Best Way to Manage and Audit Comment Visibility Across Projects?

[Akriti Sagar]

Hi community,

In our Jira environment, we're making more use of restricted comments — especially for internal-only visibility, like using the "Developer" role when posting comments. I know this can be done per comment via the lock icon, but I'm trying to find a scalable way to do the following:

Is there a way to bulk-update or audit comment visibility across multiple issues or projects?

Can we generate a report or filter that shows which comments are public vs. internal (based on roles or visibility settings)?

Are there any recommended best practices or automation strategies to ensure sensitive information is never shared externally by mistake?

We're currently on Jira Data Center version 9.x. Any app suggestions, admin tips, or workflow improvements are welcome.

Thanks in advance for your insights!
— Akriti Sagar

[Matthias Gaiser _K15t_]

Hey @Akriti Sagar

I don't think there's a built-in way to get such a report. But here are some thoughts what you could do:

• Add an automation which is triggered whenever someone adds a comment. In that automation you could check the visibility and flag/report it if it's public.
• Use the Jira REST API (in an automation or script) to go through all the comments and check their visibility. All comments of your Jira might be a bit too much, so you might want to limit that.
• You could also use the Jira REST API to update all the comments to a certain visibility using the edit comment endpoint.

Maybe this helps you getting started,
Matthias.