nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How do I add a user and allow them access to only one project?

Henrik Roback

I have created a project and I want to add an existing user to view only that project and no other projects. It seems like the most basic thing to ask for and I've tried to follow all online documentations for 2 h hours now without any success!

I understand it ables you to create complex user permission roles but from a usability point of view this is very frustrating and a complete fail!

Accepted answers

All comments

Joe Pitt

JIRA uses the best practice model of granting permission, not restricting it. It sounds like you give the jira-user group access to your projects. Sadly, that is how it comes out of the box. Every user you create, by default, goes into that group. It is the group needed to be able to logon. The first thing is to remove that group from every permission scheme. I suggest using project roles because it allows the project lead to grant access and project roles are useful in restricting transitions. Depending on how many users and permission schemes you have this could be a fair amount of work, but it will be best in the long run. The only project I give the jira-user group access to is the one that request and tracks changes in JIRA and I only give browse access.

Henrik Roback

Hi Joe, thank you for your answer. I just want to add one single user to a project and that person should not be able to view any other projects. I have tried by creating a group where i add the user and then assign the group to the project but without result.

I'm completely stuck with this and can't find any tutorial or examples for just this case. I've tried to follow the guides but they are not helping. It seems like they are outdated.

Nic Brough -Adaptavist-

All the docs and guides are similar, as the access model has not changed hugely since Jira 3.6

The one big change was the defaults in JIRA 7.0 - instead of having a "jira user" group grant login and some project access by default, the groups changed to three "can use application" groups. This does not significantly change what you have to do though.

You need to unpick the defaults. Check every permission scheme to see what the access rules are (browse project is the most important rule to read). If you're close to the defaults, then you should have healthy schemes that say "Browse project: role: user"

Next, go into each project and update the user role. Add people and groups into it to allow them the access they need, then remove the groups that let you log in.

Finally, you'll then be able to add your single user to the one project you need them in, and they won't get default access to other projects because they are in a login group.

Henrik Roback

Thank you for your help Nic but I've spent a full day on trying to solve this and i have given up now. I'll cancel my subscription and move another tool! I can't be the only one struggling with this.

Boris Berenberg - Atlas Authority

There is a much simpler short term workaround while you implement the correct, and long term more sustainable option which other authors have suggested.

Create a new group
Put user in group
Put group into Jira Users global permission
Grant user access to project via Roles.

Henrik Roback

Thank you for the step-to-step guide!

I have done #1 and #2, i don't have any "Jira Users". The closest i have is "jira-software-user" and I'm not sure how to add the group i created to that user by looking at this page.

Boris Berenberg - Atlas Authority

You need Global Permissions, not Permission Scheme.

If you're on cloud: https://confluence.atlassian.com/adminjiracloud/managing-global-permissions-776636359.html

If you're on server: https://confluence.atlassian.com/adminjiraserver075/managing-global-permissions-935391138.html

Henrik Roback

Im sorry but it looks like Global permission for me?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira