Project role concept

[Rumceisz]

Hi All,

we just start to delegate to user administration to project leaders: so far we used groups for the user management so only jira-admins could grant access rights in our Jira.

The problem is that the project leads can cause security risks: they are able to access rights even to the 'jira-users' group.

Is there any feature (plugin, script, etc.) we can restrict the users/groups for the project leads with? So they could browse role permission only for a particular users or groups. Or the same would be if it could be banned to grant groups to roles only users.

You know: if they grant role permission to a failed user it's not a big problem like granting access to all the users ('Jira-users').

Any idea?

Rumi

[Mark Symons · Accepted solution]

If I understand your problem correctly...

• You assign the project-admin role to one person and the next moment find that they have gone and added a whole pile of other people to the same role.
• The "whole pile of other people" are then able to edit project components & versions (etc) and that is NOT what you wanted.

...then I think you experiencing something that I have previously come across. A design oversight that I would call a bug. I do not think that there is currently a way around this - but would love to be proved wrong.

The reason why I am submitting this as an Answer rather than as a Comment is that there is an open issue that should be relevant:

Required: Project Group Administrator

Atlassian are not planning to address the issue in the next 12 months but they are inviting feedback.

So this is your chance to have your say...

[Rumceisz]

Thanks Mark