Scoped token for components

Question

Thanks in advance for any answers.

I am trying to create/use a scoped token for reading/writing/deleting components (trying to automate a process).  I am encountering a 401 (not surprising).

What is the minimal set of scopes/permissions I need?  The goal is to keep it as locked down as possible.

Trudy P Claspill · Accepted Answer

Hello @Devon St_ Denis-Richard

Welcome to the Atlassian community.

Are you using Classic or Granular scopes? Have you looked at the required scopes listed in the API documentation for each endpoint and method?

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-post

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-id-put

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-id-delete

https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-project-components/#api-rest-api-3-component-id-get

What scopes have you assigned to the token so far?

Are you doing this for a personal token or a service account token?

What are you doing for authentication? Are you sure your authentication is succeeding?

Does the identity have proper application access and proper access within the space(s) where you are trying to manage Components?

Are you automating this through a script or through Jira Automation, or some other path?

Mikael Sandberg · Accepted Answer

Hi @Devon St_ Denis-Richard, Welcome to Atlassian Community! If you look under scope for example Create component you need the following scopes: read:project:jira, read:user:jira, write:project.component:jira, read:application-role:jira, read:avatar:jira, read:group:jira,
read:project.component:jira To find components used in the space the following scopes are needed: read:project:jira, read:project.component:jira, read:user:jira,
read:application-role:jira, read:avatar:jira, read:group:jira And to delete you need to following: delete:project.component:jira So based on that you would need the following scopes to read/write/delete read:project:jira, read:user:jira, write:project.component:jira, read:application-role:jira, read:avatar:jira, read:group:jira,
read:project.component:jira, delete:project.component:jira Also note that if you are using an Atlassian service account that the URL used for the API is different, for example https://api.atlassian.com/ex/jira/{cloudId}/rest/api/3/project/{project_key}