Limit Client Access to Jira

Question

I have a request to set up a Company Managed project on our Jira instance for a client group. So far, nothing I've tried lets me invite an external user with access limited to only the project to which they are assigned. The documentation I've found seems to be very outdated.

I have set up the project with a Restricted Access permission scheme and a Group that is assigned the Client role in the project. The Client role does not have Browse Project permission.

I feel like I need to create a new Global Permission role that grants product access, but limits to specific Project Groups? What am I missing?

Ste Wright · Answer

Hi @Lydia M

Browse Projects is only controlled through Permission Schemes, there's no global setting for this.

That means existing Projects have provided access beyond your need and/or your Permission Scheme isn't set up as required.

Could you provide a screenshot of your "Project permissions" (just the top section)?

---

I'd also check jira-users is not a default Group, i.e the external users aren't also being added to this Group as it's the one "everyone" gets.

Ste

Lydia M · Answer

Hi Benjamin, we do not have Jira Service Management, and this team will be using Jira for more than service requests.

Thanks for the suggestion.

Lydia M · Answer

Hi Stephen, thanks for your detailed response!

So far:

All 3 of your assumptions are correct.

Platform Access: The jira-users group is for our internal users and allows full access to Browse Projects. We have an external-users group as well that is supposed to be limited. As far as I can tell, the access does not differ significantly from jira-users based on my testing. I can't seem to get back to where I can see what the permissions are or how to change them.

I have already added a client group at the project level with a limited permission scheme, but the Platform Access is overriding it.

We are not currently using Atlassian Access.

Global Permissions: I found the page you linked in your response prior to posting my question and could not derive a solution from the information provided.

Existing Projects: As I did not set up our Jira instance, I don't know how old projects were set up by the people who set it up and have now left the company. I can only say that all my current projects are set up using appropriate security parameters. Apparently I have some work to do with regard to governance and user/project permission review. At least we do not have any "all users" settings currently in effect.

New Project: See above re: already created w/limited permission scheme. The problem I'm running into is that the platform access incudes Browse Projects at the platform level.

I'm going to see if I can figure out how to modify the existing external-users group so that they need to be added by project to browse projects. I also found an employee-users group that apparently has not been used. As I said above - clearly I have some work to do...

Thanks,

L