Invited customer automatically get access to other projects

[Jon]

Hi!

I noticed a few earlier post related to what I am experiencing, however I just can't figure out how to fix it.

So. We have a few projects in Jira - few of which we want specific customer invited to those projects - but only those. Whenever I invite a customer to a project either Team-managed software or Team-managed business they get automatically added to a group - jira-workmanagment-users-XX-XXXX. Which is a default access group, and this group has access to all projects.

The only way we figured out we could "fix it" - is by making all the other projects private. However we do have one project which is Company-managed software, and we can't make this project private.

The invited users also want access to the Service Desk - a Service management project, but here the user can't be able to see everything, but only create issues (bugs, feature etc).

So. To shorten: Whenever I invite a user, I want this user to only have access to the project invited to, and the option to create issues in the service management project.

[Alex Koxaras _Relational_ · Accepted solution]

Hi @Jon and welcome to the community,

Since you have granted product access to JWM via the default group, you are obliged to change the permission schemes of all projects, in order to grant proper project membership to users. Especially the Browse Project permission of all current project shouldn't have any option added which will grant them project access (such as the option "any logged in users"). You have to carefully construct the proper permission scheme and apply to all projects. For team managed projects you should make the access private or limited and not open.

Hope the above helps!

[Jon]

Thank you so much, it helped!

A few follow-up questions if thats allowed.

1. We have clients in different organizations in jira service management. Is it possible to have a whole organization invited (with the members) to a project?

I.e: There are 5 users in KayakRide - an origanization in Jira service, they can see each other issues in the service desk and all. Can I invite the KayakRide-org to a newly made project with no permissions except viewing the project?

2. Is the Jira work management and the jira service management connected somehow? I created a blank account with only permissions to view 1 project. And I created an issue on the same account, but I cant view the issue from the same page/url as the project is located, if that make sense. 

Is there a way to connect a user account to its issues and its projects on the same page?