How do I assign a user to one project only?

[Louise Lynch]

I am administering multiple projects within a single JIRA Software instance. I want to assign users to one project only so they can not see the other projects. How do I do this?

[Nic Brough -Adaptavist-]

1. Check the permission scheme for the project you want to add them to.
2. Add them to a role or group that lets them into that project.
3. Make sure that they are NOT in any roles or groups that let them into other projects.

There is a very common problem here though, on line 3. The Atlassian defaults are

• A default permission scheme that says role: users
• A default role membership of : <a group that means anyone who can log in >

So, to "create a user who can only see one project", it is very likely that you will need to change all the projects you don't want them to see so that the <can log in/use> group is NOT in the role of users (and is replaced by something that lets the right users in). 

First thing I do when I get hold of a new Jira is remove the default "users in a role" from the roles, so that I have to think about who gets added to new projects.

[Louise Lynch]

Thanks Nic.

The permission scheme is a default scheme that applies to both projects. (Please see attached screen shot). I have created a role "test analyst" and assigned the user to that role, yet he can still see both projects.

[Nic Brough -Adaptavist-]

Next to "Browse project", you've got "any logged in user" - that needs to be removed from the scheme, but you need to replace it with something to let your current users access the project.

For example, a simple approach is to

• Create a group of users called "internal users" - this is most of your current users, but does not contain the person you're adding to a single project.
• In the permission scheme replace "any logged in user" with "Role: Users"
• In the project's "People" section, put the "internal users" group into the role of users
• Now it's safe to remove the "any logged in user" from the permissions
• Finally, go to the project that you want your new limited user to use and add them into the role of users as well