Guides by role
Administrator guide
Install, name the right people, set the language and the edition, and keep control of access. A typical week.
Role: Administrator You hold the Jira permission "Administer Jira". In the app, that right is the Administrator role: everything a compliance manager does, plus managing roles and settings. The server asks Jira for it on every call with your identity; it is never read from the browser.
Your typical week
| When | What you do | Screen |
|---|---|---|
| First time | Install the app, choose the language of messages, name at least one compliance manager | Settings |
| Every week | Check that the right people hold the right roles (joiners, leavers, end dates) | Settings |
| Every quarter | Start or have someone start an access review, including the "Review of the access to NexusGRC" for the app's roles | Access reviews |
| Before a renewal or an audit | Check the edition and licence, generate the audit pack | Editions and licensing, Audit pack |
What is yours, and yours alone
- Granting and removing roles, to a person or a Jira group, with an end date if you wish, from Settings › Access. Also choose the default access (Reader or Contributor) and, in the Advanced edition, build custom roles. The step-by-step is in Roles.
- Installation settings: language of messages, continuous monitoring. The server opens them only to the Administrator role or to a Jira administrator.
- Overriding the separation of duties (approving what you wrote: statement of applicability, policy, AI system): the gap is recorded in the audit log.
Reserved for administrators
Only the Administrator role and the Jira administrator right allow managing roles; no other role, custom ones included, does. Gaining a role never takes a right away.
Your first session
- Open "Settings" (its menu entry only shows for administrators).
- Grant the role to your first compliance manager. Until someone holds an editing role, only administrators can edit.
- Check the active edition: without a licence the app is read-only for everyone.
- Let the compliance manager go through the first steps.
What the app does not do
- It removes no access in Jira: an access review lists what to remove, and you remove it by hand.
- It creates no account and reads no password.
- It does not tell you your organization is compliant: see Frameworks covered.
- It cannot lock you out as a Jira administrator. If Jira does not answer, the app refuses, unless a role already granted is enough.
Going further
Roles and permissions · Editions and licensing · Security and privacy · Training kit
Was this page helpful?