Manage your organization’s Atlassian accounts
Gain control over your employee's Atlassian accounts.
What are the different types of admin roles?
Which user management experience do you have?
To check, go to your organization at admin.atlassian.com and select Directory. If the Users and Groups lists are found here, then you are using the centralized user management. Learn more about the centralized user management
Original | Centralized |
As a site administrator or organization admin, Users is found under Product site.  | As an organization admin, Users is found under Directory tab.  |
Jump to the
Centralized user management content
There are several types of admins within Atlassian Administration. Admin roles allow organizations to delegate different responsibilities among many admins instead of relying on just one person. What you can access and configure is determined by the type of admin you are. It’s possible to have multiple admin roles at the same time.
The admin roles you can have and assign to other members within your organization depend on whether you are using the original user management experience or the centralized user management experience.
This page only outlines admin roles granted through Atlassian Administration. If you want to know more about other admins, read the documentation for:
Admin roles
Organization admin
When you create an organization, you automatically become an organization admin. Other organization admins can assign you the organization admin role.
An organization admin is the highest level of admin and can complete any administrative task in Atlassian Administration. They are the only admins with access to the organization’s settings and are responsible for managing users and groups within their organization. The role allows limited access to manage billing.
We recommend you always have more than one organization admin in case one account is lost or compromised. Only organization admins can add or manage other organization admins.
User access admin
We’re rolling out the user access admin role. It may not be available for your organization yet.
The user access admin role is only available if you have the centralized user management.
Unlike an organization admin, a user access admin has limited access to Atlassian Administration. Their main task is to manage user access to the product they administer. For example, an organization might have a user access admin that manages product access for Confluence, and another user access admin managing product access for Jira.
A user access admin is assigned to one or more products, but can’t log in or use those products. This means user access admins won’t count as billable users for the product they administer, unless they’re granted an additional role that gives access to that product.
Some user access admins, who were former site admins, have billing permissions so they can continue to manage billing for sites they administered. These users have a message on their details page in admin.atlassian.com.
Product admin
A product admin can manage administration settings for a specific product. They don’t have access to Atlassian Administration. With the exception of Jira admins, product admins can access the content within the product they administer. It’s possible to be a product admin for one or more Atlassian products.
What features are available to each admin role in Atlassian Administration?
Features available with an admin role are marked with a ✅
Features available with an admin role for their assigned site/product are marked with a 🔸
Features unavailable with an admin role are marked with a ❌
Not all features are available to the organization admin role. Organization admins can assign themselves the relevant role to access all of the following features.
Manage users
| Organization admin | User access admin | User access admin with billing permissions | Product admin |
|---|---|---|---|---|
View users in organization | ✅ | ✅ | ✅ | ❌ |
Configure user access settings | ✅ | 🔸 Note: this is an upcoming feature and not available yet. | 🔸 Note: this is an upcoming feature and not available yet. | ❌ |
Update managed accounts | ✅ | ❌ | ❌ | ❌ |
Manage portal-only accounts | ✅ | ❌ | 🔸 | ❌ |
Make another user an organization admin | ✅ | ❌ | ❌ | ❌ |
Make another user a user access admin | ✅ | ❌ | ❌ | ❌ |
Make another user a product admin | ✅ | 🔸 | 🔸 | ❌ |
Make another user a project and space admin | ❌ | ❌ | ❌ | ✅ |
Manage groups
| Organization admin | User access admin | User access admin with billing permissions | Product admin |
|---|---|---|---|---|
Create or modify a group | ✅ | ✅ Note: User access admins can’t manage groups that give access to products they don’t administer. | ✅ Note: User access admins can’t manage groups that give access to products they don’t administer. | ❌ |
Add or remove users from a group | ✅ | ✅ Note: User access admins can’t manage groups that give access to products they don’t administer. | ✅ Note: User access admins can’t manage groups that give access to products they don’t administer. | ❌ |
Configure default groups for products | ✅ | ❌ | ❌ | ❌ |
Manage products and apps
| Organization admin | User access admin | User access admin with billing permissions | Product admin |
|---|---|---|---|---|
Access to products | ❌ | ❌ | ❌ | ❌ Exception: Confluence product admins are automatically given access to product content |
Approve or deny a request to access products | ✅ | ❌ | ❌ | ❌ |
Add or remove users from products | ✅ | 🔸 | 🔸 | ❌ |
Configure product settings | ❌ | ❌ | ❌ | ✅ |
Add new products to an organization | ✅ | ❌ | 🔸 | ❌ |
Add apps to products | ✅ Note: This also requires the product admin role for that product | ❌ | 🔸 | ❌ |
Manage Connect apps | ✅ | ❌ | 🔸 | ❌ |
Manage security
| Organization admin | User access admin | User access admin with billing permissions | Product admin |
|---|---|---|---|---|
Set up and manage user provisioning | ✅ | ❌ | ❌ | ❌ |
Set up and manage SAML and SSO | ✅ | ❌ | ❌ | ❌ |
Manage passwords | ✅ | ❌ | ❌ | ❌ |
Set up and manage two-step verification | ✅ | ❌ | ❌ | ❌ |
View organization audit log | ✅ | ❌ | ❌ | ❌ |
Track storage | ✅ | ❌ | ❌ | ❌ |
Update security settings | ✅ | ❌ | ❌ | ❌ |
Update API keys | ✅ | ❌ | ❌ | ❌ |
Manage billing
We’re rolling out an improved billing experience. The features that your administration roles can manage are different depending on which billing experience you have. To understand what billing tasks organization and user access admins can do, see Understand billing administration.
Original user management content
There are several types of admins within Atlassian Administration (admin.atlassian.com). Admin roles allow organizations to delegate different responsibilities among many admins instead of relying on just one person. What you can access and configure is determined by the type of admin you are. It’s possible to have multiple admin roles at the same time.
The admin roles you can have and assign to other members within your organization depend on whether you are using the original user management experience or the centralized user management experience.
This page only outlines admin roles granted through Atlassian Administration. If you want to know more about other admins, read the documentation for:
Admin roles
Organization admin
When you create an organization, you automatically become an organization admin. Other organization admins can assign you the organization admin role.
An organization admin is the highest level of admin and can complete any administrative task in Atlassian Administration. They are the only admins with access to the organization’s settings and are responsible for managing users and groups within their organization. The role allows limited access to manage billing.
We recommend you always have more than one organization admin in case one account is lost or compromised. Only organization admins can add or manage other organization admins.
Site administrator
The site admin role is only available if you have the original user management.
A site admin manages the users, groups, and administration settings of the site they’ve been assigned to (as well as any products that sit within this site). Site admins have access to any content within their assigned site. The role allows limited access to manage billing.
Trusted user
The trusted user role is only available if you have the original user management.
Trusted users have access to all products for their assigned site. They can invite users to this site’s product from the Teams menu in Jira or Confluence. Trusted users don’t have access to Atlassian Administration but they can access the administration areas for their site’s products.
Product admin
A product admin can manage administration settings for a specific product. They don’t have access to Atlassian Administration. With the exception of Jira admins, product admins can access the content within the product they administer. It’s possible to be a product admin for one or more Atlassian products.
What features are available to each admin role in Atlassian Administration?
Features available with an admin role are marked with a ✅
Features available with an admin role for their assigned site/product are marked with a 🔸
Features unavailable with an admin role are marked with a ❌
Not all features are available to the organization admin role. Organization admins can assign themselves the relevant role to access all of the following features.
Manage users
| Organization admin | Site administrator | Trusted user | Product admin |
View users in organization | ✅ | 🔸 | ❌ | ❌ |
Configure user access settings | ✅ | ❌ | ❌ | ❌ |
Update managed accounts | ✅ | ❌ | ❌ | ❌ |
Manage portal-only accounts | ✅ | 🔸 | ❌ | ❌ |
Make another user an organization admin | ✅ | ❌ | ❌ | ❌ |
Make another user a product admin | ✅ | 🔸 | ❌ | ❌ |
Make another user a site admin | ✅ | 🔸 | ❌ | ❌ |
Make another user a trusted user | ✅ | 🔸 | ❌ | ❌ |
Make another user a project and space admin | ❌ | ❌ | ✅ | ✅ |
Manage groups
| Organization admin | Site administrator | Trusted user | Product admin |
|---|---|---|---|---|
Create or modify a group | ✅ | 🔸 | ❌ | ❌ |
Add or remove users from a group | ✅ | 🔸 | ❌ | ❌ |
Configure default groups for products | ✅ | 🔸 | ❌ | ❌ |
Manage products and apps
| Organization admin | Site administrator | Trusted user | Product admin |
|---|---|---|---|---|
Access to products | ❌ | 🔸 | 🔸 | ❌ Exception: Confluence product admins are automatically given access to product content |
Approve or deny a request to access a product | ✅ | 🔸 | ❌ | ❌ |
Add or remove users from a product | ✅ | 🔸 | 🔸 | ❌ |
Configure product settings | ❌ | ❌ | ❌ | ✅ |
Add new products to an organization | ✅ | 🔸 | ❌ | ❌ |
Add apps to products | ✅ Note: This also requires the product admin role for that product | ✅ Note: This also requires the product admin role for that product | ❌ | ❌ |
Manage Connect apps | ✅ | 🔸 | ❌ | ❌ |
Manage security
| Organization admin | Site administrator | Trusted user | Product admin |
|---|---|---|---|---|
Set up and manage user provisioning | ✅ | ❌ | ❌ | ❌ |
Set up and manage SAML and SSO | ✅ | ❌ | ❌ | ❌ |
Manage passwords | ✅ | ❌ | ❌ | ❌ |
Set up and manage two-step verification | ✅ | ❌ | ❌ | ❌ |
View organization audit log | ✅ | ❌ | ❌ | ❌ |
Track storage | ✅ | ❌ | ❌ | ❌ |
Update security settings | ✅ | ❌ | ❌ | ❌ |
Update API keys | ✅ | ❌ | ❌ | ❌ |
Manage billing
We’re rolling out an improved billing experience. The features that your administration roles can manage are different depending on which billing experience you have. To understand what billing tasks organization and site admins can do, see Understand billing administration.
Was this helpful?