How can I configure a project for my Legal Department who has privacy & visibility concerns?

Question

I'm working to increase digital adoption of Jira Software within our company. Our Legal Department needs their project & tasks to be visible to ONLY the users they specify - even Jira Admins should not be able to see the tasks within their projects.

Is this possible by creating a Team Managed Project and then using Issue Level Security settings? Or will Jira Admins always be able to see the tasks in any project?

Nic Brough -Adaptavist- · Accepted Answer

Team managed projects do not have issue level security, so I think that may be a non-starter for you.

For both team and company managed projects though, the key is who you let into the project.

Team managed projects have simple roles, and the way to prevent someone seeing the project is to not add them to it.

Company managed projects have permission schemes, which are rules on who can do what.  The important one here is who has "browse project" permission, and the best option for you here is to set that to something like "Role: developers" (instead of the default of "any logged in user").  Then your project admins can add and remove whomever they want in the role.

Admin rights give people admin rights, not "can do anything".  If you don't put an admin in the developer role, they can't see the project or its content.  But as they are admins, they can add themselves or change the permissions.

Karina D. · Accepted Answer

Adding my +1 to this; Next gen would have been perfect for my legal department except for the issue-level-security issue. Atlassian should keep in mind that non-dev teams (particularly cost center's like Legal) aren't at the top of the 'we need work done in Jira' hierarchy in our respective companies, so allowing Legal Ops to self-serve with more customizable permisioning in team managed projects would overcome this huge obstacle for usage.