nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to give a new group of users access to only a single project, and prevent access to others?

Tomislav Maric

I'm running a JIRA instance where the application users group is set up as per default, and everyone has access to everything within the organization.

Now there is a need to introduce a new group of users that should only have access to some projects.

How best to deal with this?

Accepted answers

All comments

Praveen

Hi,

You have to create user group and add them to the project.

Check the below link,

https://confluence.atlassian.com/adminjiraserver071/managing-groups-802592332.html

-Praveen

Tomislav Maric

OK, but should this group be a sub-group of jira-software-users group? If it is, then the members of this sub-group have automatically access to all other projects, which is what I want to prevent. These are the default permissions of the jira-software-users group listed in the documentation.

Gezim Shehu [Communardo]

Try adding a permission schema based on project roles. This can be applicable across different projects.

Create a new user group and add the members you want.

Let's say

Role "Core Team"

Configure permission schema that "Core Team" has:

Browse Issues Permission
Assign Issue Permission
Create Issues Permission
Assignable Permission
and whatever else you need

For "Project 1" , go to Users and roles and add "New_Group" under "Core Team" project role.

This would ensure that all members of "New_Group" have the permissions assigned above.

Tomislav Maric

OK, yes, but if every member of the New_Group must also be a member of the jira-users-group in order to be logged into the instance, every member of the New_Group will have the permissions given to the jira-users-group: they will be able to see every other project, which is what I want to prevent.

Praveen

Hi,

You can check the below link for instructions. The user has the exact same request.

https://community.atlassian.com/t5/Jira-questions/How-do-I-add-a-user-and-allow-them-access-to-only-one-project/qaq-p/723506

Gezim Shehu [Communardo]

That is a different case, but easily solvable.

First of all setting up permissions for Application Access Groups (i.e jira-users-group), imo is definitely wrong. Please revise that.

Second, for you exact scenario, go to JIRA -> Applications -> Applications Access and add "New_Group" under JIRA Software or Core, depending on what you're using.

This way members of this group will also have access to JIRA, but by not being members of jira-users-group.

Don't worry about duplicate. JIRA doesn't count duplicate or disabled users towards the license limit.

Tomislav Maric

OK, thanks!

Why do you think that the application acess as set up per default by Atlassian for the jira-users-group are wrong?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira

jira-server