Access Governance for Jira

Jira Cloud

Who can reach what across your Jira site, and what a permission change will actually break before you make it.

What it does

Jira spreads access across groups, permission schemes, project roles and licenses, and no single screen shows you the result. Answering “what can this person actually get to?” means opening four admin pages and holding the answer in your head.

Access Governance reads that configuration and shows it in one place. It opens as a full-page admin screen under Settings → Apps, and only Jira administrators can open it.

Effective access. What one person can reach, and through which group or role they got it. The same question in reverse for a project.
Impact before the change. Pick a group, see what loses access if you remove it, then apply the change and keep a record you can undo.
Unused licenses. Which accounts have gone quiet, and what freeing those seats would be worth at your real per-seat price.
Access reviews. Recertify on a cadence — keep or revoke, sign off, apply, and export the evidence.

Read the guide

Where your data lives

It is an Atlassian Forge app and it is read-only by default. It reads your permission configuration to build a picture of who has access, and stores that picture only in Atlassian-hosted Forge storage, in your own site’s data-residency region.

It declares no external network access, so nothing is sent to Schema Software or to any third party — there is no server here to send it to. When you uninstall, the stored data goes with it.

Read the privacy policy

Two limits worth knowing first

Inactivity is an activity signal, not a login time

“Last issue activity” is the most recent time someone acted on an issue. It is a strong indicator of who is active, but a privacy-safe app cannot see exact last-login times — so confirm before removing anyone.

Two kinds of access cannot be read

Issue-security level membership and global permissions such as Administer Jira are not readable by a privacy-safe app, so they are not shown. The app points you at the right Jira admin page to check them yourself where it matters.

Get it on the Atlassian Marketplace

Atlassian administers every trial, purchase, renewal and refund. Nothing is bought here.

Documentation and terms

User guide: Installing, running a scan, and every tab in the app, with screenshots.
Support: How to get help, what we aim to answer in, and where to send feedback.
End User License Agreement: The Bonterms Standard End User Agreement, plus our Provider-Specific Terms.
Data Processing Addendum: How personal data is processed, with the schedules and subprocessor list.
Privacy Policy: What the app reads, where it is stored, and your rights.
Security Measures: The technical and organizational controls.
Subprocessors: Third parties that process customer data. There is one.