Managing users' access in Jira using groups

Question

Could you please refer the below screenshot and let me know if the user mentioned has access to that particular project. I assigned this user to a different user group and I want this user to access only that project assigned for this group.

If this is not the way to do this, please advise! My requirement is to give the users access to a particular project only!

Nelphy Rose Siby · Answer

Will definitely try this. Thank you, Walter

Walter Buggenhout · Answer

Hi @Nelphy Rose Siby,

If these are the only schemes you are using, the default scheme is linked to all projects except Mark's and the MGM scheme is linked Mark's project only, then this should work (in terms of just granting access).

However, a couple of notes:

* I see that you use groups in your permission schemes to grant permissions. While that works technically, it is not really best practice. It is recommended to use project roles in your permission schemes (such as administrator, developer, ...) and link user groups to those roles in each project (Project settings > People). That would allow you to limit the number of permission schemes and delegate user management to project administrators.
* You seem to have removed the project role atlassian-addons-project-access from the second project. Put it back 😅! This role is required for app functionality to properly work and may be the reason why you are getting strange results from the permission helper
* By granting the browse project permission in the new permission scheme, you allowed the user(s) just to see the project and what's in there. But you need to enable all the other permissions that you want to give your users too. To create issues, you do need the Create issues permission. Or to change the status of an issue, you need Transition issues permission, and so on. For more details on all permissions, see this support article.

Nelphy Rose Siby · Answer

Got it, Walter.

This is what I intended to do. Mark is one of our clients and we want to give him access to his project only. I added him as an user and added him to a newly created group. This group is included in the Browse Projects section of the Permission scheme (created a separate one for Mark's project) along with my organization's users. (see screenshot below).

The remaining projects in my Jira cloud are using the default scheme and this scheme's browse project permission is configured as shown (note that Mark is not a part of either the Group (jira-software-users-tunagroup) or the Project Role (atlassian-addons-project-access)).

My understanding is that, if it is configured this way, then Mark should only be able to browse the projects using the MGM scheme and not the default scheme.

Please see the screenshots shown below and let me know if there is any other setting I need to do so that I can restrict Mark from seeing projects other than his own.