How to give a user the permission to run integrity check without giving them Jira-Admin permissions?

[Mohamed Alaoui]

My client is trying to synch our JIRA instance with their instance of ALM using ALM Synchronizer. Part of the process for the synchronisation is to run an Integrity check, which requires the Global Permission: JIRA Administrators.

For obvious security reasons, we cannot provide our client with JIRA Administrator permissions. So we are looking for a way to grant the permission to run the Integrity check without the other admin permissions.

We have looked at ConectALL and Exalate plug-ins but they are both incompatible with our client's setup.

[Jimmy Van (GLiNTECH)]

I can't think of anything that you can do in Jira natively (happy to be proven wrong), but what's your architecture like?

Not without risk, but potentially consider:

• grant Jira admin privileges (consider separating Jira admin from Jira system admin too)
• use your reverse proxy to redirect all admin URLs which are not related to the integrity checker back to Jira home. Could you potentially identify your client's Jira by IP? Inspect the header for select users?