Browse only permissions for Jira

Question

I am using Service desk which my customers have access to. I am trying to provide a customer Browse only access to the project.

I have create a new role for browse only, created a new permission scheme etc

The problem is that when I log in as the user I have browser only permissions to - I can either only see the service desk portal or see ALL my jira projects!

I have read ALL the documentation, tried everything suggested and I end up with the above always.

Please can you assist with a straight forward use case on how to provide a user/customer specific Browse only permissions to a project.

Reshikha · Answer

Thanks Nic. I have done the above but it still didn't work.

The second part of your solution helped fix the issue. The problem was that the default Software permission scheme added the Service agent as well.

I've had to create the customer as a service agent in this case.

Nic Brough -Adaptavist- · Answer

I think you are getting roles and groups confused.

* A group is a collection of users
* A role is a container for users and groups that crosses all projects.  For example, I can set up three projects, A, B and C, and one role like "developer".  I can then put different people into the "developer" role in A, B and C.

>However, I have not assigned that role to a specific project which I would like to do.

Roles appear in all projects as soon as they are defined.  There is no "add role" to a project, because you don't need it.  I think you mean "group" here.

> I am only able to assign this role in Product access not a specific project.

Again, this sounds like you mean a group, and the rest of your question and comment do not make a lot of sense unless you mean group, not role.

To do what I think you want to do, there's a simple thing to do, and a more complex task.

First task: let the users in:

* Create a role of "read only"
* Adjust the permission scheme so that it includes "Browse project: Role (read only)"
* In the one project you want them to see, add either individual people or a group containing them into the role of "read only"
* Add the same users to "application access" in "manage applications"
* (Bear in mind that this means your customers will now consume licence seats, as they are users now)

Second task: undo the horrible default access Atlassian have lumbered you with

* In the permission scheme for every project, look at the "browse project" permission
* Remove anything that says "application access" or "any logged in user", replacing it with a role of "users"
* Make sure the right people are in the role of users for each project

Alexey Matveev · Answer

Have a look at the coq items -> Applications -> Application Access. You will see default groups, which grant Service Desk or Software features to users. I guess these groups are included in the project permission schemes for each project. Make another group, add it to the Application access. Then make a new permission scheme. Remove old groups from there and add the new one. Attach this permission scheme to the required project and add your user only to the new added group.