How can I restrict user groups to projects?

I've already spent a couple hours looking into this.  I figured it would be relatively simple, but not so much.

I created a group for each project I have.  I want the users in each group to only be able to access the project associated with the group I defined.

I'm not concerned with project roles yet.  I just want to restrict what users can even see the projects I want them to.

I haven't been able to find a painless way of doing this in the documentation.  Any ideas?  Thanks.

5 answers

1 accepted

This widget could not be displayed.

I can think of two possible approaches you can take:

or

  • Add a project role called something like "Viewers". Have a single permission scheme which applies to all your projects (for example, you could use the default permission scheme for this).

    In this permission scheme, only grant the 'Browse users' permission to the "Viewers" role (and admins).

    In each of your projects, use Users and roles to add the appropriate group (and/or users) to the "Viewers" role for that project.
Sam Hall Community Champion May 08, 2017

p.s. The role-based one is the 'textbook' way of doing it, because it has two advantages:

  • It doesn't require you to create a new permission scheme every time you create a new project.
  • If you wish, it allows you (as a full JIRA admin) to delegate the assignment of project roles to project administrators.

If you go on any JIRA courses, you'll find the experts all agreeing on "use roles".

Groups are to be used in roles, global permissions, and very special cases.  "Never use groups in a permission scheme" is a good start

This widget could not be displayed.
Ann Worley Atlassian Team May 08, 2017

I hope I am understanding correctly. It sounds like you just need to add each group to a permission scheme, and associate the different permissions schemes with the appropriate projects.

Adding users, groups, or roles to a permission scheme

Deleting users, groups, or roles from a permission scheme (So the wrong groups are not included)

Associating a permission scheme with a project

The fastest way would be to remove jira-software user group from the default security theme (leaving only Jira Admins for example), then add the groups to the accociated projects.

This widget could not be displayed.

Go to Jira Administration > Issues > Permission Schemes. Then from the Default Permission Scheme, choose Permissions. Under Browse Projects > Edit, change Application Access by unchchecking the Browse Projects object. Now, go into each project and add the group you wish to have access. 

This widget could not be displayed.
Joe Pitt Community Champion May 08, 2017

JIRA works on a ALLOW, not restrict, permission. This problem usually arises when you put the jira-user group (all users that can logon) in a permission scheme. In essence you have allowed the jira-user group access to every project. In my experience very few projects really need or want that. I suggest setting up project roles and assigning them permissions and they allow the project admins to add users to the roles. It removes the JIRA admin from the equation and gives just those users access that actually need it. If you really want the jira-user group to have permission the project admin can assign the group a role. 

This widget could not be displayed.

What I ended up doing was:

  • Gear -> System -> Project Roles,
    • create "Developers" role.
  • Gear -> Issues -> Permission schemes -> Default Software Scheme
    • remove 20+ "Application access: Any logged in user"
    • add 20+ "Project role: Developers"
  • Gear -> Projects -> PROJECT -> Users and roles -> Add users to a role
    • find users, add "Developers" Role

Thanks all for the advice!

Ann Worley Atlassian Team May 08, 2017

Thanks for sharing the resolution, it really helps support our Community!

Suggest an answer

Log in or Sign up to answer
Atlassian Summit 2018

Meet the community IRL

Atlassian Summit is an excellent opportunity for in-person support, training, and networking.

Learn more
Community showcase
Posted Wednesday in New to Jira

Are you planning to trial, or are currently trialling Jira Software? - We want to talk to you!

Hello! I'm Rayen, a product manager at Atlassian. My team and I are working hard to improve the trial experience for Jira Software Cloud. We are interested in   talking to 20 people planning t...

84 views 1 0
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you