Restrict API token to a JIRA project

[Valery Khvashcheuski]

As JIRA administrator I need to integrate one of projects in Jira Cloud with a GitLab project. I have many projects in JIRA, but I need to integrate only one. According to GtLab documentation (https://docs.gitlab.com/ee/user/project/integrations/jira.html#jira-cloud) I need to do following on JIRA side:

1) to set up a user within the project

2) generate API token

Sounds like there is no way to restrict the API token to have access to only one project in JIRA, instead of access to all projects on instance?

Please advise if there are any workaround for the issue?

(GitLab account and project belongs to another company, so I don't want to share API token with their IT guy and expose all the projects)

[Roma Bubyakin _Wombats Corp_]

Hi Valery,

I see only one option.

Create a technical user with limited access and generate token for that account.

Regards, Roman

[Chaim Paperman]

@Roma Bubyakin _Wombats Corp_ that's a good solution but will add to your monthly cost.

Is there no way of restricting an API key to a specific project?

[Roma Bubyakin _Wombats Corp_]

As far as I know, no :(