nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How many permission schemes do I need?

Peter Pitchford

I am using jira and I want to set up 3 groups of users, Each group will have its own projects and will not be able to access the projects of the other groups. Otherwise, all users and groups will have the same permissions. Can I do this with 1 permission scheme, or do I need a permission scheme for each group?

Accepted answers

Jeremy Gaudet

Typically one scheme is fine, you just have to make all granted permissions based on the project roles; from there, each project's roles will have different users.

If you make the privs group based directly, then you'll need an explicit scheme for each set of groups.

All comments

Jeremy Gaudet

Typically one scheme is fine, you just have to make all granted permissions based on the project roles; from there, each project's roles will have different users.

If you make the privs group based directly, then you'll need an explicit scheme for each set of groups.

unknown

You have to understand that the Permission Scheme can work with "Roles" on which you will have to define yourself too. So one Permission Scheme is fine. For example, in the "Browse" Permission (ability to view the project) put in a "Role" you want to have access to this permission. Then in the Project "Roles" section, add your desired "group" in that role.

Peter Pitchford

OK, I have added all 3 projects to the default permissions scheme. Now how do I limit the projects that each user can view? For example I have a user which is only in Group A that is only supposed to view Project A. When he logs in, he can view projects A, B and C. How do I limit Group A to Project A?

Jeremy Gaudet

You probably don't want to use the default permission scheme, as it may not be appropriate for you to make changes to it. If the user in Group A can view all 3, that means the "Browse Project" permission is either open to the "jira-users" group (or some other widely open group), or else it's based on the "Users" role, and that role is open. I would copy the default priv scheme to something specific for your 3 projects, make certain no privs are group based, then check each project role to make sure it is restricted appropriately.

Peter Pitchford

I have followed your suggestion and create a new permission scheme. Otherwise, I am still having problems getting this to work. This is my set up : All projects have been added to the same permission scheme. User A has been added to group A. Group A has been added to project A. User B has been added to group B. Group B has been added to project B. User C has been added to group C. Group C has been added to project C. When I login as user A, that user has access to to projects A B and C Each user is also in jira-users and no other group. What am I doing wrong?