OAuth with Impersonation on subset of users

Question

We have two JIRA instances, one customer facing, with customers and supporters/devs as users, and one internal, only our staff.

I would like to go for the benefits of impersonating oauth, esp. for the making requests on behalf of the user who is currently logged in between systems, e.g. supporters creating an internal issue from the customer facing Jira.

Is this possible with a strict subset of users, so not exactly the same userbase?

What would happen if a user that does not exist on the internal systems tries to open a link there, or even create a new issue?

Thanks for any advice,

Marco

JenniferB · Answer

I basically have the same question.  If certain users are the same on both instances does that give them access to only the projects they are assigned on each individual instance? And is that even allowed if the user bases aren't exactly the same for both?

I cannot pursue Oauth because I want to be able to specify what access a user has, not give full access between.

Thanks!