Can Global Permissions be isolated?

[Kevin Paulus]

I need to further break out the permissions of jira administrators.  I have users that need to create/edit projects, workflows, screens, custom fields, etc, but they cannot have user management (system user add/delete & group management).

[Andrew Laden]

Wittified has a set of add ons "Delegated Admin" For example 

Delegated Project Admin Pro for Jira

https://marketplace.atlassian.com/apps/1213035/delegated-project-admin-pro-for-jira?hosting=server&tab=overview

Delegated Project Creator for Jira

https://marketplace.atlassian.com/apps/1211157/delegated-project-creator-for-jira?hosting=server&tab=overview

I have not used these addons personally, but have had experience with other Appfire addons so the quality is usually good. They may meet your needs.

[Kevin Paulus]

Andrew,
     I have tried the Delegated Project Admin in the past and we found it added a layer of administration that we just do not have time for.  We were also turned off by the cost of the Wittified products.  This seems like something Atlassian should have anticipated.  As the user base grows, the administrative tasking gets heavier across the board:  The ability to delineate and delegate specific system admin permissions without involving the project admin teams would be a welcomed improvement.  Thanks for the considerations!

[Johan Soetens _Dumblefy_]

Kevin,

out-of-the-box you're kinda limited to

• Jira administrators
• Project admins (extended project administration)
• Board admins

Have a look at the on-premise permissions overview 

[Kevin Paulus]

Thanks Johan -- Someday Atlassian will see the needs of end-users and further break out the global permissions so we can actually employ the principles of least privilege.