Restrict group to certain issues

Cyril Gabathuler_9hoj3q

Hi all

 

Following use case. We would like to add a new group of "external" users to our Jira which are only allowed to see a specific project and in there only specific issues. Everything else (other projects, other issues) should not be accessible to them. If possible I only wan't to adapt the issues they are supposed to have access to and not touch all the other issues.

So far I was unable to limit the access accordingly.

Thanks

Cyril

Walter Buggenhout

Hi @Cyril Gabathuler and welcome to the Community!

First of all, you would need to make sure all your projects are indeed restricted. In company managed projects, that means making sure that the permission scheme(s) used in any project do not grant browse project permission to Any logged in user. If that is currently the case, you would have to update all permission schemes that are set up like that, remove Any logged in user from the browse project permission and instead explicitly grant access to your users using project roles and assigning your users to the appropriate roles on the people tab of project settings. In team managed projects, make sure that access is not configured as Open, as you would be facing the same problem there.

Once you've done that, you can assign your external users to a role in the one project set up for them. You assign the group to a role in the project in the same way as for your internal users.

Finally, to secure your individual issues in a single project, you would have to set up issue level security for the project. 

Hope this helps!