Give API access to external agency to only one project

[Jana Kern]

Hi everyone,

We would like to start using JIRA for a project we are working on together with an external agency. This agency is requesting API access. However, as we have multiple JIRA projects, we would like to only grant API access to this single project.

Is this possible? We are using the cloud version.

Thank you for your help! :)

[Neil Mansilla]

Hi @Jana Kern. Just in case you haven't found your solution yet, here's a suggestion. Yes, it is possible; however, it's very important to:

• set up your project permissions properly -- for each of your internal projects (the ones you want to protect), you need to understand which People, Roles, and Groups can access those projects.
• create a new user account that cannot reach those internal projects -- before you create an account for the external agency, create a test account and insure that they're not included in any Groups or Roles that would permit them to access your internal projects.
• update permissions on the single project that you're collaborating on to include the test user -- the user at this point should be able to access this project, and this project only
• create API token for test account - when you're logged in under the test account, head over to https://id.atlassian.com/manage-profile/profile-and-visibility and select Security > API token to create a new token. All API calls made with this token will be made in the context of this user.

So, that's one suggestion -- the other suggestion is to simply create a new Jira Cloud instance that's separate from your company Jira Cloud instance, and collaborate away on that one.