Can i only add group to permission scheme but not in to the project roles?

[Joanna Bajda]

Hi,

I have permission scheme set up with groups (provides access to the application) let say: group1 and group2.

Groups are not included in Global Permissions nor in any project roles in Project X.

Even so, people from groups 1 nad 2 are able to work on Project X as set up in Project X Permission Scheme.

I'm new with Cloud, on Server even if the group or individual user is added to permission scheme, you still need to ad the group or user in to the project role to provide an access.

Anyone can explain that?

[Alexey Matveev · Accepted solution]

Hello,

You can set permissions with roles, groups and users. If you follow best practices, then you should add users to groups and groups to roles and then in project permissions schemes you should grant permissions to roles (not groups or users). But if you grant a permission to a user, then you do not need to grant this permission to a group or a role. The same with a group. If you grant permission to a group, you do not need to include this group to a role.

[Bastian Stehmann · Accepted solution]

Hi @Joanna Bajda,

I am not sure if I understand you right, as you are writing that you set up a permission scheme that grant application access.

So application access is configured in Jira Settings-> Application -> Application Access. This has nothing to do with a permission scheme.

Permission schemes are used to configure permissions for a project. There you can define, which group, user or role should have a specific permission.

So if you configure your permission scheme with groups, you do not have to add the group to a project role. If you use project roles, you have to add the group to the project role.

This works btw. the same way on server.

So you need to check your permission scheme in project X, how or to whom the permissions are granted.

If I remember correct, default permission is, that any logged in user may view and edit issues.

[Bastian Stehmann]

And here the link to the documentation about permissions

https://confluence.atlassian.com/adminjiracloud/managing-project-permissions-776636362.html

[Joanna Bajda]

Hi @Bastian Stehmann

"I am not sure if I understand you right, as you are writing that you set up a permission scheme that grant application access."

What I wanted to say is: groups included in permission schemes, are set up as "provide aplication asscess".

You answer my question though:

"So if you configure your permission scheme with groups, you do not have to add the group to a project role. If you use project roles, you have to add the group to the project role."

Thanks for your help

Joanna B.