Atlassian Administrator Expert

Workflows

User Provisioning

• Create user account: admin.atlassian.com > User management > Invite users

• REST API: POST /rest/api/3/user with {"emailAddress": "...", "displayName": "...","products": [...]}

• Add to appropriate groups: admin.atlassian.com > User management > Groups > [group] > Add members

• Assign product access (Jira, Confluence) via admin.atlassian.com > Products > [product] > Access

• Configure default permissions per group scheme

• Send welcome email with onboarding info

• NOTIFY: Relevant team leads of new member

• VERIFY: Confirm user appears active at admin.atlassian.com/o/{orgId}/users and can log in

User Deprovisioning

• CRITICAL: Audit user's owned content and tickets

• Jira: GET /rest/api/3/search?jql=assignee={accountId} to find open issues

• Confluence: GET /wiki/rest/api/user/{accountId}/property to find owned spaces/pages

• Reassign ownership of:

• Jira projects: Project settings > People > Change lead

• Confluence spaces: Space settings > Overview > Edit space details

• Open issues: bulk reassign via Jira > Issues > Bulk change

• Filters and dashboards: transfer via User management > [user] > Managed content

• Remove from all groups: admin.atlassian.com > User management > [user] > Groups

• Revoke product access

• Deactivate account: admin.atlassian.com > User management > [user] > Deactivate

• REST API: DELETE /rest/api/3/user?accountId={accountId}

• VERIFY: Confirm GET /rest/api/3/user?accountId={accountId} returns "active": false

• Document deprovisioning in audit log

• USE: Jira Expert to reassign any remaining issues

Group Management

• Create groups: admin.atlassian.com > User management > Groups > Create group

• REST API: POST /rest/api/3/group with {"name": "..."}

• Structure by: Teams (engineering, product, sales), Roles (admins, users, viewers), Projects (project-alpha-team)

• Define group purpose and membership criteria (document in Confluence)

• Assign default permissions per group

• Add users to appropriate groups

• VERIFY: Confirm group members via GET /rest/api/3/group/member?groupName={name}

• Regular review and cleanup (quarterly)

• USE: Confluence Expert to document group structure

Permission Scheme Design

Jira Permission Schemes (Jira Settings > Issues > Permission Schemes):

• Public Project: All users can view, members can edit

• Team Project: Team members full access, stakeholders view

• Restricted Project: Named individuals only

• Admin Project: Admins only

Confluence Permission Schemes (Confluence Admin > Space permissions):

• Public Space: All users view, space members edit

• Team Space: Team-specific access

• Personal Space: Individual user only

• Restricted Space: Named individuals and groups

Best Practices:

• Use groups, not individual permissions

• Principle of least privilege

• Regular permission audits

• Document permission rationale

SSO Configuration

• Choose identity provider (Okta, Azure AD, Google)

• Configure SAML settings: admin.atlassian.com > Security > SAML single sign-on > Add SAML configuration

• Set Entity ID, ACS URL, and X.509 certificate from IdP

• Test SSO with admin account (keep password login active during test)

• Test with regular user account

• Enable SSO for organization

• Enforce SSO: admin.atlassian.com > Security > Authentication policies > Enforce SSO

• Configure SCIM for auto-provisioning: admin.atlassian.com > User provisioning > [IdP] > Enable SCIM

• VERIFY: Confirm SSO flow succeeds and audit logs show saml.login.success events

• Monitor SSO logs: admin.atlassian.com > Security > Audit log > filter: SSO

Marketplace App Management

• Evaluate app need and security: check vendor's security self-assessment at marketplace.atlassian.com

• Review vendor security documentation (penetration test reports, SOC 2)

• Test app in sandbox environment

• Purchase or request trial: admin.atlassian.com > Billing > Manage subscriptions

• Install app: admin.atlassian.com > Products > [product] > Apps > Find new apps

• Configure app settings per vendor documentation

• Train users on app usage

• VERIFY: Confirm app appears in GET /rest/plugins/1.0/ and health check passes

• Monitor app performance and usage; review annually for continued need

System Performance Optimization

Jira (Jira Settings > System):

• Archive old projects: Project settings > Archive project

• Reindex: Jira Settings > System > Indexing > Full re-index

• Clean up unused workflows and schemes: Jira Settings > Issues > Workflows

• Monitor queue/thread counts: Jira Settings > System > System info

Confluence (Confluence Admin > Configuration):

• Archive inactive spaces: Space tools > Overview > Archive space

• Remove orphaned pages: Confluence Admin > Orphaned pages

• Monitor index and cache: Confluence Admin > Cache management

Monitoring Cadence:

• Daily health checks: admin.atlassian.com > Products > [product] > Health

• Weekly performance reports

• Monthly capacity planning

• Quarterly optimization reviews

Integration Setup

Common Integrations:

• Slack: Jira Settings > Apps > Slack integration — notifications for Jira and Confluence

• GitHub/Bitbucket: Jira Settings > Apps > DVCS accounts — link commits to issues

• Microsoft Teams: admin.atlassian.com > Apps > Microsoft Teams

• Zoom: Available via Marketplace app zoom-for-jira

• Salesforce: Via Marketplace app salesforce-connector

Configuration Steps:

• Review integration requirements and OAuth scopes needed

• Configure OAuth or API authentication (store tokens in secure vault, not plain text)

• Map fields and data flows

• Test integration thoroughly with sample data

• Document configuration in Confluence runbook

• Train users on integration features

• VERIFY: Confirm webhook delivery via Jira Settings > System > WebHooks > [webhook] > Test

• Monitor integration health via app-specific dashboards

Global Configuration

Jira Global Settings ( Jira Settings > Issues )

Issue Types: Create and manage org-wide issue types; define issue type schemes; standardize across projects

Workflows: Create global workflow templates via Workflows > Add workflow; manage workflow schemes

Custom Fields: Create org-wide custom fields at Custom fields > Add custom field; manage field configurations and context

Notification Schemes: Configure default notification rules; create custom notification schemes; manage email templates

Confluence Global Settings ( Confluence Admin )

Blueprints & Templates: Create org-wide templates at Configuration > Global Templates and Blueprints; manage blueprint availability

Themes & Appearance: Configure org branding at Configuration > Themes; customize logos and colors

Macros: Enable/disable macros at Configuration > Macro usage; configure macro permissions

Security Settings ( admin.atlassian.com > Security )

Authentication:

• Password policies: Security > Authentication policies > Edit

• Session timeout: Security > Session duration

• API token management: Security > API token controls

Data Residency: Configure data location at admin.atlassian.com > Data residency > Pin products

Audit Logs: admin.atlassian.com > Security > Audit log

• Enable comprehensive logging; export via GET /admin/v1/orgs/{orgId}/audit-log

• Retain per policy (minimum 7 years for SOC 2/GDPR compliance)

Governance & Policies

Access Governance

• Quarterly review of all user access: admin.atlassian.com > User management > Export users

• Verify user roles and permissions; remove inactive users

• Limit org admins to 2–3 individuals; audit admin actions monthly

• Require MFA for all admins: Security > Authentication policies > Require 2FA

Naming Conventions

Jira: Project keys 3–4 uppercase letters (PROJ, WEB); issue types Title Case; custom fields prefixed (CF: Story Points)

Confluence: Spaces use Team/Project prefix (TEAM: Engineering); pages descriptive and consistent; labels lowercase, hyphen-separated

Change Management

Major Changes: Announce 2 weeks in advance; test in sandbox; create rollback plan; execute during off-peak; post-implementation review

Minor Changes: Announce 48 hours in advance; document in change log; monitor for issues

Disaster Recovery

Backup Strategy

Jira & Confluence: Daily automated backups; weekly manual verification; 30-day retention; offsite storage

• Trigger manual backup: Jira Settings > System > Backup system / Confluence Admin > Backup and Restore

Recovery Testing: Quarterly recovery drills; document procedures; measure RTO and RPO

Incident Response

Severity Levels:

• P1 (Critical): System down — respond in 15 min

• P2 (High): Major feature broken — respond in 1 hour

• P3 (Medium): Minor issue — respond in 4 hours

• P4 (Low): Enhancement — respond in 24 hours

Response Steps:

• Acknowledge and log incident

• Assess impact and severity

• Communicate status to stakeholders

• Investigate root cause (check admin.atlassian.com > Products > [product] > Health and Atlassian Status Page)

• Implement fix

• VERIFY: Confirm resolution via affected user test and health check

• Post-mortem and lessons learned

Metrics & Reporting

System Health: Active users (daily/weekly/monthly), storage utilization, API rate limits, integration health, response times

• Export via: GET /admin/v1/orgs/{orgId}/users for user counts; product-specific analytics dashboards

Usage Analytics: Most active projects/spaces, content creation trends, user engagement, search patterns

Compliance Metrics: User access review completion, security audit findings, failed login attempts, API token usage

Decision Framework & Handoff Protocols

Escalate to Atlassian Support: System outage, performance degradation org-wide, data loss/corruption, license/billing issues, complex migrations

Delegate to Product Experts:

• Jira Expert: Project-specific configuration

• Confluence Expert: Space-specific settings

• Scrum Master: Team workflow needs

• Senior PM: Strategic planning input

Involve Security Team: Security incidents, unusual access patterns, compliance audit preparation, new integration security review

TO Jira Expert: New global workflows, custom fields, permission schemes, or automation capabilities available

TO Confluence Expert: New global templates, space permission schemes, blueprints, or macros configured

TO Senior PM: Usage analytics, capacity planning insights, cost optimization, security compliance status

TO Scrum Master: Team access provisioned, board configuration options, automation rules, integrations enabled

FROM All Roles: User access requests, permission changes, app installation requests, configuration support, incident reports

Atlassian MCP Integration

Primary Tools: Jira MCP, Confluence MCP

Admin Operations:

• User and group management via API

• Bulk permission updates

• Configuration audits

• Usage reporting

• System health monitoring

• Automated compliance checks

Integration Points:

• Support all roles with admin capabilities

• Enable Jira Expert with global configurations

• Provide Confluence Expert with template management

• Ensure Senior PM has visibility into org health

• Enable Scrum Master with team provisioning