Restricting Admins from certain Permissions such as Administer Projects, Browse Projects

[Radhakrishnan B]

I've removed Administrator for the below Permission and added single user, however Admins are able to still access the Project settings. Is this a bug?

[Trudy Claspill · Accepted solution]

Hello @Radhakrishnan B 

Welcome to the Atlassian community!

When you say "Admins" can still access the project settings, do you mean users assigned to the Administrator role for just that project, or do you mean users granted the Administer Jira Global Permission?

[Radhakrishnan B]

I'm referring the site administrator with Global Permission can still access the project. I've removed them from a specific project in the project settings to keep it private for specific users. 

[Trudy Claspill]

That is not a bug, then. That is by design.

A user assigned the global permission for Administer Jira is expected to be a trusted user with sufficient "clearance" to be able to administer all projects in Jira.

It is currently not possible to segregate Jira Administrators to prevent them from administering some projects while being able to administer other projects.

Why would you grant a user the ability to Administer Jira but not want them to be able to administer certain projects?

[Radhakrishnan B]

Thanks for clarifying.

[Agustin Celentano]

I have the same situation. For instance, One reason would to be able to edit custom fields cross-company or workflows without being able to see tickets in a specific project with sensible information that user should not see. 

[Himanshi]

Hello @Radhakrishnan B , 

Welcome to community!

When you say have removed the Administrator from administer permission and add a single user. Does it mean that there are no other group or role or any logged in user mentioned in that particular permission?

I am sharing a document having insights of the project permission: 

https://support.atlassian.com/jira-cloud-administration/docs/permissions-for-company-managed-projects/

This would help you in understanding permission and its privilege. 

If you have removed user from project permission yet have them add in administer Jira permission from Global permission, user of the role/group would be able to access project settings.

Therefore it is important to understand Global permission and need take them in consideration while restricting permission for the group or role. 

Sharing document for more details:

https://support.atlassian.com/jira-cloud-administration/docs/manage-global-permissions/

Hope it would be helpful!

Have a great day!