AuditAdmin for Jira (Access, Users, Groups, Roles & Access)

What you can audit:

• Global Permissions — see which users, groups, and apps hold each global permission (Administer Jira, Browse Users, Bulk Changes, etc.)
• Project Permissions — break down access by permission scheme, role, group, and user across all projects
• By User — pick any user and instantly see all their groups, project roles (direct and group-inherited), and work item security levels
• By Group — select a group to view its members (with active/inactive status), assigned projects, and security levels
• Project Roles — choose a project and get a full breakdown of every role: direct assignees, mapped groups, member counts, and whether the role is actually used in the permission scheme. Expand groups to reveal individual members.

Audit results can be exported to CSV or JSON.

AAfJ does not require full admin privileges, but you can restrict plugin access to specific users, ensuring only trusted individuals can view permission data.