Project access fo rall the company users, but so that they wont be able to brows tickets internally

[Vera Valshonok]

Hi all, I'd like to open access to jira project to all, so all the company members would be able to open tickets as customers, but so  that they wont be able to see tickets of others and project internally. How can i achieve that?

We have azure directory related groups of agents.

[Neil Fletcher · Accepted solution]

Hi @Vera Valshonok 

I use a similar setup.

In Azure AD, I created a group called 'All Employees' with a job that adds new users to this group (and removes anyone who leaves)

Then using Atlassian Guard to sync groups from Azure AD to Atlassian groups

In JSM project > project settings > people and access, I added the group 'All Employees' with role = Service Desk Customer.

This gives all employees access to the portal to create tickets and view their own but no access to the JSM project.

[Vera Valshonok]

Thanks! 

I dont have such a general big groups but many groups in jira synced with Azure directory.

If I add them to people ( internal access) it will give them only to portal, but not to internal view?

[Vera Valshonok]

Isn't adding them internally means that they will be able to enter the project internally and browse?

[Neil Fletcher]

If they're added to a 'customer' role, they have the portal access and no project access.
An 'agent' role gives them project access.