I am creating a JIRA data center instance on which multiple different user groups are able to create their projects. These user groups should not be able to see each other's projects. So far I have been able to separate these projects completely except for one little nifty problem.
I want leaders of these user groups to be able to manage their own projects. Therefore, I assigned them to the "Administer projects" permission. However, this permission allows project leads to assign groups to roles. This is a problem, because groups exclusive to other projects are able to be assigned to a project the groups and users should not exist in. This would cause project members from project B to be a part of project A. This only happens on human error, which I want to avoid at all cost.
My question now is, is there any way to fine tune the administer project permission so that groups who have this permission are not able to assign roles to groups in their project? For instance by only allowing the JIRA instance administrator to assign roles to groups? Is this somehow solvable?
Welcome to the Atlassian Community!
No, there's no way to stop a project admin adding any group or user into a project role. I'm afraid your only option is training project admins, and trying to monitor what people are doing.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.