allow the default "automation for Jira" actor to post restricted comments in a specific project

Question

Hello everyone,

In Jira automation, the default flow actor is the “user” called Automation for Jira.

I am currently creating an Jira Automation to post a comment on a work item in a certain project space. The content for this comment is created by an Rovo Agent.

My goal is to post this comment as a restricted comment on the work item only visible for to certain roles and groups.

When the Flow actor is set to "Automation for Jira", and Comment Vsibility to Role "Developers", I receive the following error on execution of the Flow/Automation:

Error adding comment to issueYou are currently not a member of the project role: Developers. (commentLevel)

It works fine when I set myself as the actor for the Flow (Since I am part of the 'Developers' Group). But this is not intended, as everything on the work item is now done on my behalf (History tab as well as receiving notifications): https://support.atlassian.com/cloud-automation/docs/run-jira-rules-as-another-user/

There is also no option for me to add the "Automation with Jira" user to the project space via "Add People" and grant the necessary role/group.

How can I post restricted comments with the default Automation with Jira "user" ? Or do we have to workaround here with a dedicated "Service User".

Fazila Ashraf · Accepted Answer

Hi @Patrick Possberg

When you tried adding 'Automation for jira' to the project role, did you by mistake tried "Automation with Jira" as you mentioned in the question?

Can you try the email address mentioned in KB https://support.atlassian.com/jira/kb/resolve-jsm-cloud-automation-rule-errors-related-to-project-role-membership/ ?

Nikola Perisic · Accepted Answer

Hi @Patrick Possberg

There is no direct approach to this. You can add Automation for Jira system user to the Add comments permission.

Restricted comments can be modified only when the comment has been made on the work item manually. Additionally, you can create an automation rule that will include the Work item security level only for the users that need to see a specific work item - BUT they will be able to see all of the comments.

Marc -Devoteam- · Accepted Answer

HI @Patrick Possberg

The flow actor "automation fo Jira" is not a real user, but a role in the system. Simply said it's an app you can't grant this specific permission or add the user to a space.

So yes, you will need to use a real user that can be added to a space role or permission, so you could use a Service Account for this (assumption), make sure to provide the correct scopes