein]

Hi Brant,
Correct, all instances are in the same organization.   
New to the Atlassian cloud world,...  Would I have the option to group these instances into different organizations at my company?   How would this affect my licensing?  

[Brant Schroeder]

@William _Bill_ Klein If you are wanting to add users to the organization that has to be done at the organization level.    If you have three Jira instances then you can have Jira Administrators that can manage users at the site level.  They would have additional abilities as well above just managing users.

[Joseph Chung Yin · Accepted solution]

@William _Bill_ Klein - 

Welcome to the community.  Are you saying that you have multiple SITEs for your company - It means that you have different *.atlassian.net URLs?

If so, then you can have different site admins separation for each SITE in your company with Atlassian Access.  This means that SITE A admins can manage Atlassian Access setup/mgmt for just SITE A and so on.

https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-access/

By default, site admins are the group that manages all within a site/instance.

Please advise.  Hope this helps.

Best, Joseph Chung Yin

Jira/JSM Functional Lead, Global Technology Applications Team

Viasat Inc.

[William _Bill_ Klein]

Hi Joseph,
Helps, but related question about licensing (new to the Atlassian Cloud world):

Correct, I have different *.atlassian.net URLs which we currently group together.   If I split them, then would a end user need a license for each group of instances?

Sorry if my question is confusing.  All of my past years have been with Jira server\data center environments.

[Joseph Chung Yin]

@William _Bill_ Klein -

If you have different sites, then each site will requires its own licensing on Atlassian product unless you have the Enterprise subscription.  Please review the following links from Atlassian -

https://www.atlassian.com/software/jira/pricing

https://www.atlassian.com/software/jira/enterprise

Are you trying to migrate your multiple instances into one instance?  If so, then you just need one single subscription plan.

Best, Joseph

[William _Bill_ Klein]

We have an Enterprise license which covers the multi sites we have in use.
Was just looking for a way to assign User Management access to just certain individuals on certain sites.