How-to
How to find unused Jira groups
A group in Jira Cloud is in use if it grants product access, appears in a permission scheme that a project uses, or holds a project role. If it does none of those, it's a candidate for removal. Jira doesn't show all of this on one screen, so you check each place.
Check it by hand
- Product access. In Atlassian Administration, look at which groups give access to each product.
- Permission schemes. In Jira settings, open each permission scheme and search the page for the group name. Note which projects use the scheme. A scheme with no projects doesn't count.
- Project roles. In each project's settings, open the page where people and groups get roles and look for the group.
- Many projects? The REST API is faster.
/rest/api/3/permissionscheme?expand=permissionsreturns every scheme with its grants, and/rest/api/3/project/{key}/rolelists a project's roles.
Check these before you delete
Groups can also sit in global permissions, issue security schemes, notification schemes, workflow conditions, and filter or dashboard sharing. They may grant access in Confluence or another Atlassian product. And leave Atlassian's own groups alone, like site-admins and the atlassian-addons groups. Deleting one can lock admins out or break apps.
See every group's usage in one table
The Groups tab in Access & License Audit shows any group's product access, the schemes that name it with their projects, and its project roles. Groups used in none of them appear on the Findings tab. Atlassian's default groups are never listed as unused. You can copy all group usage as CSV. The places in the section above still need a look by hand.
