Access control

[ruyu]

I plan to create a simple project for our suppliers.  I will not clone the project for each supplier because we do not know which suppliers will end up using the project.  But we do not want the suppliers able to even view other "work" or records that is not related to them.  How can I set this type of control as project admin? 

[John Funk]

Hi Ruyu - Welcome to the Atlassian Community!

I think I would implement issue level security. You can create different security levels by supplier so that the supplier only sees work items they have access to. You can also add a custom field like Grant Access or something like that with a multi-user picker field. Then include that field in the security level. That way, when you add a user to that field, that user can see that work item. 

[Trudy Claspill]

Hello @ruyu 

Can you confirm the type of project you plan to created - Software, Business, or Service Management?

Note also that there are two different implementations for Issue Security depending on whether you are using a Company Managed project or a Team Managed project. You may want to review the material on each type before creating the project to ensure that you create the type that will enable you to segregate the issues as needed.

Team Managed project issue security: 

https://support.atlassian.com/jira-software-cloud/docs/set-up-issue-types-in-team-managed-projects/#Setupworktypesinnextgenprojects-restrictIssueTypesRestrictaccesstoanworktypeinyourteam-managedsoftwareproject

Company Managed project issue security:

https://support.atlassian.com/jira-cloud-administration/docs/configure-issue-security-schemes/