Correct setup of Issue Security Levels

[Agent]

Hey! 

I've been trying to find a good solution for the issue I have.

We want to limit general access to users only to one main project, and each team to have their own projects, where all issues should be viewed only by the members that have a Project Role assigned to them in that specific project.

And there should be a possibility to add people from other teams as watchers, and they should only see those specific issues that they have been assigned as 'Watchers'.

Once setting up Issue Security levels- 'Watchers' is not an option to select- it was tried to limit it to Custom Field multiple user picker field, but it was not possible to select users to add to watchers without having the 'All Jira Users' added to the project as a User Group. 

But that means that everyone is able to see everything now. 

We want to achieve a goal with Issue Security that users that have a project role assigned to them would be able to see all issues, but users, that don't should only see issues that have been added as 'Watchers'

Any way to achieve this? 

We're using Cloud and Automation for Jira. 

Cheers!

[Petter Gonçalves]

Hello @Agent

Welcome to Atlassian Community.

Per your description, I understand you would like to allow your team (added with a specific role) to access your project issues, however, keep other teams to only see those issues they are added as watchers. Is that correct?

Indeed, this goal can not be achieved by using the watchers field (See JRASERVER-7663), however, it can be easily achieved by using a Multiple user picker custom field, just like you mentioned below:

Once setting up Issue Security levels- 'Watchers' is not an option to select- it was tried to limit it to Custom Field multiple user picker field, but it was not possible to select users to add to watchers without having the 'All Jira Users' added to the project as a User Group. 

That being said, I must confess I did not understand what is the problem you found with this option. Indeed, you will have to add all the users to the Browse projects permission in the project configured with the issue security, however, the persons from different teams will be blocked from viewing/accessing all the issues by the issue security itself, unless in specific issues they are added with the Multiple user picker custom field. Can you please elaborate a little bit more on why this is not an option for you?

Additionally, these would be the steps to properly configure it the way you need:

1 - Create a new Multiple user picker custom field and add it to your project screens.

2 - Configure a new issue security level for your project, that will include your team and the Multiple user picker custom field, keeping the persons from different teams out of the security level

3 - Set the security level with a default value, so all the new issues created will be configured with the correct security level. Optionally, you can bulk update the security level of the current issues you have.

4 - Add all the users on your site with the Browse projects permission

For more information about the Security levels, you can check the documentation below:

- Configuring issue-level security 

Let us know if you have any questions.