Manage users and groups

Question 1

What role can manage users and groups at site level ?

Answer 1

Org Admin

Question 2

List the 2 default admin groups created with any site

Answer 2

site-admins

{product}-admins-{sitename} (one per product)

Question 3

In a new site, what is the name of the built-in default access group for Jira Software ?

Answer 3

jira-software-users-{sitename}

Question 4

what’s special about group jira-workmanagement-users-{sitename} ?

Answer 4

It only exists if Jira Work Management has been actually activated. Otherwise the product exists and users have access to it as soon as they have another product enabled (JS, JSM, CONF)

Question 5

Can you change the default access group for a product ?

Answer 5

Yes, as long as you have another group created

Question 6

Can you have more than one default access group ?

Answer 6

Yes, no limitation.

Question 7

When accessing a site, is a new user automatically granted access to all the products in the site?

Answer 7

No, only these marked “New users have access to this product”

Question 8

cite 4 ways to bring users into your org

Answer 8

Enable self signup
integrate to a Gsuite directory
send an invite (email)
users request access

Question 9

Is a license consumed if a user is invited but never signs up ?

Answer 9

Yes. Even if the invitation is not accepted.

Question 10

Can you have several roles in a product ?

Answer 10

Yes, for example the same account can be a member of jira admins and jira users at the same time

Question 11

does a site admin consume a license ?

Answer 11

yes, one of each product

Question 12

does a Jira admin consume a license ?

Answer 12

no, unless also added the jira-users-{sitename} role

Question 13

What’s different between a Jira admin and another {product} admin ?

Answer 13

A Jira admin is added to the Product Admin in Jira Administration as there may be several Jira products
While a Confluence admin is added to the Confluence Admin role

Question 14

what happens when a user is granted the organization admin role ?

Answer 14

The user becomes a member of the site-admins group and gets access to all products (and consumes a license for each of them)

Question 15

suspend a user vs remove a user from a site ?

Answer 15

suspend is temporary - user can be reinstated
remove is permanent
both options stop license consumption (temp or permanent)

Question 16

Cite 6 global permissions (Site level)

Answer 16

Administer Jira, 
Browse users and groups, 
Share dashboards and filters, 
Manage group filter subscriptions, 
Make bulk changes,
Create team-managed projects

Question 17

deactivate vs delete a user ?

Answer 17

Deactivate is temporary, Delete is permanent. Both stop billing for this user’s product accesses across all sites

Question 18

(suspend / remove user) vs (deactivate / delete managed account) ?

Answer 18

suspend + remove user is per site. Site and Org Admins can do it
deactivate + delete account is per org across all sites. Only an Org Admin can do it

Question 19

What happens when you activate Atlassian Access and verify your domain ?

Answer 19

Authentication is delegated to the your domain’s IdP and you log in with your domain credentials, not your Atlassian credentials.

Question 20

what is the difference between approving and verifying a domain ?

Answer 20

Approving a domain allows all its users to log in to the Jira site
Verifying a domain is a step towards setting up Atlassian Access (i.e. SSO to another IdP). It does not allow users to access the site per se.

Question 21

When you suspend a user in a site, can this user be still @mentioned ?

Answer 21

No. Only active users can be @mentioned

Question 22

When you suspend a user in a site, can this user be assigned issues ?

Answer 22

No. This user has lost access to Jira products which is and therefore the ‘Assignable User’ perm.

Question 23

When you suspend a user, is this user still visible in the user listings ?

Answer 23

Yes, but showing as suspended

Question 24

Caveat about using invitation links to bring users to your site ?

Answer 24

Anyone can use the link (not only users from approved domains) + Using the link bypasses Org Admin approval. This can lead to license exhaustion quite rapidly

Question 25

cite 4 ways to bring users to your site

Answer 25

Approved Domain(s)
Access Requests
User Invites
Invite Links

Question 26

What are the 3 options available for Access Requests to a site ?

Answer 26

All new users on non-public domains can request access
Only new users from selected domains can request access
New users can’t request access

Question 27

What option is available for User Invites ?

Answer 27

Existing users can send invitations to anyone / from approved domains only

Question 28

What option is available for Invite Links ?

Answer 28

One link for every product on your site

Question 29

If you approve a domain on your Site, can you still invite users outside of the approved domain ?

Answer 29

Yes, using

• invite links
• user invites (with setting “Existing users can send invitations to anyone”)