Skip to main content
Opal’s integration with Jira allows you to manage access to Jira groups.

Supported resources

Requirements

Before you begin, you must:
  • Be an Opal Admin
  • Be on version 1.1194.0, if you self-host Opal

1. Create a Jira admin API key

To allow Opal to access your Jira users and groups and grant permission to assign and remove users from groups, you must first create an Admin API key. In admin.atlassian.com, go to Settings > API keys > Create API key (choose an API key with scopes). Select the following scopes:
  • read:accounts:admin
  • read:directories:admin

2. Create a Jira API token

Opal uses a site-scoped API token to read and manage Jira groups. Go to id.atlassian.com > Security > API tokens > Create API token with scopes and select:
  • read:group:jira
  • write:group:jira
  • read:user:jira

3. Create Jira app in Opal

In Opal, go to Inventory > +App and select Jira. Name your Jira app, select an App admin, provide a description, and enter your Site Domain (e.g., yourcompany for yourcompany.atlassian.net), Org ID, and Admin API Key from step 1 plus the API Token and admin Email from step 2. Opal validates the connection with the API token and email, so the app can’t be created without them. You can find your Org ID in the URL when you visit admin.atlassian.com: https://admin.atlassian.com/o/<your-org-id>/... After you save the app, you can import groups from … > Import items.
Last modified on October 27, 2026