How can i give permission to my client to view on their own project

[Anha Singh]

In my Jira portal all my running project is configured which belongs to different client and every client is able to see all my project, i am just wanting that each client can show only their own projects, how can i limit the access of my client? please help.

Email:- vivek.singh@sfclouds.com

Mob:- 9716143139

[Joe Pitt · Accepted solution]

First, by default JIRA has a horrible permission scheme that violates security best practices by allowing everyone that can logon to do just about everything.

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (see Global permissions to see the "can use" groups and admin groups).  This is where users are getting the access from.

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. One permission scheme will cover almost all projects. The project admin controls project role membership

This may be a big effort, but it will pay off down the road by making it easy to control access.

Most of the 'old timers' use project roles. It meets the best practice for security and gives complete control to the project lead for access to their project. JIRA comes with many project roles, but you can add more if you have a special need.

[Ismael Jimoh]

Hi @Anha Singh

You can do the following:

1. Add each of your clients into groups. (so all members of one client would be in one group).
2. Create a project permission for each client using roles (remove any groups or individual users from it). (Do not forget to grant the role Browse and other permissions they require)
3. Add your client, groups to roles in the projects they need access to via the Project Settings > Users and Roles page.

Now with the above configuration, each client would be restricted to only projects they are a member of a role in.

Hope this helps.

Ismael.