Update default permission settings

[chris berger]

We started off using Jira and Confluence with the standard permission settings where essentially everyone has access to everything which was somewhat ok since it was used internally only. Now, we are facing the need to also interact with external parties and I am not sure how to replace the default permission settings with a more granular and better controlled permission environment.

[Joe Pitt · Accepted solution]

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (used to be JIRA-users but may be different on your version).  This is probably where you're getting the access from.

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. One permission scheme will cover almost all projects. The project admin controls project role membership

This may be a big effort, but it will payoff down the road by making it easy to control access.

[chris berger]

Perfect. That answers my question. Thanks

[Raynard Rhodes]

You may want to check out the documentation

https://confluence.atlassian.com/search/?query=permission&productName=Administering+Jira+applications&productVersion=Cloud

[Malloy Maddigan]

Navigate from home page Jira Settings>Issues>Global Permissions here you can manage which users have permission for what.