Best Practices for Jira Access Control

[Muhammad Taha]

Hi,

We have an on-prem Jira environment where access is granted to everyone to work on multiple issues. Some of the issues have confidential information which does not have access control / Issue-based security. So, anyone in the company can access any issue and view attachments.

We have a requirement to implement access control in Jira so that only limited specified users have access to issues and attachments containing confidential information.

- Our Jira environment contains issues from the last 10 years, so it has a very high number of issues, and contains attachments.

I would like to have your opinion/best practices on the following questions!!!

1- What are the best practices for implementing access controls in Jira?
2- In such a case, What is the best practice to implement access control of previously created Jira issues?
3- How can we automate the process to apply issue-level security / any other access control on all our previous issues?
4- How can we automate the process to move all attachments to OneDrive and provide access to only the Issue assignee? After moving the attachments to OneDrive, it automatically posts the OneDrive link to Jira and grants access only to the assignee.

Looking forward to your response!

Best regards,

Taha.

[Brant Schroeder]

@Muhammad Taha 

1- What are the best practices for implementing access controls in Jira? Keep it simple.  If you can keep all of the sensitive issues in a project and only give individuals access to the project that need it.  
2- In such a case, What is the best practice to implement access control of previously created Jira issues?  If you can identify those issues and create a filter, you can just move them to the new secure project.
3- How can we automate the process to apply issue-level security / any other access control on all our previous issues? I would suggest creating issues via email and then it would keep the project secure or use Jira service desk.
4- How can we automate the process to move all attachments to OneDrive and provide access to only the Issue assignee? After moving the attachments to OneDrive, it automatically posts the OneDrive link to Jira and grants access only to the assignee.  You would have to write your own scripts or application that would use the Jira API and OneDrive API to do that.

[Brant Schroeder]

@Muhammad Taha if this answered your question can you please accept the answer to help others?