Howdy, within an organization. Is there a way to restrict user access to files?

Question

Different divisions inside our organization have access to files from other divisions. Since we are regulated by HIPAA it is an issue for us. Is there a way to create boards that are highly restricted to other teams within the organization?

Josh Costella · Answer

Hi @Einar.Jordan

Can you clarify what you mean by "files?" Do you mean tickets? If you mean tickets then you have a few options depending on how the Jira projects in your instance are configured.

The Browse Project permission in the project permission scheme controls view access to the tickets within a Jira project. More here: https://support.atlassian.com/jira-cloud-administration/docs/permissions-for-company-managed-projects/

If you have to grant view access to users but only on some tickets, then you would utilize an Issue Security scheme. More here: https://support.atlassian.com/jira-cloud-administration/docs/configure-issue-security-schemes/

Please let me know if you have any further questions.

Nikola Perisic · Answer

Welcome to the community @Einar.Jordan

Since boards are based on your filters, you can configure your board and to determine who are you sharing this board with. By default, a board can be shared with:

* Project
* Group
* User
* Organisation
* Private

Configure Board > Filter Permissions > Edit Permissions

You can also define the editors as well.

As an additional layer of security, you can set up issue security scheme where you will define your security level which is tied to an issue type (you can create a new issue type only for this purpose). These issue security schemes can define which project role will ONLY be able to see the issues that have been created under the issue type that is tied with the issue type.