Xray permission for an outside consultant

[Robert Nadon]

Hi Xray experts,

We need to give access to see the test cases for a specific project but do not want to grant them just open access to everything in the project, just the test cases.   

What is the best way to proceed to create them an Xray API key that has access to the project?

Thanks!

[Martin Runge]

Hi @Robert Nadon

I would set expectations first: the Xray Cloud API key is not a permission scope. You bind it to a Jira user, so the key can see exactly what that user can see in Jira, no more and no less. All the real control happens in Jira.

I would set up a dedicated Jira account for the consultant and implement an issue security scheme that limits access to only Test issue types. Initially, you can bulk update the security level for all existing test cases, and you could also automate the process to set security levels for new or modified test cases.

Cheers, Martin