Since 2009
TELCOMA Global / Access Review for Jira / Documentation
Who has access to Jira, reviewed and signed off.
Access Review takes a snapshot of everyone in every group on your Jira Cloud site, with their products, admin status and last activity. You record a decision for each person, sign the review off, and download the evidence file. The app only reads. It has no permission to change anything.
Install
Three steps, all inside Jira.
Find the app
In Jira go to Settings → Apps → Find new apps and search for Access Review.
Start the trial
Free for up to 10 users. Larger sites get a 30-day trial that rolls into a subscription unless you cancel from Manage apps.
Approve the permissions
Read permissions only. There is no write permission, so the app cannot change anything on your site.
Jira administrators open the app under Settings → Apps → Access Review. Nobody else can see it.
Start a review
Pick an activity window. Press the button. Come back in a minute.
- Choose the activity window: No activity in 30, 60, 90, 180 or 365 days. It only affects the activity column; everyone is listed either way.
- Click Start review. The snapshot runs in the background; you can close the page.
- The review is named after the quarter it was started in, for example Access review · Q4 2026, and stays Open until you sign it off.
The snapshot lists every member of every group on the site, including people whose groups grant no product, so an auditor sees the whole picture. For each person it records the products their groups grant, the groups themselves, whether any of them is an admin group, their most recent activity in the window (an issue change, comment, work log, or an issue created or reported) and whether they are new since the previous signed-off review.
Decide
Keep, Remove or Follow up, one row at a time or all at once.
- Each row has Keep, Remove and Follow up buttons and a Note. The bar at the top shows how many are still undecided.
- Keep all active non-admins marks Keep for everyone who was active in the window and holds no admin group, without touching rows you have already decided. On most sites that clears the routine rows in one click.
- Filters: search by name or email, product (or No product access), group, show (admins, active in the window, no activity, new since previous review) and decision.
- Admins get an Admin lozenge, people added since the last review get New, and people who became admins since then get New admin.
Every decision records who made it and when, and that goes into the evidence file.
Sign off and evidence
Complete the review, then download the file.
Complete review
Records who signed off and when, and locks the decisions. You can sign off with rows still undecided; the summary says how many. Reopen review unlocks it again.
Download Excel
One workbook, three sheets. Summary: site, window, dates, who signed off, counts and changes. Users: every person with products, groups, activity, decision, note, who decided and when. Groups: every group, what it grants, its members.
Download CSV
The Users sheet as a plain file, for tools that don't open Excel.
Any past review
Pick any of the last 12 reviews on the download panel. The Past reviews tab opens or deletes them.
Changes since last review
The next review starts from the last one you signed off.
Once a review has been signed off, every later review compares itself with it and shows what changed: users added, users removed, who became an admin, who gained a product. The counts are exact; the lists show up to 500 names each. The same comparison marks the New and New admin rows in the list, and the New since previous review filter brings them together.
Groups
Every group on the site, and what it grants.
The Groups tab lists every group, the products it grants (from Jira's application roles), how many members it has, how many of them are in this review, and whether it is empty. Filter to groups that grant a product, admin groups, or empty groups; empty groups are an easy clean-up. Admin groups are recognised by name: any group whose name contains admin, such as site-admins, org-admins, administrators or jira-admins-yoursite.
Your data
Nothing leaves Atlassian.
User names and account IDs, every group and its members, which groups grant which product, and the author and time of recent issue changes, comments and work logs. It does not read issue text, comment text or attachments.
Nothing. The app has no write permission.
Each review's snapshot (account IDs, groups, products, activity), the decisions and notes with who made them and when, and who signed off. The last 12 reviews are kept, in Atlassian's own storage for your site.
Nowhere. No servers of our own, no requests outside Atlassian. The evidence file is built in your browser and saved to your device.
Full details in the privacy policy.
Frequently asked
The questions admins ask first.
Does it remove anyone's access?
No. It records your decision and nothing else. To act on a Remove decision, change the person's groups in Atlassian Administration, or use Seat Reclaim for Jira, which frees inactive users' seats after you confirm and can undo the change.
How often should I run one?
Most frameworks expect a user access review at least quarterly: SOC 2 (CC6.2 and CC6.3) and ISO 27001 (control A.5.18) both ask for regular reviews of access rights. Start one each quarter; the app names it after the quarter and keeps the last 12.
Who counts as an admin?
Anyone in a group whose name contains "admin". Jira doesn't label admin groups for apps, so the name is the only signal. If your admin groups are named differently, filter by group instead.
What counts as activity?
Changing an issue, commenting, logging work, or creating or reporting an issue, inside the window you chose. Reading issues or browsing boards leaves no trace Jira can report, so a reader-only account shows as no activity.
Why are people without product access listed?
Because they are in groups, and group membership is what an access review covers. Filter by No product access to see only them, or by a product to see only its users.
Can I sign off with undecided rows?
Yes. The sign-off line and the evidence file state how many were left undecided, so nothing is hidden. Reopen the review if you want to finish them.
How is it priced?
Free for up to 10 users, then per user per month on your Atlassian invoice, with a free trial. The current price is on the Marketplace listing.
Support
Ask the people who built it.
When reporting a problem, include your site URL and what you expected to happen. We never need passwords or tokens.
Get help
One business day, usually much less.
- [email protected]
- Support page
- Known limits, what to include, status
- Response time
- Within one business day