Internal and external access

[Joe Harmon]

I am trying to setup JIRA so that I can provide external access to some partners but in turn restrict what they see.  All using the same JIRA instance.  Everything I am seeing is telling me to create an internal and external group and then add that group to the jira-users.  This has brought up several questions.

(1) How do I add a group to a group?  I can't see a way to add the internal and external group under the user directory section.  I can only see the ability to add users to a group.

(2) What would be great is if I could have anyone who is accessing JIRA via our active directory LDAP connection would automatically be part of the internal group.  And anyone accessing via the JIRA internal directory would be automatically restricted.

[Adrian Baussen]

Hi Joe,

I am doing a case study on Jira and was wondering if I could see your workflow? I need a template and at least some kind of reference in order to create a workflow for a project which consists of internal and external groups. 

Any feedback would be great, thanks. 

[Nic Brough -Adaptavist-]

We should start with the basics here.  Atlassian applications are permissive, not restrictive.  You need to think in terms of "let them see X", not "stop them seeing Y".

> I am trying to setup JIRA so that I can provide external access to some partners but in turn restrict what they see.

Give them access to everything generally, but do not give them the lower-level acess to development details.

>How do I add a group to a group?

You don't, because it's nonsense.   Re-read  the question, and the blunt response, hopefully, you will see it the next time

[Joe Harmon]

Nic, is there something you can point me to that shows how to do this in general?  The article I was looking at was https://www.atlassian.com/blog/jira-software/share-jira-external-partners

Long story short is that I need to give certain individuals outside of the company access to only a given project without giving them access to any other project.

Internally I still want them to have access to all projects.

I know that checking jira-users allows them to have both the permission to login as well as the permission to access everything.  But when I go into global permissions I don't see jira-users.  What I do see is jira-software-users.  Are they linked together in some way?

Honestly the response about the group isn't really helpful because according to the article that I read and the fact that JIRA does support nested groups means that there is some merit to it.  If that isn't the way to go to implement this, then that is fine.  But telling me that it is nonsense and to go back and re-read the question isn't really helpful.

[Adrian Baussen]

Hi Joe,

did you manage to solve the issue? I also have to deal with this issue as well and getting your feedback would be great. 

Regards,

Adrian 

[Joe Harmon]

I didn't solve it yet Adrian sorry.