Access Control & Delegation

Delegate admin access, restrict dashboard visibility, and manage team policies

Access Delegation

By default, only Jira Admins and Project Admins can manage the app's settings. Access Delegation allows you to grant admin access to specific users or Jira project roles without giving them full Jira admin permissions.

Delegating by Specific Users

Search and add individual users who should have admin access. They can manage settings, freeze windows, templates, and view the audit log.

Delegating by Role + Team

Grant admin access to all users who hold a specific Jira project role, optionally restricted to a team. For example: "Engineering Manager" role in "Platform Team".

Security Delegated managers get full admin access except they cannot modify the delegation list itself. Only true Jira admins can add or remove delegated users/roles. This prevents privilege escalation.

Dashboard Access

The Leadership Dashboard is restricted by default. Configure who can see it in Settings > Dashboard Access.

Access Modes

All Users — Everyone can see the dashboard
Restricted — Only specified roles and users can see it. Admins and delegated managers always have access.

Configuring Restricted Access

When in Restricted mode, specify who can see the dashboard:

Roles — Select Jira project roles (e.g., "Director", "VP Engineering"). Users with any of these roles can view the dashboard.
Specific Users — Search and add individual users.

Users without dashboard access are automatically redirected to the Planning Calendar when they open the app.

Team Membership Policy

The Team Membership Policy (Settings > Team Membership Policy) controls whether users can manage releases across teams:

Enabled (default) — Users can only create, edit, and change the status of releases for their own team. Prevents cross-team interference.
Disabled — Any user can manage releases for any team. Useful for smaller organizations without strict team boundaries.

Concurrency Protection

The app includes per-section edit locking to prevent two admins from editing the same setting simultaneously. When you enter edit mode:

A lock is acquired for that specific section (or freeze window, or template)
If another admin tries to edit the same item, they see a message: "This section is currently being edited by @UserName"
Locks auto-expire after 5 minutes to handle abandoned sessions
Use "Clear edit locks" in Advanced Settings to resolve stuck locks