1. Introduction
Change Management Lite brings change and problem management back to Jira Service Management Standard — the capabilities Atlassian moved to the Premium plan. It runs entirely on Atlassian infrastructure (Forge), stores everything in your own tenant, and sends no data anywhere: zero egress, Runs on Atlassian.
The app covers the full lifecycle: a cross-project change calendar, freeze and maintenance windows, automated risk scoring, conflict detection, multi-stage approvals with a CAB workbench, problem management with a known-error database, deployment tracking, a read-only stakeholder calendar, migration from JSM Premium, and governance and analytics — all on Standard.
2. Getting started
2.1 Installation
- Install Change Management Lite for Jira Service Management from the Atlassian Marketplace.
- Grant the requested permissions when prompted. The app is built on Atlassian Forge and runs entirely on Atlassian infrastructure — no external services.
- Open
Apps → Change Management Litefrom the Jira navigation to reach the change calendar and its sibling pages.
2.2 Where the app lives
- Global page
- Under
Apps → Change Management Lite. A sidebar groups the Change Calendar, the read-only Stakeholder Calendar, the CAB Workbench, and Change Analytics. - Queue pages
- Inside a JSM project’s
Queuessection: Changes and Problems. - Issue panel
- A Change Risk panel on the change issue view — risk score, conflicts, related incidents and failures.
- Customer portal
- A redacted Approval status panel on the request detail in the JSM help center.
- Admin
Jira settings → Apps → Change Management Lite Settings— windows, services, approval flows and CABs, org defaults, governance, audit log, the deployment webhook, and data export/import.
2.3 The setup wizard
The Changes queue detects whether your project has the three change work types — Normal change, Standard change, and Emergency change. If they are missing, the queue offers Run setup wizard, which detects the work types and maps them.
Creating Jira issue types is outside the app’s zero-egress permission set, so if a work type is missing the wizard gives you the exact names to create by hand, then re-detects. It can also seed a few example changes, windows and services so you can explore the calendar before creating real requests — and remove them again at any time.
2.4 Requirements
- Jira Service Management Cloud — the app is a Forge app and supports Cloud only. It runs on the Standard plan (Premium not required).
- A JSM project for the Changes and Problems queues; the global calendar and CAB workbench span projects.
- Jira administrator or project administrator permission to run setup, manage windows and CABs, and configure org defaults.
3. The change calendar
The change calendar shows planned changes, freeze windows and maintenance windows across your projects on one grid. Every change is a color-coded chip: the glyph and accent encode the change type (Normal, Standard, Emergency) and a badge shows the risk level.
3.1 Month and week views
Toggle between Month and Week, and move with ‹,Today and ›. Days with more chips than fit show a+N more control. A visually-hidden schedule table mirrors the grid for screen readers.
3.2 Projects and filters
Add one or more project keys to fan the calendar across projects, then filter by status or change type. Selected projects persist between visits. Freeze and maintenance windows render as banded overlays behind the change chips.
3.3 Rescheduling a change
Drag a chip to another day to reschedule it — the change’s planned start and end move, and the edit is recorded in the audit log. A keyboard alternative is available for full accessibility. You need edit permission on the underlying issue; the app writes as you, so Jira enforces your own permissions.
3.4 ICS export
Export .ics downloads the visible range as a standard iCalendar file that imports into Google Calendar, Apple Calendar or Outlook. The download is generated in your browser — nothing is served from an external URL.
4. Freeze & maintenance windows
4.1 Window types
- Freeze window
- A blackout period. Changes scheduled inside it are flagged as a freeze conflict.
- Maintenance window
- A planned maintenance period; whether it counts as a conflict is configurable org-wide.
- Change window
- A sanctioned window for changes to land.
Windows are created in admin, scoped globally or to a project, and appear as overlays on both calendars.
4.2 Recurrence
Windows can repeat (for example a weekly maintenance window) using recurrence rules. Recurrence is timezone- and DST-aware, so a window that starts at 22:00 local stays at 22:00 across the spring and autumn clock changes.
5. Change queues
The Changes queue lists this project’s change requests with preset tabs —Open changes, Scheduled this week, Awaiting approval andEmergency — each showing a live count. Columns show the key, summary, change type, risk level, planned window, conflict status and assignee. Emergency changes that still owe a retrospective carry a Retrospective required flag, and any change with a scheduling collision shows aFreeze conflict badge inline.
6. Risk scoring
6.1 The score
Every change is scored automatically the moment it is planned. The Change Riskpanel shows a dial with a 0–100 score and a band — Low, Medium,High or Critical. Scoring is deterministic: the same inputs always produce the same score.
6.2 Factors & breakdown
The score breakdown lists each factor, its contribution and a plain-language detail:
- Change type — Normal, Standard or Emergency.
- Service tier — the most critical affected-service tier.
- Window proximity — how soon the change starts.
- Conflict pressure — conflicting changes and windows.
- Failure history — recent failed or rolled-back changes on the same services (30/60/90-day lookback).
- Lead time — how much notice the change was given.
6.3 Tuning the weights
Admins can tune each factor’s weight per scope from a risk profile. The breakdown always shows which profile scored the change, so the number is never a black box.
6.4 The four tabs
- Risk summary
- The score dial and factor breakdown.
- Changes
- Conflicting changes and windows for this change.
- Incidents
- Related incidents on the affected services (JQL-linked).
- Failures
- Deployment failures and failed/rolled-back outcomes on the affected services.
7. Conflict detection
Conflict detection runs continuously and flags four kinds of collision: a change overlapping afreeze window; a change overlapping a maintenance window (when configured to count); overlapping changes on the same affected service; and changes planned within a 7-day look-ahead of another change’s planned end. Conflicts recompute when a change is edited and appear inline in the queue, on the risk panel, and as calendar badges.
8. Approvals & CAB
8.1 Stages & quorum
Build an approval flow as ordered stages (for example peer review → CAB → change manager). Each stage has an approver set and a quorum mode:
- Any-one
- One approval clears the stage.
- Majority
- More than half must approve.
- Everyone
- All listed approvers must approve.
A stage can be advisory (shows status only) or blocking (enforced — see the workflow gate). Emergency changes can use a fast path that skips stages but flags a mandatory retrospective.
8.2 CAB groups
Create reusable Change Advisory Board groups in admin and reference them from any approval stage. A person who sits on more than one CAB votes independently in each.
8.3 The CAB workbench
The CAB Workbench runs your board meetings: define recurring or one-off meetings, get an agenda auto-built from the changes awaiting the CAB stage, record decisions live (which feed the real approval engine), track attendance, download an ICS meeting invite, and distribute the decision log.
8.4 The workflow gate
An optional workflow validator blocks a transition until a blocking-mode approval flow has been approved. It is opt-in per transition and fails open — a missing flow, an advisory-only flow, or any error never bricks your workflow.
8.5 The customer portal
Customers see a redacted Approval status panel on their request in the help center: stage labels and approval counts only — never approver names or account IDs. Redaction is enforced on the server.
9. Problem management & KEDB
9.1 Problem queues & linking
The Problems queue lists problem records. Link a change to a problem with the “is caused by” relationship, and link problems to incidents, to build the causal picture.
9.2 Known-error database
The known-error database (KEDB) holds known errors with symptoms and workarounds. Search it by substring to find the workaround for a recurring issue fast; each known error opens a detail view with the workaround shown first.
9.3 Post-implementation reviews
Completed and failed changes capture a post-implementation review — outcome (successful, failed, rolled back) plus notes — which feeds the risk engine’s failure-history lookback and the risk panel’s Failures tab.
10. Deployment tracking
Connect your CI/CD tools (GitHub, GitLab, Jenkins, Bitbucket) to record deployments against changes. In Change Management Lite Settings → Deployment webhook, set a shared secret; then point your pipeline at the webhook URL (obtained with the Forge CLI). Every request is authenticated with HMAC-SHA256 against that secret — unsigned, wrongly-signed, replayed or malformed requests are rejected. Ingested deployments link to changes and surface failures on the risk panel’s Failures tab.
11. Stakeholder calendar
The Stakeholder Calendar is a read-only, org-wide change calendar for non-agents — stakeholders can browse, filter and export, but not create or edit. Native JSM keeps the change calendar to agents only; this surfaces org-wide change visibility above that bar. All reads remain permission-gated.
12. Change analytics
Change Analytics reports aggregate, month-by-month metrics for a scope — success rate, failed-change rate, emergency-change ratio, lead time, freeze violations and mean time to approve — plus a monthly digest. Every metric is labelled with its time basis (schedule, PIR or approval month) so figures are never misread across each other, and a metric with no data reads “No data yet” rather than a misleading zero. Analytics are aggregate only — no individual change or person is shown. Org-wide analytics require Jira administrator permission.
13. Migration
13.1 JSM Premium import
Downgrading from Premium? The migration assistant reads your existing JSM change history through the Jira API and maps it into the app’s model. It previews what would import (writing nothing), then applies on your confirmation — linking existing Jira issues by key with zero Jira writes, audited and resumable.
13.2 CSV import
Import change data from a CSV export. A stable per-row ledger means a crash or a re-run never double-creates a change — each row is imported at most once.
14. Governance
- Audit log — a site-admin viewer over every app action, with action/actor/date filters and a client-side CSV export.
- Per-project permissions — control who manages windows and CABs, fail-safe (they can only narrow access, never widen it).
- Org defaults — maintenance-as-conflict, auto-create-on-deploy, retention windows, and the automation presets, all in one place.
- Data export — download the org’s change-management records as NDJSON, generated in your browser, with no secrets included.
15. Privacy, security & data residency
- Runs on Atlassian — Atlassian-hosted compute and storage only; data residency inherited from Forge-native storage.
- Zero egress — no external services, no remotes, no data sent anywhere. Deployment webhooks are inbound-only.
- Least privilege — the app uses a minimal scope set and acts as the calling user for Jira reads and writes, so Jira enforces your own permissions.
- Accessibility — WCAG 2.1 AA across every surface, in light and dark themes.
- Data lifecycle — uninstall purges all app data; deleting an issue cascades to its change records; a weekly privacy poller reports stored account IDs to Atlassian’s Privacy API.
See the ChefStackz security statement and privacy policy for the full detail.
16. Support
Questions or issues? Raise a request in our support portal or email support@chefstackz.com. Support hours are Monday–Friday, 09:00–17:00 EEST. We typically respond within one business day.