How to run a full Jira permission audit in under 30 minutes

Jira permission sprawl is real. Learn how to audit users, groups, roles and global permissions systematically — and what to look for.

Jira permission audits are often postponed until something goes wrong. But with the right approach, you can run a complete review in under 30 minutes.

Step 1: Start with global permissions. Check who has Jira Administrators and System Administrators rights. These should be a very short list.

Step 2: Review project roles. The most common sprawl happens at the project level. Look for users added directly to roles instead of through groups — this makes auditing nearly impossible at scale.

Step 3: Check group memberships. Groups should map to business functions. If you see groups like "temp-access-2023" still active, those are red flags.

Step 4: Audit issue security schemes. Many teams set up security schemes and forget them. Verify that the right people can see the right issues.

Step 5: Document and baseline. Export your findings. A permission audit that isn't documented is just forgotten within weeks.

Tools like AuditAdmin for Jira can automate steps 1–4, giving you a full picture across your entire instance in seconds.