Permission problem with a trusted user - where do I find the global permissions in user management?

[Sebastian Mühleis]

Hello community :-)

Yesterday we added a "test user" to our board (used my private account for that) and gave him the role "trusted". While testing, I was already wondering why everything looked and felt like I was using my org & site admin account. Then I tried to delete a project with the trusted user, which was no problem (but it should be a problem - it should not be possible at all). When I inspected the Global Permission in my Jira Application Settings I found this:

We have no idea why the trusted user was/is in the "Administer Jira" section (and we don't know why he has such a weird code). When trying to change this permission via the link "configure permissions in user management" we get to this screen:

So there is no group "trusted user" at all.

What can we do to fix this? It's inaaceptable that we invite our team and everybody starts deleting everything...

Thanks in advance for your help,

Sebastian

[Ed Letifov _TechTime - New Zealand_ · Accepted solution]

"Trusted user" is some weird "role" in Atlassian Cloud (not a group) that makes one Admin but not a System Admin. It's not based on groups. 

I am not sure why this was introduced. I suppose there is some set of use cases where "normal" users and groups are coming from an external source via Atlassian Access and SCIM integration and and then suddenly you need to give someone completely external admin access but IMHO it muddles permission model as it is.

My recommendation is to stay away from it i.e. change the role to Basic on the individual user's record.

[Sebastian Mühleis]

Hi Ed,

thanks for your extensive answer. It seems like you're perfectly right and we should stay away from the trusted user (at least for now).

But I'd still like to edit/configure the permissions in the user management in a way that the "trusted users" are not included in the same rights group as the site or solution admins (or any other admins).

[Ed Letifov _TechTime - New Zealand_]

I don't think you can. It's a "built-in" role.

[Bill Sheboy · Accepted solution]

Hi @Sebastian Mühleis 

I saw another question from a community member on this, and a posted response from Atlassian here:

https://community.atlassian.com/t5/Jira-Software-questions/trusted-users-in-my-user-list/qaq-p/1288978

Best regards,

Bill

[Sebastian Mühleis]

Hi Bill,

thanks for your hint. In combination with Ed's answer we will stay away from the trusted user at the moment and maybe give it a go later.