Team managed project permissions issue

[Tracy Miller]

I am trying to allow access to a team managed project but the user also sees other projects that they should not.  I am not sure how to fix this.  Do I create a permission scheme for team managed projects or not

[Trudy Claspill]

Hello @Tracy Miller 

Welcome to the Atlassian community.

Team Managed projects (vs. "classic" or Company Managed projects) are available only in the Jira Cloud product. Can you confirm you are using Jira Cloud?

And if you are using Jira Cloud, do you have both Team Managed and Company Managed projects or just one or the other in your instance?

To allow a user to see only one project you have to first make sure that they have the correct permission to see that one project, and then you have to ensure that the access for all other projects is set up so that the user doesn't have permission to those other projects.

The exact method to do this depends on whether you have Team Managed projects or Company Managed projects or both in your environment.

For Team Managed projects the Access setting must be Private in order to prevent unauthorized users from seeing that project. Refer to this for more information:

https://support.atlassian.com/jira-software-cloud/docs/next-gen-permissions/#Project-access-level

If you have Company Managed projects then access to those projects is governed by the Browse Projects permission in the Permission Scheme(s) used by those projects. If that permission has been allocated to "Any logged in user", then that makes the project visible to the user. You would have to change the allocation of that permission in each Permission Scheme to ensure that it is not allocated to Any Logged In User, and to ensure that if it is allocated to users groups it is not allocated to any user group where the user you are trying to limit is a member. Permissions in these schemes might also be granted to Project Roles, and Project Roles can be assigned both to individual users and to user groups. So if the Browse Projects permission is allocated to a Project Role, then you have to check the individual projects that use that scheme and examine their roles to see who has been granted that role, and ensure that doesn't include the user you are trying to limit either as an individual or as a member of a user group.