Rules for Groups

[Soňa Přílučíková]

Hello,

could you help me, how to set the rules in groups.

I need one group with limited acces to some project, how can I set it.

Thank you for help.

Soňa

[Joe Pitt]

You need to rework your permission schemes

JIRA permissions

First, by default JIRA has a horrible permission scheme that violates security best practices by allowing everyone that can logon to do just about everything.

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (see Global permissions to see the "can use" groups and admin groups).  This is where users are getting their access.

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. By using project roles, one permission scheme will cover all projects. The project admin controls project role membership
4. If the project leads want everyone that can logon access to the project they can add the logon group to a project role with the desired permissions.

This may be a big effort, but it will pay off down the road by making it easy to control access.

Most of the 'old timers' use project roles. It meets the best practice for security and gives complete control to the project lead for access to their project. JIRA comes with many project roles, but you can add more if you have a special need.

[Soňa Přílučíková]

Thank you for your answer. Do you have any link for tutorial with setting project roles in JIRA cloud?

Thank you a lot.

Soňa

[Joe Pitt]

You need to be a JIRA admin. You can look in the doc they provide. I use server. There are some basic roles and you can add more as needed. Roles are universal, so every project may not need every role. 

[Soňa Přílučíková]

I found only this:https://confluence.atlassian.com/cloud/update-roles-and-properties-for-jira-users-744721647.html

But there is no info, how to make the role.

Iam JIRA admin.

Thanks for help.

Soňa

[Joe Pitt]

here is a link to defining project roles. The links seem to work best if you copy/paste them into your browser instead of just clicking. sometimes the forum add stuff to the end that makes the link fail

https://confluence.atlassian.com/adminjiracloud/managing-project-roles-776636382.html 

[Soňa Přílučíková]

Thank you for help.

I created external role, group and scheme. Now when I test it and log in as an other external user everything works, but when user use it in own login, JIRA shows mistake No acces. Where could be problem, could you help me please. I do not know how to set it.

Thanks

Soňa