Grant access via API token

[Flavia Helena]

Hello! How are you?

I need to provide a Jira API token to a user outside my organization so they can extract some data from the platform. This user is a client user of ours. I've already tried to add them to a group created to give them access, but without success.

What I need here is to create a username and password for them, generate a token, and send this token to them. It's important to remember that the user to be created has an email address external to my organization. Let me give you an example:

If my organization's email address is @orange, their email address is @Apple.

How do I do this in JSM?

[Flavia Helena]

Hello @Trudy Claspill , @Marc - Devoteam @Matteo Vecchiato 

I read about the service account and believe this will give them the access they need, or am I wrong?

The service account will generate an email address and an API token so they can access the necessary data. Is this possible?

Before trying the service account, I gave the external user User (agent) permissions, but without access to my ticket board. I just need them to be able to extract data to generate a database with tickets related to their organization.

Best regards

[Trudy Claspill]

I have not used a Service Account yet, but it does seem that this would match your needs.

With a Service Account they would be able to access the API but not the UI for your Jira app.

Do you want them to have access to more data than would be available through the Customer portal?

If you give the account only JSM Customer access, they will be limited in the data that they can extract.

If you give the account JSM User/Agent access, then they will have access to more data for the issues and to all the issues in the projects to which you give the account access. You would need to add constraints to limit their access to only the issues for a particular customer organization, if that is needed.

[Trudy Claspill]

Hello @Flavia Helena 

What type of access have you granted to the user?

- Customer access

- JSM agent access

- Jira user access (if yo have Jira as well as JSM)

- App Administrator access

As mentioned by @Matteo Vecchiato an API token is created from a user's Personal Settings options. It is currently not possible for a token to be created on behalf of another user. You would have to login to Atlassian Cloud with that user's credentials and create the API token while logged in as them.

Note also that you can't use the "Login as User" option for a user that has never logged in, and you cannot access the Personal Settings for a user when using the "Login as User" option.

[Marc - Devoteam]

Hi @Flavia Helena 

If this external user wants to use the API, then you need to provide them with an account and grant them a JSM license.

An external user who is a customer (non-licensed user) can't access data, even if you created an API token for them.

NOTE this user could login to Jira as well and see any issue on the JSM projects as an agent.

Do you want to open up your instance to this user.

[Flavia Helena]

No. The only thing I need to allow is for it to extract the data it needs.

[Matteo Vecchiato]

Hi @Flavia Helena

The API tokens are generated from the user personal settings, please have look to this article https://support.atlassian.com/atlassian-account/docs/manage-api-tokens-for-your-atlassian-account/ 

Also note that Atlassian has recently released the option to create service accounts that allows to generate tokens for integrations.

Hope it helps