nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How do I add a test user (external client) to Confluence / JIRA ?

Jiju Mathew

I'm trying to add an external client, say, TEST to confluence / Jira.

I created a user (TEST) but via Site Adminstration > Users > Test > clicked on Application access, it appears that he has access to Jira and Software. But since Confluence-users and Jira-software-users are also groups, the test user has access to all projects and spaces in Confluence.

So, if we have Project A, Project B, Project C & Space a, Space b, Space c, how can I have the test user have access to ONLY to PROJECT B and also to a SPACE B -- PLEASE ADVISE

Accepted answers

All comments

Nic Brough -Adaptavist-

Do not put them in the confluence-user or jira-software-users groups.

Either define new groups that let them log in and only get access to the projects and spaces you want, or change the permissions so that they do not use those "can log in" groups, and use other groups which you can not put "test" into.

Brant Schroeder

Jiju,

Only use confluence-users and jira-software-users to control access to the application, since all users have to have these permissions for licensing, and remove those groups from the default permissions or off of the projects and spaces that they are associated with. Then create additional groups for access to spaces and projects. For example. We have 2000 jira-software-users that can access JIRA. We then have a group for ITS, Marketing, Payroll, etc. That we place on project relevant to them. Often on projects we bring in users external to the company. We can then add them to relevant projects and they only see those projects when they login.

Jiju Mathew

I'm tracking with you but since I'm new to Jira, need some rails for "how-to" here. So, currently the test user (external) has access to the applications (confluence-users and jira-software-users). Obviously I want to have him access only 1 project / space

How do I remove those groups (which groups?) from permissions or projects & spaces? I cannot just remove confluence and jira software users? Is that what you are telling me?

Could you kindly explain a bit more step-by-step, would appreciate it.

Jiju Mathew

This is what I did:

created a new role.
copied the default permission scheme in the Issues management section. Added new permissions for this new role to the copy. Renamed it.
associated this new permission scheme to a specific project
created a new group (external client)
gave that new Group Jira User access. so can now login and out.
assigned my new user to that role and group.

IT still did not give the external user access to a specific project. Rather the external user has access to all projects, which I do not want.

So, application access is basically for logging in (Jira-software users, Jira-admin, confluence-users) all dealt with permissions. Since this external user is part of confluence-users and jira-software-users - he has access to login AND in my case all the projects visible to him.

Can someone please explain GLOBAL permissions and JIRA permissions? How is that different from Permission Schemes?

What am I doing that's wrong? Can someone please assist?

Jiju Mathew

@Nic Brough -Adaptavist-

Can you please help?

I’ve tired the following tasks:

Created a project role and added the user
Copied the default permission scheme and associated it
Gave access to user and group (project level)
Added the group to global permission

But none of these worked – Am I missing something here?

Right now, the external client has app access to confluence-user or jira-software-users groups. I'll take them off these user-groups, then can you please show me a 'how-to' from here? Surely, this is not complicated, I'm just trying to get this external client access to ONLY a specific project / spaces. Please, please help.

Jiju Mathew

@Nic Brough -Adaptavist- - Created a group - they 'can sign in' and not part of Jira-software user and confluence-user.

Brant Schroeder

Jiju,

Option One Setup:

Groups

jira-user
confluence-user
Internal-User
External-User

Users

User 1 - Internal-User, jira-user
User 2 - Internal-User, jira-user
User 3 - External-User, jira-user

Projects

Project 1 - For Internal Users Only
Project 2 - For External and Internal Users

All default JIRA & Confluence permission are default, no groups have been added to the core JIRA or Confluence permissions.

Project 1 - Add the Internal-User group to the project role user or developer and they can now access this project.

Project 2 - Add the Internal-User group and the External-User group to the project role user or developer and they can now access this project.

If you edit the global permissions and add the jira-user role to the global permissions it will apply to all projects. Since jira-user is a required role to access JIRA you will remove the ability to provide granular project access that you get by adding roles at the project level.

Option Two Setup:

Groups

jira-user
confluence-user
External-User

Users

User 1 (Internal User) - jira-user
User 1 (External User) - jira-user
User 3 - External-User

Projects

Project 1 - For Internal Users Only
Project 2 - For External and Internal Users

Project 1 - Add the jira-user group to the project role user or developer and they can now access this project or add them to the global permissions.

Project 2 - Add the jira-user group and the External-User group to the project role user or developer and they can now access this project. You will also need to give External-User application access.

Application Access:

Choose > Applications.
Select Application access in the left-hand menu. The Application access page displays all your applications and their associated groups, including their default groups.
Locate the application you want to assign a specific group to, and click the Select group... drop-down.
Select the group you wish to add. The group will be added to the application.

Jiju Mathew

@Nic Brough -Adaptavist-- to further clarify, right now, I have two project roles:

Admin
Project-Access
- Two permission schemes
  - Default Permission Scheme
  - Default Software Scheme
    - Associated projects (* I need the external client to have access to ONE project in this)
    - Project Role Members per Project

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

jira

cloud

jira-cloud

confluence-cloud