Restricting Admin from Viewing Issues

[Teodor]

I am working within JIRA Cloud and creating a Service Desk portal for our HR department, as well as an associated Software project that Issues can be linked to. 

As some of the questions coming into the service desk portal might have sensitive information/be private, is there any way that I can restrict myself as admin from viewing Issues in the portal? 

I tried removing myself from the browse projects permission in our permission scheme, but this is giving me an error that the permissions are not configured correctly. Regardless I am still able to click into the Issues...

If anyone has any insight, much appreciated! 

Thanks

[Susan Hauth _Jira Queen_ · Accepted solution]

Hi Teordor,

I would look into using Issue Security:

https://confluence.atlassian.com/adminjiracloud/configuring-issue-level-security-776636711.html

You could set a default security level that doesn't include you but is inclusive of the HR department.

Cheers,

[Teodor]

Thanks Susan! This sounds promising  looking into it now :) 

[Jack Brickey]

Thanks @Susan Hauth _Jira Queen_. I was unaware that it was possible to exclude the admin. I will have to play with that. Question, what prevents me as an admin from changing the security back such that I do have access? Honesty? ;-)

[Susan Hauth _Jira Queen_]

Hi @Jack Brickey

As an admin, you don't need to be in the default security type, so they can be hidden to you.  But you are correct as an Admin, you could always add yourself into that security level.

Cheers...

[Teodor]

@Jack Brickey My thoughts too - the restricted security is only really on paper..if you want to, you can adjust it to see the content of Issues at any time and no one would be the wiser.

[Susan Hauth _Jira Queen_]

As a Jira admin "With great power comes great responsibility". 

:-)

[Jack Brickey]

precisely so you need to establish a trust relationship w/ HR or use encryption.

[Jack Brickey · Accepted solution]

This is not possible at this time. As an admin you have full access. Some options would be to encrypt the sensitive material as attachments or store the sensitive material in a cloud drive and provide links in the ticket to the document.

There is likely a suggestion open on this bu unsure if/when it wold be implemented. Consider that there is sensitive material today that flows thru email and IT has access to this so it isn’t an issue presented b Atlassian. Companies need to ensure certain resources understand the responsibility and consequences if abused and/or put methods in place to protect confidential info.

[Teodor]

Hi Jack,

Thanks for the answer. 

Would rather not have different platforms on the go as were aiming to consolidate everything onto JIRA.