Add External users to JIRA.

[Raju AD]

Hi, We have multiple Projects in JIRA (v 6.3), now we have to add few Contractors to the JIRA and for a specific project and would like to restrict the access to Other Projects. We don't have individual Users group for each Project, jira-users (with JIRA Users global  permission) mapped to Users role in all the Other Projects. I know we can create a group for Contractors some thing like "Contractors Users Group" and assign "JIRA Users" permissions (Login to JIRA --> Systems --> Global Permission --> Add permission and Select Group) then the group come under "jira-users".

Here is my main Concern, Since then, for every User I add (not only contractors) to JIRA, User is by default getting added to both the jira-users and "Contractors Users Group" group always. every time, I need to exclude the Other Groups (we have 4 groups like "Contractors Users Group"). How can we come over from this issue? User should get add only to jira-users group.

Any Suggestions please..

[Thomas Deiler]

Dear @Raju AD,

your concerns is totally true and will happen. To avoid this in the future you need to separate Project Access from Application access.

Eg. create a group called "Jira Access". This one is assigned the global permission "Jira Users". This ensures that everybody can login but see no project by default. Both other groups need to be removed from "Jira Users".

New users now can only access Jira. To do more they need to be added either to jira-users or contractors.

For contractors you create best an news role - so the things are still separated.

For just a few user accounts the manual effort stays low - if you have hundreds you can do some post-processing with the REST API (adding users to specific groups|POST /rest/api/2/group/user).

So long

Thomas