Allowing your users to access parts of the app

Allowing your users to access parts of the app

Normally Automated User Cleanup and Deactivator is only accessible by the org-admin/site-admin. There is a way of configuring your users to access parts of the app.

As an org-admin/site-admin, go to the Settings page and scroll down to Permissions. Here you can configure custom permissions for any of your groups.

Screenshot 2025-09-15 at 14.24.41 UTC-20250915-142446.png

In this image we have given the following permissions:

  • The users in the group kantega-sso-role-real_users have Read-Only access to the Users page (read:users) and they are able to look at the userbase-reports on the dashbaord (read:userbase-reports)

  • The users in the group external consultants are only able to go to the Dashboard and read the userbase reports (read:userbase-reports)

  • The users in the group jira-software-user-access-admins-ksso are able to read and perform actions on users in the Users page (read:users & edit:users), and able to acces the userbase reports on the Dashboard(read:userbase-reports)

Available permissions

Site-admin/org-admins always have access to every part of the app.

"read:userbase-reports", // Can view the userbase reports on the dashboard "read:users", // Can view user table and user details "edit:users", // Can perform user management actions like edit access, delete, and deactivate "read:settings", // Can view the stored settings in the settings page "edit:settings", // Can modify the stored settings in the settings page "edit:permissions", // Can modify the stored permissiones in the settings page. Needed in adition to edit:settings "read:schedules", // Can view the scheduled jobs in the settings page and on the dashboard page "edit:schedules", // Can create new or edit existing scheduled jobs "create:manual-cleanup", // Can create and start manual cleanup jobs "read:cleanup-history", // Can view the history of previous jobs "download:cleanup-history", // Can download the history of previous jobs as files "edit:kantega-roles", // Can edit the Kantega roles