Limit user access (project privacy)

[Camila Gomes]

Hello!😊

I would like to ask a question about project privacy.

I currently have company-managed [standard] projects and all of them were created with Jira's default template (scrum).
I want to add some external users to my instance, but I don't want them to access all the projects we already have.

Is there any way to create a privacy layer on the Instance?
I tried by groups, but it wasn't enough to limit the view of project information.

can anybody help me?

[Ojase Emmanuval]

@Camila Gomes Thanks for reaching out to the community !!

You can achieve this using a combination of permission scheme / role or group.

• Create new group for external users and give them access to the jira instance.
• Create a custom role called External Users
• Update all existing permission scheme to allow browse project permission to the the project role - External users
• For the projects you need to give access to external users, add the external users to External User project role.
• You can also add the group for the external users  to the project role. Doing this will enable all users in the group to access the project. 

If we follow the above approach, the external user only get to see the projects where he/she has been added to the external users project role. 

Please try and let me know how it goes. 

Thanks,

Ojase

[Camila Gomes]

Hello @Ojase Emmanuval  !

Thank you for your help.😊
I'm doing the tests as suggested and I'll come back if everything goes well.
Hoping a lot for it to work :)

[Camila Gomes]

It worked!!!
It was good that I learned a little more about permission scheme 😊

[Ojase Emmanuval]

@Camila Gomes Can you please mark the answer as accepted if the answer provided helped you to solve the issue.

[Nic Brough -Adaptavist-]

Jira permissions are permissive, not restrictive - that is they are configured by letting people in, not shutting them out.

Your projects are probably using permission schemes that say "Browse: All logged in users", or "Browse: Members of jira-users group"

You will need to change that, so that

• You have (at least) one group that represents internal users, and another external.  
• Add "Browse:  Jira-internal" to all the existing project permissions
• Add "Browse:  Jira-internal, Jira-external" to the new projects
• Remove the Browse permission that lets everyone see all projects from all permission schemes.

You could also do that with roles, or multiple groups.  But you need to remove the "let everyone in" no matter what.

[Camila Gomes]

Uhuuu!!

It worked! 😉👍

Thank you for the tips.