all invited users get access to all projects - how to avoid?

[Katharina Jockenhöfer]

I have some clients that use our Jira and should only access the projects I assign to them, not all projects of our organization.

I tried managing this via groups - assigning them to a group and excluding them from default group "jira-users" that gives them access to all projects automatically. However deleting those users from the group does not work. Everytime they sign back in the get automatically reassigned to the default group "jira-users" and get access to all projects of our organization.

what would be the correct process?

[Prachi Bolar]

Hi Katharina,

Welcome to Community :) 

You can do the following here 

Option 1

Update the default group access to some other group and remove jira-users

• Navigate to the admin UI>Products
• Select (...) next to the product and select "Manage product access"
• You will find all the groups that have access to the specified product
• Select (...) on the desired group and "Update default group setting"
• Select from None to USer
• Update

Post this again 

• Navigate to the admin UI>Products
• Select (...) next to the product and select "Manage product access"
• You will find all the groups that have access to the specified product
• Select (...) on the Jira-users and "Update default group setting"
• Select from user to none
• Update

This way when user is invited to your instance they get product access to via another group which is not part of your browse permission scheme 

Option 2:

- if you want to keep jira-users as default group then you will have to remove this groups from the permission scheme ( browse permission from all company managed projects )

for team managed project you can change the access from open to private 

Thank you,

prachi

[John Funk]

Hi Katharina - Welcome to the Atlassian Community!

I suggest you handle access via product roles. So update your Permission Scheme(s) to use product roles and not groups. Also remove any references to "Any logged in user". 

Then add users to your projects (this can be done by a Project Administrator also). You can add groups to a project role (like jira-users) if you want on some projects and not on others.