How can I give minimal permissions to only manage users?

[Nofar]

I'm want to give permissions to a specific group to only manage users.

So that the only thing they can do is add users and remove users, without being able to administer projects, issue types, fields, workflows, and schemes for all projects

Can this be done?

[John Funk · Accepted solution]

Hi Nofar,

Grant the user only site-admin permissions and see if that works.

So just put them in the site-admin group in Jira. I have not possible of the ability, so test it out good. 

[Nofar]

site-admin is the top permission, if I give that they can do everything, I wish to find something more minimal

[John Funk]

No Jira Administrator is the top position. Try it out with a user for site-admin as their only group 

[Nofar]

Ok thanks, so far it works!

[Nofar]

It also give permissions to change workflows across all projects, can this be restricted?

[John Funk]

Have you verified that is the case? Because the Atlassian documentation doesn't say that for site admins. 

[Nofar]

Yes, I verified that. site-admins gives permissions to edit all workflows.

[John Funk]

Can you show me screenshots of that? Because I just had someone in our organization that has only site-admin permissions and not administrator permissions try to get to the Settings > Issues functionality and they could not. 

[Nofar]

Yes, sure
Here is the groups the user have:

And here the user have the option to go to issues and then the user have the ability to edit workflows

[John Funk]

Check the global permissions to see if that group has the ability to Administer projects. 

Go to Settings > System > Global Permissions

Then check the Administer Jira permission and remove site-admins group from that permission. 

[Nofar]

If I do that will the site-admins be able to mange users?

I want them to be able to add users but not change workflows and such.

[John Funk]

Yes they will - that’s what we have. 🙂

[Nofar]

Do you know where to remove it, I don't see the Delete option under the Administer Jira permission (the second site-admins where it is possible is under other permission)

and I have the Org & Site Admin permission

[Nofar]

Never mind, found it on: https://admin.atlassian.com/s/25ef0cd3-1160-4751-b07f-8def132b92af/apps under Administration access

Thank you so much! @John Funk