Xray permission for an outside consultant

[Robert Nadon]

Hi Xray experts,

We need to give access to see the test cases for a specific project but do not want to grant them just open access to everything in the project, just the test cases.   

What is the best way to proceed to create them an Xray API key that has access to the project?

Thanks!

[James Walker]

In Xray (Jira), permissions are controlled by Jira project roles - you can't limit access only to test cases through the API without project-level permissions.

Best approach:

1. Create a new Jira role (for example, External Tester).
2. In the project's permission scheme, give that role access only to Browse Projects and View Issues.
3. Use that account to generate an Xray API key - it will then only have access to test issues in that project.

This way, the consultant can view test cases but won't have edit or admin access to other project data.