Jira Permission Scheme and Project Role Review (Defensive)
Check who can create, transition, delete and administer.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review Jira permissions as a defensive review of my own site. Projects, permission schemes and project roles with members: [PROJECTS_AND_ROLES]. Who has administrator rights globally and per project: [ADMINS]. Groups and how people join them: [GROUPS]. Sensitive projects (HR, security, finance): [SENSITIVE_PROJECTS]. Our policy: [POLICY]. Table: Project, Scheme, Roles with members, Admin count, Direct permissions, Sensitive, Risk and Fix. Check for too many administrators, individuals with direct permissions instead of groups, anonymous or very broad browse access to sensitive projects, delete permission given widely, former staff still active, shared accounts, and copied schemes with small differences. Describe risks in plain words, such as an administrator who can delete projects, browse permission for any logged-in user in a project holding HR matters, or someone who left still in the developers group. Show the arithmetic of sprawl: 14 projects on 9 schemes where 4 would do. Propose a small set of standard schemes (open, restricted, confidential) and an approvals process for scheme changes. Quarterly recertification: an email to project leads with a table of current members and roles, a request to reply with removals within seven days, and an escalation if there is no reply; keep evidence (date, reviewer, changes, members before and after). Include a joiner, mover and leaver checklist. Recommend least privilege and ownership, not workarounds. Mark admin screens and setting names [VERIFY], do not ask for more user details than needed, and say what you could not assess.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into ChatGPT, Gemini, Claude or another assistant.