Context
We have two external customers who have licensed accounts on our Jira Software Cloud site. They have access to a specific project as intended, but we've noticed they can also see our full internal user list in places they shouldn't.
Issue 1 — Assignee filter dropdown
In the "All work" view (new Jira UI), when a user clicks the Assignee filter button, a dropdown appears listing all users on the site. External customers can see all internal team members there. We want to hide this user list from them.
Issue 2 — Assignee column in the table
Even if we solve the filter dropdown, the Assignee column in the issue list still shows internal team member names inline for every issue. Is there a way to hide or restrict that as well?
What I've tried / what I know
Browse users and groups global permission from the external customers' group should stop the user list appearing in the dropdown. Is that correct?Questions
Browse users and groups the correct and complete solution for the Assignee filter dropdown, or are there side effects I should be aware of?Environment
Jira Software Cloud (new UI)
External customers have licensed user accounts (not portal-only)
"For Issue 1, I believe removing the Browse users and groups global permission from the external customers' group should stop the user list appearing in the dropdown. Is that correct?"
This will limit the list of assignees, but this will also mean the users from that group can't access the space anymore.
"Is there a supported way to hide the Assignee column (or mask the values in it) from external users in the "All work" view, without affecting internal users?
Environment"
No there is no way to hide the assignee field on issue when searching if user have been granted a Jira license and have browse permissions to a space. Even granting guest license and add the guest group to a space won't limit this.
Hi @Ivan Andrieiev ,
you were already on the right track with limiting the permission "Browse users and groups". However, this merely limits the selection of all users in dropdown fields. Wherever people are already set - such as in the Reporter or Assignee field - you cannot hide it from those users.
The moment you add external users as licensed users, they're "normal" users to Jira and are allowed to see everything that's not limited by the available permissions and restrictions.
That being said and without knowing your exact requirements for workin with external users, I would recommend to have a look at the guest account feature in Jira: https://support.atlassian.com/jira-cloud-administration/docs/manage-guest-access-in-jira/
Maybe this helps solve your issue while still allowing external users to collaborate in your projects?
Guests are designed to be siloed and "kept away" from sensitive and internal information and were introduced for cases like yours.
I hope that helps.
Greetings
Philipp
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.