Scoped token for components

[Devon St_ Denis-Richard]

Thanks in advance for any answers.

I am trying to create/use a scoped token for reading/writing/deleting components (trying to automate a process).  I am encountering a 401 (not surprising).

What is the minimal set of scopes/permissions I need?  The goal is to keep it as locked down as possible.  

[Trudy P Claspill]

Hello @Devon St_ Denis-Richard 

Welcome to the Atlassian community.

Are you using Classic or Granular scopes? Have you looked at the required scopes listed in the API documentation for each endpoint and method?

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-post

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-id-put

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-id-delete

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-id-get

What scopes have you assigned to the token so far?

Are you doing this for a personal token or a service account token?

What are you doing for authentication? Are you sure your authentication is succeeding?

Does the identity have proper application access and proper access within the space(s) where you are trying to manage Components? 

Are you automating this through a script or through Jira Automation, or some other path?

[Mikael Sandberg]

Hi @Devon St_ Denis-Richard,

Welcome to Atlassian Community!

If you look under scope for example Create component you need the following scopes:

read:project:jira, read:user:jira, write:project.component:jira, 
read:application-role:jira, read:avatar:jira, read:group:jira, 
read:project.component:jira

To find components used in the space the following scopes are needed:

read:project:jira, read:project.component:jira, read:user:jira, 
read:application-role:jira, read:avatar:jira, read:group:jira 

And to delete you need to following:

delete:project.component:jira 

So based on that you would need the following scopes to read/write/delete

read:project:jira, read:user:jira, write:project.component:jira, 
read:application-role:jira, read:avatar:jira, read:group:jira, 
read:project.component:jira, delete:project.component:jira

 Also note that if you are using an Atlassian service account that the URL used for the API is different, for example https://api.atlassian.com/ex/jira/{cloudId}/rest/api/3/project/{project_key}