Browse all projects permission?

[Markos Stefanou]

Let's say that the CEO asked us to be able to see all the issues in JIRA.

We would manually add him to every project but considering that we have around 180 projects in JIRA right now with different permission schemes, I was wondering if there was a better way to do it.

And no, I'd rather not make him a JIRA admin (to make sure he doesn't break something) in order to be able to see everything.

Any ideas?

[Bryan Bai · Accepted solution]

there has multiple locations you can add browse only:

- project

- permission schemes

I would suggest create a group "executive-viewer" and add the group into project role "users", then add CEO into the executive-viewer group.

the step adds a group to project role, require some automation with JIRA CLI or other API tools. but this hierarchy will balance the flexibility and security:

- project owner(admin) can have full autonomy to remove this role if any project really don't want to share

- if CEO left, you just need change the membership of the "executive-viewer" group

[Markos Stefanou]

I'm confused, how does this help me automatically add him as a viewer for 180 projects? Won't I have to repeat it for all projects?

[Bryan Bai]

there have a couple of plugin or tools can help the automation:

if you familiar with the shell script, probably you can try:

https://marketplace.atlassian.com/plugins/org.swift.jira.cli/cloud/overview

if you like python, have a look at:

https://jira.readthedocs.io/en/master/

[Markos Stefanou]

Thank you but this is not helpful, we are prohibited from running scripts like that. 

The automations running alongside our Jira instance are extremely vulnerable.

So, practically there's no way to do it through the Jira admin UI?

[Nic Brough -Adaptavist-]

You'll need to add the user to a role that allows for "browse project" in each one.  Or change the permission schemes.

Yes you can do that via the admin UI, but one place at a time, not en-masse.