nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to restrict workflow transition to "Automation for Jira"?

Mashu Duek

Info: Free tier, Next-gen software project

ISSUE:

When creating a git branch I am moving a card from "SELECTED FOR DEV" to "IN PROGRESS" through an automation trigger. I would like to be able to limit that transition so that the only one who can move it is the actor of that trigger (the Jira bot). Jira defaults the actor of the trigger to be "Automation for Jira".

ATTEMPTED:

I've visited Project Settings -> Access to see if I could find the user Automation for Jira, in hopes of being able to apply the restriction to Admin users only, but Automation for Jira is not there.

Screenshots:

Transition restriction popup window:

Screen Shot 2021-02-12 at 3.59.39 PM.png

Automation Rule displaying the Actor (unchanged from default): Screen Shot 2021-02-12 at 4.04.47 PM.png

Accepted answers

George Bou-Rizk

I can suggest a solution for you if anyone is still struggling with this.

You want to change the properties of each status that you want to restriction transitions for and limit it to only the automation.

To do this you have to do the following:

1) Find out what your automation id is:
a) Go to System Settings Screenshot 2023-07-12 082250.png

b) Click view usage for atlassian-addons-project-access
c) the automation id is in the url
Screenshot 2023-07-12 082451.png

2) Go to your workflow, select the status you want to restrict transitions, click on the status then click on properties under Options

Screenshot 2023-07-12 082938.png

3) Add the condition for automation to have permission

a) Set the property key to jira.permission.transition.projectrole.1

b) Set the property key to the automation Id you obtained from previously

c) click the add button

Screenshot 2023-07-12 083159.png

You're done!

Now, only automation will have permission to transition any ticket that has that status.

You will need to repeat the process for every status that you want to restrict to only automation.

All comments

Jack Brickey

is this a classic project? If so, I would suggest a Condition on the transition within the workflow.

Mashu Duek

Hey Jack, thanks for reply.

It is not a classic project, its a next-gen software project.

In the workflow, to the transition I can apply "Rules", the one I wish to apply is "Restrict who can move an issue", I can't figure out how to allow only the Jira Bot (the trigger automation software) to make the transition.

Phil Walburn

Hey Mashu,

Did you ever get this to work ?

I am trying to do the same, and have hit the same wall

I have existing Rules in place, and want to add the "Automation for Jira" User as an additional user allowed to Transition, but it is failing at the moment

(It works if I take all Rules away, but that does suit my requirements)

thanks

Phil

Mashu Duek

Hi Phil,

I did not get it to work, unfortunately. This is a limitation of next-gen projects I believe.

Hugo Gómez_7uceld

Hi! - I needed to do this as well, and figured out a workaround that may work on some situations. I can think of some scenarios where this may not solve your case.

In the workflow, the exclusive transition has a rule that allows the issue to transition only if it contains a certain label. In my case the label is "JiraAutomation".

Then, in automation, before using said transition, add the label to the issue, perform the transition, and then you can remove the label afterwards.

It is like marking the issue to enable the transition.

This works as a charm, because users won't see the transition in the list of available transitions, unless they manually add the enabling label. Just don't spread the word to the team.. haha!

Hope this helps someone!

Hugo Gómez_7uceld

Update with new discoveries...

1. After assigning the label to the issue to transition, you must re-fetch the issue's data (there is an action for that) before performing the transition, this will ensure the label is properly applied before attempting the move.

2. The experience on the Android mobile app (v93.1.1) is not as good as on the browser app. In the browser the transition is highlighted as not available to user. (see drop zone on right)

In the mobile app, the transition IS allowed, then it is reversed after a few seconds. This indicates that the verification takes place after the move, and it is not prevented as in the browser app.

So far, that's about it.

saqib.ahmed

@Hugo Gómez Instead of doing this whole workaround, isn't it easier to just use the admin user (or your own user) as the automation rule's actor? Then in the workflow, only allow the automation rule's actor to make the said transition.

At any rate, the user who's configuring the label to be added and removed can do that manually as well. With him being the actor of the rule, only he'd be able to make the transition either manually or via the automation rule. The same effect would be achieved as previously without any loophole.

Screenshot 2023-02-06 at 1.01.57 PM.png

George Bou-Rizk

I can suggest a solution for you if anyone is still struggling with this.

You want to change the properties of each status that you want to restriction transitions for and limit it to only the automation.

To do this you have to do the following:

1) Find out what your automation id is:
a) Go to System Settings Screenshot 2023-07-12 082250.png

b) Click view usage for atlassian-addons-project-access
c) the automation id is in the url
Screenshot 2023-07-12 082451.png

2) Go to your workflow, select the status you want to restrict transitions, click on the status then click on properties under Options

Screenshot 2023-07-12 082938.png

3) Add the condition for automation to have permission

a) Set the property key to jira.permission.transition.projectrole.1

b) Set the property key to the automation Id you obtained from previously

c) click the add button

Screenshot 2023-07-12 083159.png

You're done!

Now, only automation will have permission to transition any ticket that has that status.

You will need to repeat the process for every status that you want to restrict to only automation.

Brendan Sheppard

@Hugo thanks for your solution on this, worked well for my need today in cloud version.

I needed this today and like the original poster, it seems like an easy fix for the 'Automation for Jira' role to be selected as the role who can transition, would save the fiddling. Sometimes you think the people that build these system don't have to use it.

Antonio Spanò

Hi George,

I've tried to manage the workflow permission like you suggested, but i still receive an error in the automation did by "Automation for Jira" user:

Annotation 2023-11-03 145208.png

Any idea?

Thanks

George Bou-Rizk

I believe that is a permission that you have not enabled in your projects permissions.

In your project on the left navigation panel, Click "Project Settings", then click on "Permissions".

Try update the permission, "Transition Issues" to grant permission to:

Project Role: "atlassian-addons-project-access"

You maybe also "browse projects" permission. If in doubt just grant Project Role: "atlassian-addons-project-access" all permissions

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-software

jira-software-cloud

automation