Is it possible to hide a project even from a "Trusted User"?

[Ankit Chouhan]

I have an administrator role (Org and Site Admin) and there is one more user who have "Trusted" role. I have made a private project which can only be accessed by me. But the user with "Trusted" role can still see the project, although he can't access the issues and other details.

Is it possible to hide the project so that even Trusted user do not see the project on his "All projects" screen?

Any help would be appreciated.

[Sebastian Mühleis · Accepted solution]

Hello @Ankit Chouhan ,

welcome to the Atlassian family :-)

Regarding your problem: We experienced a similar problem, if you're talking about a "trusted user" who has comparable rights as an "admin" or "site admin" - is that your problem?

First you should check the Global Permissions of your Jira instance, to see which user groups have administration rights in Jira. In our instance, trusted users also have/had these permissions (and were thus able to see everything).

If you find the trusted user there, you can hit the line "Configure permissions in user management ". This will lead you to administration, where you can choose between "product access" and "administration access". In administration access" you should be able to delete the trusted user group and voìla, you shouldn't have trouble with your problem anymore.

Hope this helps, if you need further help (or guidance in finding the respective areas), don't hesitate and ask again :-)

Have a nice day,

Sebastian

[Ankit Chouhan]

Hi @Sebastian Mühleis 

Thank you for the warm welcome and your thorough answer! You caught my problem spot on!

Thanks to your detailed explanation, I was able to resolve my issue and remove the group "jira-administrator" from "administration access" which was allowing the user to have administration rights.

I was wondering if you could help me understand the difference. The concerned user is a "trusted user" and was also a member of "jira-administrators" group which gave him administrative privileges. Since I have removed him now from the group but he still is a "trusted user" and has administrative privileges. Ideally, I should have seen a "trusted user" group under "administration access" but that was not the case. That means there are two user groups - "trusted user" and "jira-administrators" and both of them are part of Administer Rights under Global Permissions. Even though I have removed the user from "jira-administrators" but since he is also part of "trusted user", so technically I should still be facing the problem and that is not the case. Please could you highlight the difference of these two groups - "trusted user" and "jira-administrators" if possible.

And sorry if it's gets confusing, I have tried to explain in detail.

Best,

Ankit

[Sebastian Mühleis]

Hello again @Ankit Chouhan ,

you're welcome - and I'm glad if I could help.

And yes, there is different user groups, with "jira-administrators" and "trusted-users" (usally followed by a long code) among them.

But, actually, I'm unsure now, if we really solved the core of your problem. In our instance the case was that the trusted user group also had (some) administration rights (cf. the following screenshot).

And since you had trouble with the permission of your trusted users, I'd rather assume that the problem a) still exists or b) had another cause. Just think about it like that: You withdrew ALL Jira administrators their administration rights, although you wanted that trusted users don't have administration rights. But maybe your problem was solved, because your trusted user also is a Jira administrator... ;-)

Do you get my point? Or am I the one on the wrong track?

[Ankit Chouhan]

Hello @Sebastian Mühleis ,

I understand what you are saying. My "trusted user" was in fact in the group "jira-administrators" as well. Even I have similar groups in "Administer Jira" Global permissions. Now since the issue is resolved, it means the problem was because of "jira-administrators". So I want to understand the difference in the privileges of a "trusted user" and "jira-administrators", if you are aware about it. Because I am sure the "Administer Jira" (screenshot attached) had nothing to do with the issue, since the "trusted user" is still very much part of it and I have not removed my user from the "trusted group".

Maybe someone technical from Atlassian can pitch in. But yeah, it's an interesting piece of puzzle I guess. :)

Best,

Ankit

[Hernan Halabi - Elite IT Consulting Group]

Hello @Ankit Chouhan welcome to the community. Whoever has administrator permissions will be able to see all projects and even though you could configure a project to be visible by you as a user, this other admin will still have privileges to modify who can see that project since it will always be visible to him from an admin perspective

[Ankit Chouhan]

Hi @Hernan Halabi - Elite IT Consulting Group , thank you very much for the warm welcome and the clarification also. I understand now that administrator permissions will supersede everything.