Global Permissions
| 
PDF |
Global permissions are system wide.
Global permissions are granted to groups of users.
This table lists the different global permissions and the functions they secure:
| Global Permission | Explanation |
| JIRA System Administrators |
Permission to perform all JIRA administration functions. |
| JIRA Administrators |
Permission to perform most JIRA administration functions (see list of exclusions below). |
| JIRA Users |
Permission to login to JIRA. (Note: Granting the JIRA Users permission to a group also
means that all newly created users will be automatically added to that group.)
|
| Browse Users |
Permission to view a list of all JIRA user names and group names. Used for selecting users/groups in popup screens (such as the 'User Picker'). |
| Create Shared Filter |
Permission to share a filter globally or with groups of users. (This applies only to JIRA Professional
and Enterprise editions.)
|
| Manage Group Filter Subscriptions |
Permission to manage (create and delete) group filter subscriptions. (This applies only to JIRA Professional
and Enterprise editions.) |
| Bulk Change |
Permission to execute the bulk operations within JIRA:
Bulk Edit*, Bulk Move*, Bulk Workflow Transition, Bulk Delete* (*subject to
project-specific permissions.)
Note: The decision to grant the Bulk Change permission should be considered carefully. This permission
grants users the ability to modify a collection of issues at once. For example, in JIRA installations configured to
run in Public mode (ie. anybody can sign up and create issues), a user
with the Bulk Change global permission and the Add Comments project permission
could comment on all accessible issues. Undoing such modifications may not be possible through the JIRA application
interface and may require changes made directly against the database (which is not recommended).
|
About 'JIRA System Administrators' and 'JIRA Administrators'
People who have the 'JIRA System Administrators' permission can perform all of the administration functions in JIRA,
while people who have only the 'JIRA Administrators' permission cannot perform functions which could affect the application
environment or network. This is useful for organisations which need to delegate some administrative privileges (e.g. creating users,
creating projects) to particular people, without granting them complete rights to administer the JIRA system.
By default, the jira-administrators group has both the 'JIRA Administrators' permission
and the 'JIRA System Administrators' permission. If you need some people to have only the
'JIRA Administrators' permission (and not the 'JIRA System Administrators' permission), you will
need to use two separate groups, e.g.:
-
Create a new group (e.g. called jira-system-administrators).
- Add to the jira-system-administrators group everyone who needs to have the 'JIRA System Administrators'
permission.
- Grant the 'JIRA System Administrators' permission to the jira-system-administrators group.
- Remove the 'JIRA System Administrators' permission from the jira-administrators group.
-
(Optional, but recommended for ease of maintenance) Remove from the jira-administrators group everyone who is a
member of the jira-system-administrators group.
People who have the 'JIRA Administrators' permission (and not the 'JIRA System Administrators' permission)
cannot do the following:
It is recommended that people who have the 'JIRA Administrators' permission (and not the 'JIRA System Administrators'
permission) are not given direct access to the JIRA filesystem or database.
Granting global permissions
- Log in as a user with the 'JIRA Administrators' global permission (or the 'JIRA System Administrators'
global permission, if you need to grant the 'JIRA System Administrators' global permission).
- Bring up the administration page by clicking either the 'Administration' link on the top bar or the title of the
Administration box on the dashboard.
-
In the panel on the left, under the title 'Global Settings', click the link labelled
'Global Permissions'. The 'Global Permissions' page will be displayed, showing a list of the
global permissions and which groups currently have them:
The 'Add Permission' box is shown below the list.
- In the 'Permission' drop-down list, select the global permission you wish to grant.
- In the 'Group' drop-down list, either:
- select the group to which you wish to grant the permission; or
- if you wish to grant the permission to non logged-in users, select 'Anyone' (not recommended for production systems).
Note that the 'JIRA Users' permission (i.e. permission to log in) cannot be granted to 'Anyone' (i.e.
to non logged-in users) since this would be contradictory.
