Documentation about how permissions work

[Swaroop Rao]

I need to allow an external software vendor to access one of our projects in Jira Cloud. They shouldn't have access to any other projects. All our projects are currently configured to use the default permission scheme which has most permissions set up with "Any logged in user". I know how to set up a project to restrict permission to a certain group/role but do I also have to modify the default permission scheme to disallow access to 'Any logged in user' because that could potentially allow the external software vendor to access the other projects?

[Bastian Stehmann · Accepted solution]

Hi @Swaroop Rao ,

If a permission is granted to any logged-in user, any logged in user will have this permission including your external software vendor.

So you have to check all existing permission schemes if they grant any permissions like this or to jira-users or groups like this, that usually contain all users also.

[Swaroop Rao]

Yes, that's what I suspected but there doesn't seem to be any documentation from Jira that talks about this. Thank you for the response.

[Geoff Robles]

Create a new permissions scheme for that project and tweak it so they can access it using the rules you set.

Check here https://confluence.atlassian.com/adminjiracloud/managing-project-permissions-776636362.html

[Swaroop Rao]

Thanks for the response. Like I said in my earlier question, I am aware of the process to restrict access to a specific project. However, I am wondering whether the Default Permission Scheme which is used by the other projects will give them automatic access to those projects as well because of the 'Any logged in user' permission.