Read-only Jira governance
Permission Auditor for Jira is a read-only Jira Cloud app for admins, security teams, and compliance owners who need to answer a simple question with evidence: who has access to what, and why?
The app scans your Jira permission model, resolves effective access across schemes, roles, groups, and global permissions, and presents the results in one place. It also tracks changes between scans, flags risky access patterns, and exports CSV or PDF evidence for reviews and audits.
Permission Auditor for Jira helps you:
review effective permissions across Jira Cloud projects from one dashboard
explain why access exists with grant-chain detail
detect broad, risky, or unusual access patterns
track permission drift between scans
export audit-ready CSV and PDF reports
The app is read-only. It does not change your Jira permissions or project configuration.
Everything an admin needs before the first meaningful permission snapshot.
Before using the app, make sure:
Scan duration depends on the size and complexity of your Jira site. Larger sites may take several minutes to complete a full scan.
After installation, open the app from Jira admin:
Jira Settings.Apps.Permission Auditor to review permission results.Permission Auditor Settings to manage scan policy and related settings.If your Marketplace license is inactive, the app shows a license-required state until the subscription is active.
On first use, the dashboard shows a welcome state until the app has completed a scan.
Permission Auditor.Scan Now, or wait for the scheduled scan to run.The first scan builds the initial permission snapshot used by the dashboard, change tracking, anomaly review, and exports.
The app is built to show not just access, but also the reason behind that access.
The main dashboard shows effective access across your Jira projects. Use the filters and search controls to narrow the result set and inspect the users, groups, roles, projects, and permissions involved.
Permission detail explains why access exists. A typical grant chain may include the permission scheme, the project role or group that received the grant, and the user or group membership that made the permission effective.
After the first completed baseline scan, later scans can show what changed between snapshots. This helps you review added access, removed access, scheme changes, and other permission drift over time.
The app highlights suspicious or high-risk patterns such as unusually broad access, anonymous exposure, or admin-heavy project access that may deserve review.
Exports, admin controls, and recurring-review workflows are part of the core experience.
Permission Auditor for Jira supports:
Exports are generated from the app's current permission snapshot and are intended to support recurring access reviews, audit preparation, and internal investigation.
The Permission Auditor Settings page lets Jira admins manage operational settings such as:
Settings are intended for Jira admins. Other users should not rely on access to the app pages.
Permission Auditor for Jira runs on Atlassian Forge and uses Atlassian-managed hosting and authentication boundaries. The app is read-only and does not intentionally send customer data to external third-party processors.
Public customer-facing privacy policy for Marketplace review and ongoing operations.
Public customer-facing end user terms for Marketplace review and ongoing operations.
Public customer-facing support for Marketplace review and ongoing operations.
Public customer-facing security disclosure for Marketplace review and ongoing operations.
Support and security contact: workaroundapps1@gmail.com
Straight answers for admins evaluating installation, licensing, and ongoing use.
No. Permission Auditor for Jira is read-only. It scans and reports on Jira permission data but does not modify permissions.
The app is intended for Jira admins, compliance owners, and security teams working with Jira Cloud access reviews.
If no scan has completed yet, run your first scan from the dashboard or wait for the scheduled scan. If the app shows a license-required message, confirm that your Atlassian Marketplace subscription is active.
Yes. The app is designed for repeated scan-and-review workflows, including change tracking and export-based audit evidence.
Not necessarily. The product evolves over time, so exact layouts, labels, and screenshots may change between versions. This page is intended to describe the product workflow at a high level.