What is the best way to implement Security on existing projects ?

[Yorann Baron]

Hi team,

I am Administrator on Jira in my company.

The company has more than 100 Jira old projects sharing the same and basic permission scheme. So the situation is : any user that has been granted to our Jira product has access to all company projects.

I want to implement security access for each project.

Because of the 100+ projects and that each project exists for a while and is full of tasks, I wonder if there is any other way than manually configurate for each project its own specific permission scheme meaning : 

- Create Jira groups

- Create a permission Scheme template (for general admin access)

- Duplicate the template scheme for each project and then add for each the good right to the accurate(s) group(s)

This sounds painfull and risky but is there any other way?

Thank you

[Robert Wen_Cprime_ · Accepted solution]

I suggest you look at applying project-based permissions based on project roles.  This has a couple of advantages.

• This allows for more granular permissions based on membership and role on a project.
• Project admins can do the role assignment.

https://support.atlassian.com/jira-cloud-administration/docs/manage-project-role-membership/

[Yorann Baron]

Oh thanks, that's a good suggestion, I'll have a look.
That means you can share the same permission scheme on all project but you just associate/diassociate right people to right project role for each project, Is that the idea?

[Robert Wen_Cprime_]

That's right.  You get a uniform permission scheme across all projects.  Each project then configures the people and access/privileges based on the roles that the project admin assigns.  

[Yorann Baron]

Thanks !