all invited users get access to all projects - how to avoid?

Question

I have some clients that use our Jira and should only access the projects I assign to them, not all projects of our organization.

I tried managing this via groups - assigning them to a group and excluding them from default group "jira-users" that gives them access to all projects automatically. However deleting those users from the group does not work. Everytime they sign back in the get automatically reassigned to the default group "jira-users" and get access to all projects of our organization.

what would be the correct process?

John Funk · Answer

Hi Katharina - Welcome to the Atlassian Community!

I suggest you handle access via product roles. So update your Permission Scheme(s) to use product roles and not groups. Also remove any references to "Any logged in user".

Then add users to your projects (this can be done by a Project Administrator also). You can add groups to a project role (like jira-users) if you want on some projects and not on others.

Prachi Bolar · Answer

Hi Katharina,

Welcome to Community :)

You can do the following here

Option 1

Update the default group access to some other group and remove jira-users

* Navigate to the admin UI>Products
* Select (...) next to the product and select "Manage product access"
* You will find all the groups that have access to the specified product
* Select (...) on the desired group and "Update default group setting"
* Select from None to USer
* Update

Post this again

* Navigate to the admin UI>Products
* Select (...) next to the product and select "Manage product access"
* You will find all the groups that have access to the specified product
* Select (...) on the Jira-users and "Update default group setting"
* Select from user to none
* Update

This way when user is invited to your instance they get product access to via another group which is not part of your browse permission scheme

Option 2:

- if you want to keep jira-users as default group then you will have to remove this groups from the permission scheme ( browse permission from all company managed projects )

for team managed project you can change the access from open to private

Thank you,

prachi