How can I produce an Audit Report for user access in Jira

[Shereen]

We just upgraded our Jira server to the latest version and I would like produce an audit report with the following details:

• Who has permission to view the project
• What roles are defined
• What groups are defined
• What permission scheme is being used

Is there a way I can do this report in Jira? Thank you so much!

[Bharath Kumar Kappala · Accepted solution]

@Shereen There is no one place where you can find all these details

• To know who has permissions to view the project you will have to go into the permission schemes and check the browse projects permissioms
• To check the roles defined you will have to to the Settings> System> Roles
• To check the groups Settings> UserManagement> Groups
• To check which project uses what permission schemes you will have to go to Settings> Issues> Permission Schemes 

Hope this helps!

[Shereen]

Thank you. But how about using filters or JQL functions?

[Bharath Kumar Kappala]

No JQL functions at least out of the box would be able to give you those results.

[MichaelL]

This is a sad thing indeed. How can Atlassian sell an un-auditable product? 

[Sunny Ape]

This is a sad thing indeed. How can Atlassian sell an un-auditable product?

Don't be sad @MichaelL , of course Atlassian aren't selling a product that can't be audited! If that were true, none of the huge organisations and Government departments would be using it. Jira Cloud is completely auditable, just like Jira Server / Data Center.

Simply Google "How can I audit Jira Cloud?" and learn how to audit Jira Cloud generally, or Google "How can I audit user access rights in Jira Cloud?" and learn how to audit user access rights specifically.

[Hua Soon SIM _Akeles_]

We have released an app on Atlassian Marketplace.

Check out Auditing User Access Rights on Jira

Hope that will help to save precious time generating audit reports.

[MichaelL]

Doesn't work for cloud. Sigh.

[Mike Diehn]

Deleted

[Joe Pitt]

There is no report out of the box. You need to do what @Bharath Kumar Kappala says.  

[Mojib Javadi]

That's not very helpful. Any plans to have some sort of cross system access auditing and reporting?

[Debra Jones]

That's something I would find useful too. I.e. ability to run a report by User to establish what Projects they have access to and with what role.

[Denise Prickett]

Yes please! Jira permissions are crazy complex. If we can't audit all permissions, at least checking cross-project by user would be super helpful. Or being able to, for example, search which users have Delete Project permission.