How can I restrict external users from viewing other boards in our JIRA instance?

[Sherwin Soriano]

Our company will have an external vendor that will need to use our JIRA instance.

I am looking for ways on how we can restrict them on only seeing specific JIRA company managed boards.

Should I be looking on create a new project role or is there any other way to do this?

[Trudy Claspill · Accepted solution]

Hello @Sherwin Soriano 

If you want to limit their access to only certain projects, you will have to look at the permission Schemes used for the projects you don't want them to see. You would have to ensure that the permission Schemes used by those projects do not grant the Browse Projects permission to 

Any logged in user

Public

Application Access

You would also have to ensure that the users were not assigned to any user group or role in those projects that is granted that permission.

For the projects you do want them to see, you will need to make sure that they do have the Browse Projects permission. Using a custom user group and/or project role for those users is one way to do that. Note that will enable them to see all issues in those projects.

Regarding Boards, those are based on Filters. You can limit their visibility to specific boards by limiting whom the board filter has been shared with.

Let me know if you need details on any of those topics.

If your instance uses Team Managed projects, access those is managed in a different way, and takes different steps to limit.