Pros/cons of enabling Browse User for everyone (JSD customers)

Question

We recently implemented Jira Service Desk (Cloud) for our internal organization. We have multiple service desk projects, and one of them is trying to utilize the user picker function for staff to select their manager on specific request types.

As per design, this does not work by default for non-Jira system users as the Browse Users global permission is set to allow only specific roles. This permission is required to allow user picker functionality.

Our site is not public. We use Okta SSO in conjunction with Atlassian Access to control who our Service Desk customers are, so the only people getting access to the list of users would be staff members or approved users of Jira, JSD.

Are there any downsides to setting Browse Users to Public, or the group that defines Jira Service Desk customers?

John Funk · Answer

Great - I am glad you were able to get to a good solution.  :-)

And thank you for the additional information. Did you end up also giving them Service Desk Team role?

Darryl St. Pierre · Answer

Thanks for the clarification John.

I was hesitant to try your suggestion as I wasn't sure about the potential unintended impact. I did ultimately find out from support that I needed to modify Project Settings->Customer Permissions->Who can customers share requests with to Any customer or organization, by searching this project.

This, along with the Browse Users global permission resolved the issue.

I still haven't really determined if this is a good practice or not, but I did some limited testing and it does not appear to have opened up any undesired access.

John Funk · Answer

This is not in the permission scheme but the project settings. If you have added customers to the People section on your project, then you should be able to add them to the Service Desk Team project role. Then they can see the values in the user picker dropdown. Were you able to do that.