The project role permission schemes are nice but there are a couple items in the Global Permissions that are still hard to use. The Global Permissions can only be assigned to groups. For things like Browse Users and Create Shared Filter where the default permission is jira-developers not having the roles means that we still have to create global groups to assign those permissions and then it has to be centrally managed. Maybe these types of permissions could be pushed into the Project Permission schemes if using the roles does not make sense?