Update default permission settings

chris berger

We started off using Jira and Confluence with the standard permission settings where essentially everyone has access to everything which was somewhat ok since it was used internally only. Now, we are facing the need to also interact with external parties and I am not sure how to replace the default permission settings with a more granular and better controlled permission environment.

Joe Pitt

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (used to be JIRA-users but may be different on your version).  This is probably where you're getting the access from.

 

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. One permission scheme will cover almost all projects. The project admin controls project role membership

 

This may be a big effort, but it will payoff down the road by making it easy to control access.