How can I find all Jira projects that are visible to "Any logged-in user" or the "jira-users" group?

[Marius Skoglund]

Hi everyone,

I’m trying to audit all the projects in our Jira instance to identify which ones are visible to a broad audience — specifically:

• Projects where the Browse Projects permission is granted to the jira-users group, or
• Projects where it’s granted to any logged-in user (as shown in the UI under “Application access”).

I’ve tried using ScriptRunner to loop through all projects and inspect their permission schemes. I’m checking for type: group with parameter: jira-users, and also for type: loggedin or applicationRole. But the script keeps returning an empty list — even though I know for sure that some projects (like PRJA) are accessible to any logged-in user.

Has anyone successfully scripted this kind of audit? Or is there a better way to detect this kind of access?

Thanks in advance!

[Vitalii Rybka]

Hi @Marius Skoglund,

The issue is likely with how you're checking the permission types. Here's what to look for:

For ScriptRunner approach:

• type: "user" with parameter: null (for "Any logged-in user")
• type: "group" with parameter: "jira-users"
• Also check type: "applicationRole" with parameter: "jira-users"

Alternative methods:

1. REST API: Use /rest/api/2/project/{projectKey}/role to check project roles
2. Permission Helper for Jira app - specifically designed for this type of audit
3. Manual but reliable: Project Settings > Permissions > check each scheme

Quick test: Try checking the permission scheme ID first, then query the scheme directly rather than going through projects.

The "Any logged-in user" permission sometimes shows as type: "user" with empty/null parameter rather than type: "loggedin".

If you share your current ScriptRunner code snippet, I can help debug the specific issue!

Hope this helps if not then DM!