How to combine permission scheme and issue security scheme to block some users from a project

[Weiwei Zheng]

project type: Company owned project

Project name: A

Target: Prevent team M from browsing project A .

Background: Within project A, We have a group called as JIRA-USERs which include all company employee and have the access to browse project A. Team M is part of that group.

Can I update the issue security scheme setup and prevent them from browsing project A? What would be the step if that is a yes? Or is there anything else I can do to prevent them from browsing the project?

[Walter Buggenhout]

Hi @Weiwei Zheng and welcome to the Community!

You are actually saying that you don't want all your Jira users to have access to all projects, in this case: project A.

In that case, don't grant browse project access to the jira-users group to that project. You seem to have isolated team M somehow; the proper way to address the issue is to also isolate the other users in your company into other groups, so you can add only those groups you need and exclude the ones you don't need.

Hope this helps!

[Weiwei Zheng]

Hi Walter:

Thank you for the reply!
I haven't do anything to isolate team M yet, just thinking of the approach, as the company have thousands of employees and want to make sure isolating team M won't cause too much effort or extra trouble.

It seems issue security level may not a solution either due to team M is also part of ira-users group?  Instead, I should create a new group minus team M and give them the access for my project A.

[Akhand Pratap Singh]

Hi @Weiwei Zheng ,

Good Day, welcome to Atlassian Community.

You’ll need to separate Team M from the jira-users group by creating a new group, add all users except Team M to this new group, and then update the permission scheme of Project A to restrict the Browse Project permission to only this new group.

[Weiwei Zheng]

Thank you Akhand!

This sounds like a solution to me, just not sure effort level for JIRA admins in my company as we have thousands of employee in ira-users group. And we may also have new people to come in all the time, it might need extra maintenance effort to make sure all the other team can. access project A.

[Akhand Pratap Singh]

@Weiwei Zheng ,

Check this for having python script, might ease the process

https://confluence.atlassian.com/jirakb/bulk-add-users-to-groups-using-python-and-api-1299910891.html