Want to create a group that has permissions ONLY to VIEW issues in a single project

[Tim Hefferon]

Is there a way to create a group that will allow a set of external users who belong to that group ***ONLY*** the ability to browse issues within a single project? Not see what other projects there are on our system, not change the status of issues on the desired proejct, not see or do anything except observe issues on a single project?

Thank you!

[Nic Brough -Adaptavist- · Accepted solution]

Modify your permission scheme so that it includes the new group with *only* browse permissions

Put your external users in it

Remove them from all other groups and roles *except* jira-users (or they won't be able to log in)

You could run into problems if you are using jira-users for anything more than "person can log in". If you are, you need to either remove it from the other usages (and have another group for it), or create a new group for "person can log in", add it into the global permissions, copy all your users into the group, remove jira-users as a "can log in" group, and then remove the external people from jira-users.

Note - you may actually be better off using "roles" instead of groups, but you still need to run through the same basic stpes.

[Tim Hefferon]

Nic.... is.... awesome!!! Thank you very much, Nic. It looks as though someone at our institution has used jira-users for something other than logging in - hence my frustration in trying to accomplish this. Thanks for the solution!

[Tim Hefferon]

Hi Nic,

I am stuck.

I don't think we use jira-users for anything other than log in (the way I determined that is to browse to the group jira-users and look at permissions - there are no permissions schemes associated. Am I correct to conclude users in jira-=users can therefore ONLY log in? If that's not right, how do I tell?), but even if a new user belongs ONLY to jira-users, after logging in they can still browse, and even comment on and change the status of, several projects in our Jira installation - ????? (At least I can do this, from on-site, with an email address created especially for this purpose.

So I decided to try your second approach. I followed your instructions:

1. I created a new group, called 'newgroup'. It has no permissions associated with it.
2. You then say, "add it to the global permissions". ***I don't know what this means, nor how to do it. When I go to Global Settings -> Global Permissions and say, "Add Permissions," I am presented with a pull-down menu of six already-existing possibilities. I thought my goal was to associate 'newgroup' with a permission scheme that ONLY allows login - but I don't know how to do this.

Thanks very much in advance for your help,
Tim