Discover Jira Cloud products
Learn more about Jira Cloud products, features, plans, and migration.
Manage global permissions
Global permissions are system-wide and are granted to groups of users. You can refer to project permissions to manage permissions that apply to individual projects.
To change global permissions, you must be a site admin or a Jira admin.
Access global permissions
Choose > System.
Click Global Permissions.
Here are the different global permissions and what users can do with them:
Global Permission | Explanation |
|---|---|
Administer Jira | Create and administer projects, issue types, fields, workflows, and schemes for all projects. Users with this permission can perform most administration tasks, except managing users, importing and exporting data, and editing system email settings. Users with the Administer Jira permission can log in at any time but may be restricted depending on their application access. Site admins can grant this permission in user management. |
Browse users and groups | View and select users or groups from the user picker. Users with this permission can see the names of all users and groups on your site, provided they have the Browse Project permission granted to them. They can @mention people on issues too. |
Share dashboards and filters | Share dashboards and filters with other users. |
Manage group filter subscriptions | Create and delete group filter subscriptions. |
Make bulk changes | Modify collections of issues at once, including these operations:
Some bulk changes may be restricted by project-specific permissions. Granting permission to make bulk changes may be risky. For example, in a Jira site where anybody can sign up and create issues, a user with this permission and the Add Comments project permission could comment on all accessible issues. It's difficult to undo bulk changes like these. |
Create team-managed projects | Create projects separate from shared configurations and schemes. Team-managed projects don't affect existing projects or shared configurations like workflows, fields or permissions. Only licensed users can create team-managed projects. Removing this permission does not delete existing team-managed projects. Users with the Administer Jira permission can always create team-managed projects, even if that group is removed from this permission. |
Grant global permissions to a group of users
You can grant the global permissions described above to user groups. Only site admins can manage groups of users. Read more about managing groups.
To grant global permission:
Scroll to the bottom of the page to find the Add Permission section.
Select the permission you want to grant in the Permission dropdown.
In the Group drop-down list, either:
select the group you want to grant the permission to
select Anyone to grant permission to users who aren't logged in.
If you grant permission to anyone to Browse users and groups, user and group names will be publicly available on the internet. If you give anyone permission to make bulk changes, anonymous users who are not logged in to Jira can make bulk changes for any issues they're permitted to view.
Revoke global permissions from a group of users
To revoke permissions for a group:
Locate the global permission you want to remove for the group.
Next to the group you want to remove that permission for, click Delete.
Restrict global permissions to a group of users
Admins can restrict the users shown when mentioning other users or using user fields in Jira Cloud. For example, when you’re collaborating with clients or contractors on a specific project, you can restrict the people you want them to see when they’re searching for users.
Restrict user lists
Users with the Browse project permission can be searchable in the user picker field available on an issue. However, if the user does not have the global Browse users and groups permissions, the list of users in the user picker field will be limited to users who have access to the current project. Users who have been granted Browse project permission via project roles, application access, group, single user or project lead are considered as users with explicit project access.
This capability is available for:
@ mention users in a description or comment
Assignee
Custom fields of the user type
For other locations, user search is controlled by global Browse users and groups permissions.
To restrict the users visible in a project:
Go to > System > Global permissions.
Under Browse users and groups permission, remove the user who isn’t supposed to have site-wide access. This user won’t be able to search for all users across the Jira instance.
Go to your project’s settings > Permissions.
Selectively grant Browse project permission to users and groups. Users with the Browse project permission can now be searched during mentions and field assignments.
The user for whom you’ve disabled global Browse users and groups permission won’t be able to search for other users across Jira.
Troubleshoot permissions with the Jira admin helper
The Jira admin helper can help you find out why a user can or can't see a certain issue.
You must be a Jira admin to use the permission helper.
Choose > System.
Under ADMIN HELPER, select Permission helper.
Enter a username or leave blank for anonymous users.
Add an issue key (for example, one the user can or can't see) and the permission to check.
Click Submit.
Was this helpful?
Still need help?
The Atlassian Community is here for you.