What are the different types of admin roles?
Which user management experience do you have?
Go to Atlassian Administration. Select your organization if you have more than one. You can identify which user management experience you have by checking where your Users page is located.
Centralized | Original |
|---|---|
In Atlassian Administration, Users is located in Directory.  | In Atlassian Administration, Users is located in Apps >  |
Β
Centralized user management content
Admin roles allow organizations to delegate responsibilities among several people, instead of relying on one person. What you can access and configure is determined by the type of admin you are. Itβs possible to have multiple admin roles at the same time.
This page only outlines admin roles granted through Atlassian Administration. If you want to know more about other admins, read the documentation for:
Admin roles
Organization admin
When you create an organization, you automatically become an organization admin. Other organization admins can assign you the organization admin role.
An organization admin is the highest level of admin and can complete any administrative task in Atlassian Administration. They are the only admins with access to the organizationβs settings and are responsible for managing users and groups within their organization. The role allows limited access to manage billing.
We recommend you always have more than one organization admin in case one account is lost or compromised. Only organization admins can add or manage other organization admins.
Site admin
Site admins in the centralized user management experience have different permissions to the site admins in the original user management experience.
Site admins can't manage app access for the sites they administer. To allow them to manage app access, you can make them user access admins for apps in the site.
Site admins can be assigned administrative tasks over one or many sites in an organization. Only organization admins can assign or revoke the site admin role to or from users.
Site admins can access Atlassian Administration and complete tasks related to the specific site they are administering. This includes adding new apps to the site and managing Marketplace apps installed on the site. The role allows limited access to manage billing.
User access admin
The user access admin role is only available if you have the centralized user management.
Unlike an organization admin, a user access admin has limited access to Atlassian Administration. Their main task is to manage user access to the app they administer. For example, an organization might have a user access admin that manages access for Confluence, and another user access admin that manages access for Jira apps.
A user access admin canβt log in to the app they administer. This means donβt count as billable users for the app they administer, unless theyβre granted an a role that gives access to that app.
App admin
An app admin can manage administration settings for a specific app. They donβt have access to Atlassian Administration. With the exception of the Jira family, app admins can access the content within the app they administer. Itβs possible to be an app admin for one or more Atlassian apps.
What features are available to each admin role in Atlassian Administration?
Features available with an admin role are marked with a β
Features available with an admin role for their assigned site/app are marked with a πΈ
Features unavailable with an admin role are marked with a β
Not all features are available to the organization admin role. Organization admins can assign themselves the relevant role to access all of the following features.
Manage users
Β | Organization admin | Site admin | User access admin | App admin |
|---|---|---|---|---|
View users in organization | β | β | β | β |
Configure user access settings | β | β | β | β |
Update managed accounts | β | β | β | β |
Manage portal-only accounts | β | β | β | β |
Make another user an organization admin | β | β | β | β |
Make another user a site admin | β | β | β | β |
Make another user a user access admin | β | β | β | β |
Make another user an app admin | β | β | πΈ Exception: For the Jira family, only an organization admin can make another user an app admin. | β |
Make another user a project and space admin | β | β | β | β |
Manage groups
Β | Organization admin | Site admin | User access admin | App admin |
|---|---|---|---|---|
Create or modify a group | β | β | πΈ For groups that only give access to apps they administer. Only an organization admin can modify a group that grants app admin for Jira. | β |
Add or remove users from a group | β | β | πΈ For groups that only give access to apps they administer. Only an organization admin can add or remove users from a group that grants app admin for Jira. | β |
Configure default groups for Atlassian apps | β | β | β | β |
Manage Atlassian apps and Marketplace apps
Β | Organization admin | Site admin | User access admin | App admin |
|---|---|---|---|---|
Access to Atlassian apps | β | β | β | β Exception: Confluence app admins automatically get access to the app. |
Approve or deny a request to access Atlassian apps | β | πΈ | β | β |
Add or remove users from Atlassian apps | β | β | πΈ | β |
Configure Atlassian app settings | β | β | β | β |
Add Atlassian apps to an organization | β | πΈ | β | β |
Add Marketplace apps to Atlassian apps | β Requires also having the app admin role for the Atlassian app. | πΈ | β | β Exception: App admins can add a Marketplace app if itβs free and doesnβt require permission to act on a userβs behalf. |
Manage Connect apps | β | πΈ | β | β |
Manage security
Β | Organization admin | Site admin | User access admin | App admin |
|---|---|---|---|---|
Set up and manage user provisioning | β | β | β | β |
Set up and manage SAML and SSO | β | β | β | β |
Manage passwords | β | β | β | β |
Set up and manage two-step verification | β | β | β | β |
View organization audit log | β | β | β | β |
Track storage | β | πΈ | β | β |
Update security settings | β | β | β | β |
Update API keys | β | β | β | β |
Manage billing
Weβre rolling out an improved billing experience. The features that your administration roles can manage are different depending on which billing experience you have. To understand what billing tasks organization, site, and user access admins can do, see Understand billing administration.
Original user management content
Admin roles allow organizations to delegate responsibilities among several people, instead of relying on one person. What you can access and configure is determined by the type of admin you are. Itβs possible to have multiple admin roles at the same time.
This page only outlines admin roles granted through Atlassian Administration. If you want to know more about other admins, read the documentation for:
Admin roles
Organization admin
When you create an organization, you automatically become an organization admin. Other organization admins can assign you the organization admin role.
An organization admin is the highest level of admin and can complete any administrative task in Atlassian Administration. They are the only admins with access to the organizationβs settings and are responsible for managing users and groups within their organization. The role allows limited access to manage billing.
We recommend you always have more than one organization admin in case one account is lost or compromised. Only organization admins can add or manage other organization admins.
Site admin
This only applies to the site admin role for the original user management. See site admin for the centralized user management if you have the centralized experience.
A site admin manages the users, groups, and administration settings of the site theyβve been assigned to (as well as any apps that sit within this site). Site admins have access to any content within their assigned site. The role allows limited access to manage billing.
App admin
An app admin can manage administration settings for a specific app. They donβt have access to Atlassian Administration. With the exception of the Jira family, app admins can access the content within the app they administer. Itβs possible to be an app admin for one or more Atlassian apps.
What features are available to each admin role in Atlassian Administration?
Features available with an admin role are marked with a β
Features available with an admin role for their assigned site/app are marked with a πΈ
Features unavailable with an admin role are marked with a β
Not all features are available to the organization admin role. Organization admins can assign themselves the relevant role to access all of the following features.
Manage users
Β | Organization admin | Site admin | App admin |
View users in organization | β | πΈ | β |
Configure user access settings | β | β | β |
Update managed accounts | β | β | β |
Manage portal-only accounts | β | πΈ | β |
Make another user an organization admin | β | β | β |
Make another user an app admin | β | πΈ | β |
Make another user a site admin | β | πΈ | β |
Make another user a project and space admin | β | β | β |
Manage groups
Β | Organization admin | Site admin | App admin |
|---|---|---|---|
Create or modify a group | β | πΈ | β |
Add or remove users from a group | β | πΈ | β |
Configure default groups for Atlassian apps | β | πΈ | β |
Manage Atlassian apps and Marketplace apps
Β | Organization admin | Site admin | App admin |
|---|---|---|---|
Access to Atlassian apps | β | πΈ | β Exception: Confluence app admins automatically get access to the app. |
Approve or deny a request to access Atlassian apps | β | πΈ | β |
Add or remove users from an Atlassian app | β | πΈ | β |
Configure Atlassian app settings | β | β | β |
Add Atlassian apps to an organization | β | πΈ | β |
Add Marketplace apps to Atlassian apps | β Requires also having the app admin role for the Atlassian app. | β Requires also having the app admin role for the Atlassian app. | β |
Manage Connect apps | β | πΈ | β |
Manage security
Β | Organization admin | Site admin | App admin |
|---|---|---|---|
Set up and manage user provisioning | β | β | β |
Set up and manage SAML and SSO | β | β | β |
Manage passwords | β | β | β |
Set up and manage two-step verification | β | β | β |
View organization audit log | β | β | β |
Track storage | β | β | β |
Update security settings | β | β | β |
Update API keys | β | β | β |
Manage billing
Weβre rolling out an improved billing experience. The features that your administration roles can manage are different depending on which billing experience you have. To understand what billing tasks organization and site admins can do, see Understand billing administration.
Was this helpful?