Configuring roles and permissions

Learn about roles and permissions available in Insight, and how to grant them to specific users or groups. At the bottom of the page, you can also find a detailed permission matrix that will tell you how permissions correspond to tasks that users can perform.

Roles

A role is a set of permissions granted to Jira users or groups to view or modify data in Insight. Here's a summary of available roles:

RoleDescription
Insight Administrator

This role can perform all actions in Insight. This includes:

  • Configuring Insight globally
  • Managing individual schemas
Insight Managers

This role can execute the following tasks on an object schema. This includes:

  • Configuring all schema details
  • Viewing objects
  • Searching for objects using basic and advanced search
  • Creating and editing objects
  • Exporting objects
  • Printing QR codes and labels 
Insight Developers

This role means builders or creators, rather than e.g. software developers. It can execute the following tasks on an object schema:

  • Viewing objects
  • Searching for objects using basic and advanced search
  • Creating and editing objects
  • Exporting objects
  • Printing QR codes and labels 
Insight Users

This role can do the following on an object schema:

  • Viewing objects
  • Searching for objects using basic and advanced search
  • Exporting objects
  • Printing QR codes and labels

Permission levels

Insight offers three levels of permissions:

LevelDescription
Global permissions

These permissions allow you to configure the entire Insight app.

By default, as part of Global permissions, the jira-administrators group is mapped to the Insight administrator role. So, if you're a Jira administrator for your Jira instance, then you can perform all actions in Insight.

However, if you remove this default mapping, then you wouldn't be able to execute tasks despite of being a Jira administrator.

Object schema permissionsThese are permissions to configure and execute actions on the object schema level.
Object type permissionsThese are permissions to execute actions on an individual object type. You can view a detailed matrix of all tasks and corresponding permissions at the bottom of this page.

Granting permissions

Insight automatically grants the Insight Administrator role to all Jira admins. However, it might not inherit permissions from any particular active directory running on your Jira instance.

You need to be a Jira admin to be able to assign users or groups to a specific role in Insight.

Granting global permissions

  1. In the top navigation bar, select Insight > Configure.
  2. Switch to the Roles tab.
  3. Assign users or groups to the administrator role.

Granting object schema permissions

  1. In the top navigation bar, select Insight > Object schemas.
  2. Open your object schema.
  3. In the top-right, select Object schema > Configure.
  4. Switch to the Roles tab.
  5. Assign users or groups to the roles.

Granting object type permissions

  1. Open your object type.
  2. In the top-right, select Object type > Configure.
  3. Switch to the Roles tab.
  4. Assign users or groups to the roles.

Good to know

  • Object type permissions take precedence over object schema permissions. For example, a user might be assigned to the User role on the schema (to not make any changes), but then have a more powerful Developer role on a specific object type, so they can create objects.
  • If you want users to work with object types (and objects) you need to grant them permissions for object types, but also for the schema (at least User permissions, so they can view it). Without giving them any permissions for the schema, they won't be able to access it.
  • If you don't specify permissions for object types, they will be inherited from the object schema.

Permission matrix

Here's how roles relate to specific actions users can complete.

Insight functionsInsight Users

Insight DevelopersInsight Managers

Insight Administrators

Jira Administrators

Report Jira issues on Insight objects

(tick)

(tick)

(tick)

(tick)

(tick)

Search for Insight objects and attributes

(tick)

(tick)

(tick)

(tick)

(tick)

View object graph explorer

(tick)

(tick)

(tick)

(tick)

(tick)

View object type graph explorer

(tick)

(tick)

(tick)

(tick)

(tick)

View Insight custom field

(tick)

(tick)

(tick)

(tick)

(tick)

Create/Edit Insight objects

(tick)

(tick)

(tick)

(tick)

Move Objects (Object Type To)

Note that this function applies to roles on the Object Type level


(tick)

(tick)

(tick)

(tick)

Move Objects (Object Type From)

Note that this function applies to roles on the Object Type level



(tick)

(tick)

(tick)

Delete Insight objects

(tick)

(tick)

(tick)

Create/Edit/Delete attributes

(tick)

(tick)

(tick)

Modify Insight object schema

(tick)

(tick)

(tick)

Delete Insight object schema


(tick)

(tick)

Create Insight object schema


(tick)

(tick)

Manage icons

(tick)

(tick)

(tick)

Manage references

(tick)

(tick)

(tick)

Import object schemas

(tick)

(tick)

(tick)

Create/Configure/Enable imports

(tick)

(except LDAP and database)

(tick)

(except LDAP and database)

(tick)
Manage global Insight permissions


(tick)

(tick)

Create/Manage Insight custom field



(tick)

Move object type (drag & drop)


(tick)

(tick)

Delete object type

(tick)

(tick)

(tick)

Add/edit Insight post-functions in Jira workflows



            (tick)

Last modified on Jun 30, 2023

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.