How to change who can see what on JIRA?

[Anamika Jain]

Currently, we are 2 people using JIRA. I can see all the issues and projects my Manager is working on. How can we hide our individual tasks/issues/projects from each other? I tried to follow the instructions on the JIRA website, but I can't see some of the settings it is asking me to go to.

[Joe Pitt]

I agree with @Anamika Jain

By default JIRA has a horrible permission scheme that violates security best practices. JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (used to be JIRA-users but may be different on your version).  This is probably where they’re getting the access from.

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. One permission scheme will cover almost all projects. The project admin controls project role membership

This may be a big effort, but it will pay off down the road by making it easy to control access.

Most of the 'old timers' use project roles. It meets the best practice for security and gives complete control to the project lead for access to their project. JIRA comes with many project roles, but you can add more if you have a special need.

[Anamika Jain]

Thanks @Joe Pitt and @Ollie Guan. I will try to use your suggestions and get back if it doesn't work out.

[Ollie Guan]

Hi @Anamika Jain,

I think the easiest way is to create 2 projects. Manage your own tasks in the projects and control access through permission schemes.