We have a requirement to use JIRA to store and manage requests for a confidential system.
how can we set up a project and then secure it from all but nominated people to access and maintain?
the overall JIRA admin would not be one of these people.
Simple at first - create a permission scheme that only allow people in a certain group or role to browse the project.
However, your comment about the Jira admin won't work. You can exclude the Jira admin, but they will ALWAYS have the ability to put themselves into a role or group that allows them access.
There is no getting around the fact that you have to trust the administrators of any system you run.
No - if you have two Jira instances (sounds like you do, if you need to protect HR stuff from your main Jira admins), then you need two licences. Of course, if your HR department is small, a $10 license for a handful of users is not a huge expense...Atlassian are looking at bulk/site licenses as well, so in the future, that problem might go away.
Hi Nic. Thanks for that.
It's not a trust thing really. This is confidential HR related data that we don't want anyone except the users(and their HR IT person) seeing.
The new instance suggestion from Ellen may be a runner i think.
Thanks Ellen
By 'Spin up a new instance' do you mean use the same licence? If we could restrict use of this to a named individual (as in I don't want to have access any longer as admin for our 'main' JIRA instance) then this could work. How do I find out how to do this?
Yes, Nic is right - you would need an additional license (for the number of users using it - so in your scenario, likely under 10).
If HR, and don't have the IT ops admin skills to do this easy (and ongoing support), can offer you a direct managed hosted option that is turnkey - up and running fast, backed up, upgrades included - and all secure for you.
ellen at appfusions dot com if want quote or to discuss more.
Hello @Nic Brough -Adaptavist- do you know if there is any update on this request after 8 years ?
Atlassian have stated they're not changing this, years ago.
It looks like you're new here. Sign in or register to get started.