How to restrict agent to only one project

[Per Hallenborg]

Situation:

We have an external supplier who need access as agent to a ITSM project, but only that.

Done so far:

Added user to an Azure AD group (which we use for access to all Atlassian products) and added the group to the SM project. Fine so far.

Followed some guides for how to restrict access, for instance https://support.atlassian.com/jira-cloud-administration/docs/manage-project-permissions/ ,

but when logged in as the external user, I can see all ITSM project in our environment, not just the project for me.

How can I solve this problem? Would it be better to invite the user as external directly to the project, instead of using "existing internal users" in the setup?

[Joseph Chung Yin]

@Per Hallenborg -

What you need to do is to control project access via Project settings >> Customer permissions to set the project visibility inside the portal -

Then you need to make sure the the proper users or group for accessing your project are setup properly.  So if users/groups are not called out for accessing against the specific projects with the "Restricted" Customer permissions setup, then he/she will not see the project(s) within the portal UI.

Hope this helps.

Best, Joseph Chung Yin

Jira/JSM Functional Lead, Global Technology Applications Team

Viasat Inc.

[Per Hallenborg]

Thanks. So if I understand it , we need to set Restricted access to all projects in order to make them not viewable?  Since we have all our projects Open, then we can't restrict access.

[Per Hallenborg]

And also, when I click Customers Permission, all I get is "Somethings gon wrong". I am Global admin, but on this project something is wrong. I also get ERROR: 1AQFRTA

[Albert Manuel]

Look at the rest of the projects that he can see - what setting do you have in "Customer permissions"? Maybe you have ALL or something?

When dealing with external's i tend do have a separated group just for them with explicit restrictions.

[Per Hallenborg]

Thanks for your reply. Seems that we have all projects open, so that can be the issue.

How do you restrict a separated group and its restriction, if everything is open?