How can I grant a user (e.g. a client) access to a single project (of the Classic type)?

Question

I've tried Googling and searching these forums by the vast majority of guides are either outdated or use vague language when describing the exact steps I need to take (i.e. not describing each navigation item verbatim).

I'd like to be able to add users for our clients to projects but not give them access to unrelated projects.

I'm using Jira Software Cloud, we are only using Classic Software project types, and are are on the Standard plan.

Jack Brickey · Answer

go to project > Project settings > Permissions. Edit the permissions and add the group to the specific action, e.g. Browse, Comment, Create issues, etc.

Jonny MacEachern · Answer

Then give that group the desired permissions/notifications.

How?

Joe Pitt · Answer

The best way to limit project access is by using project roles and in the permission scheme give the roles the permission you want like edit, browse, transition, etc. I don't know how cloud is setup, but on server everyone who can logon to JIRA is given permission to everything.

First, by default JIRA has a horrible permission scheme that violates security best practices by allowing everyone that can logon to do just about everything.

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (see Global permissions to see the "can use" groups and admin groups).  This is where users are getting their access.

* The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission. 
* Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
* By using project roles, one permission scheme will cover all projects. The project admin controls project role membership
* If the project leads want everyone that can logon access to the project they can add the logon group to a project role with the desired permissions.

This may be a big effort, but it will pay off down the road by making it easy to control access.

Most of the 'old timers' use project roles. It meets the best practice for security and gives complete control to the project lead for access to their project. JIRA comes with many project roles, but you can add more if you have a special need.