Restrict create issue in a project to specific users.

[Haran Kumar]

Hi 
I am having a project to which the entire organization has access . But , I need to restrict the creation of issue in that project to only few users. How can this be made ? 

Any help over this is highly valued. 

Thanks. 

[Joe Pitt]

First, by default JIRA has a horrible permission scheme that violates security best practices by allowing everyone that can logon to do just about everything.

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (see Global permissions to see the "can use" groups and admin groups).  This is where users are getting their access.

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. By using project roles, one permission scheme will cover all projects. The project admin controls project role membership
4. If the project leads want everyone that can logon access to the project they can add the logon group to a project role with the desired permissions.

This may be a big effort, but it will pay off down the road by making it easy to control access.

Most of the 'old timers' use project roles. It meets the best practice for security and gives complete control to the project lead for access to their project. JIRA comes with many project roles, but you can add more if you have a special need.

[Haran Kumar]

@Joe Pitt  Thank you 

[Deleted user]

Go to "Issues" --> "Permissions schemes". Select the Scheme with the specific project and press the action permissions. In there is a point "Create issues", select all the people that should have the permission.

[Jenuel Oras Ganawed]

where can I see this?

[Louange HIRWA]

This when you are logged in on Jira Service Management Backend

[Kevin Bui]

@Haran Kumar - You can accomplish this by doing the following:

1. Create a new group that only contains the few users who can create issues
2. Create a new permission scheme, and grant this group the ability to create issues.
3. Apply this permission scheme to that project.

Our documentation has some more in-depth instructions for things like this. I'm not sure which version of Jira you're using, but here's the doc for Jira Cloud: https://confluence.atlassian.com/adminjiracloud/managing-project-permissions-776636362.html

[Haran Kumar]

@Kevin Bui  Thank you . 

This leads to my next question on how to create a group with required users? 
And to mention I'm using  Jira cloud and I'm not the site admin.