Customer permissions to request REST API

Mikrukov Petr

Hi,

I want to permit 3d party software to request Service Desk API. 

I added their email to Customers list. They got an Atlassian ID, created a token and so on, and then they tried to send a request to Service Desk REST API but got bad request response stating there was an authentication issue. 

To provide them API access, I had to add them to users list and to permit them access to Jira Service Desk product. As a result, they got access to back end web interface, although there was no projects available to them, but they have an option to created one.

Question is, how do I provide a permission to use REST API to customer without permitting him to access Service Desk interface itself? Except customer portal of course, it must be accessed as intended.

Andy Heinzer

Hi Dmitry,

I understand that you want to grant customers access to the Jira Service Desk REST API.  It sounds like you might have added these users to the jira-service-desk-users group or equivalent user group in Jira Cloud.  Doing this makes those users Jira Service Desk Agents, and grants them access to the main Jira site. 

But this is not necessary to use the Jira Service Desk Cloud REST APIs.  In fact no group membership is needed at all for users that only exist in the customer role (see also Jira Service Desk: Agents, Customers, and Roles).  That said the customer account does need to be able to login to the Customer portal provided to them.  If they can do that, then they should also be able to make REST API calls to the endpoints in that reference link above, provided there account has the permissions need to perform those actions.

If your customers are still having problems here, I would be interested to learn what specific endpoints they are trying to call, and any specific details you can provide about the syntax of their API requests, perhaps we can better understand the specific error message they are seeing this way as well. 

Please let me know.

Andy