Who can change Data Classification level on a Jira work item?

[Trudy Claspill]

I am trying to confirm what permissions are required for a user to change the Data Classification level assigned to a Jira work item. So far I have not found the document that states that clearly.

[Trudy Claspill · Accepted solution]

I went to the Atlassian Technical Support portal and asked the AI bot there "What permission is required to change the Data Classification level for an individual work item?"

There response was:

To change the Data Classification Level for an individual work item in Jira Software (Cloud Premium), you need the Edit work items permission in the relevant project. This permission allows you to alter the value of fields on a work item, including the Data Classification field, as long as it’s not restricted by another specific permission.

If your organization uses work item security, you may also need the Set work item security permission to adjust who can view or interact with the work item based on its classification 1.

I still have not found this otherwise explicitly stated in publicly available documentation from Atlassian.

[Duc Thang TRAN]

Thank you for providing the information from Atlassian Support.

I think your option is the good way to classify data.

Maybe for now, Atlassian doesn’t have a solution yet to implementing permissions based on multiple classification levels . Their priority is to update the UI names 🙂

We’ll see how this evolves in the future.

combine data classification with a custom issue security scheme is a good approach for now i think

[Duc Thang TRAN]

Hi @Trudy Claspill 

Based on this document https://support.atlassian.com/security-and-access-policies/docs/what-is-a-default-classification-level/ , I think it’s Project Admin or maybe a new change in Space Commander 😄
But I don’t understand why they list two elements: Issues and Work Items.
Even they get lost in their own UI changes.

[Trudy Claspill]

Hello @Duc Thang TRAN 

Thank you for trying to answer my question.

That document concerns setting the default Data Classification level for a Jira Project (Space), which in turn users the default value for each Issue (Work item) in the project/space.

My question is what permissions are required to then change the value for individual issues/work items? I don't see that addressed in that document.

It says Users can override the default but it doesn't say what permission the user must have. Gemini said Edit Issue, but then in another case it said Set Issue Security.

[Duc Thang TRAN]

Hello @Trudy Claspill 

Thanks for clarifying it. I’m also curious to know the official answer.

For me, in  jira , users should need permission  edit issue to choose another level of classification.

Issue security permissions are used to manage access to ticket information

In contrast, classification is simply used to categorize the content of a ticket, so it makes more sense to me that the Edit Issue permission is sufficient to change the classification level

[Trudy Claspill]

In my opinion there should be a permission related to changing an issue's Data Classification like there is for Issue Security.

Let us say the Project Admin has set the default Data Classification level to one that is in a Data Security Policy to prevent Export, I don't think it is appropriate for any user with Edit Issue permission to be able to change that to a "lower" level that would then allow the export of the data.

I think the ability to change the Data Classification of issues should have finer control, just like the ability to change the Issue Security level.