How do users get access to JPD spaces?

[RC]

Hi all.

I'm trying to understand how users get access to Jira Product Discovery. I have a user who does not have app access to JPD and is not a free user (does not have the Contributor role).



However the user can still view and access JPD spaces that are Open and can seemingly act like a Contributor by adding comments, etc. 

Reading more about how roles work, does this mean that all Jira users are implicitly Contributors in JPD spaces that have an access level of Open or Limited even though they are not explicitly assigned the Contributor role by an admin?



This is problematic as we typically need to grant external vendors/contractors access to Jira but don't necessarily want them snooping around our JPD spaces. Seemingly, the only way to block access is to set the access level to Private.

Is my understanding correct?

[Gary Spross]

@RC , yes, this is how JPD space access works. Open & Limited access provide default levels of access based on user licensing. Private access is the necessary option if you want to ensure the space is restricted to only the users you specify. Here's a breakdown:

Open access:

Anyone with a JPD license (User (creator) role) is a creator within the space.

Anyone in the JPD Contributor role OR anyone with a Jira or JSM license is a contributor within the space (view and create Ideas).

Limited access:

Anyone with a JPD license (User (creator) role) OR in the JPD Contributor role OR anyone with a Jira or JSM license is a contributor within the space (view and create Ideas).

Private access:

No default access. Only specified users/groups have any level of access within the space.

My recommendation: Create a group that excludes all of your external vendors/contractors. Set your JPD spaces to Private access and provide the appropriate role to that group. This will ensure the external users aren't able to access the JPD spaces.