-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Pipelines - View Results
-
None
-
1
Description:
Currently, Bitbucket repository permissions (Read, Write, Admin) do not allow for granular access to specific repository features. In particular, there is no way to grant users or groups access to view Bitbucket Pipelines (builds, logs, etc.) without also providing access to the repository’s source code and other content.
Use Case:
We have scenarios where certain users or teams (e.g., QA, project managers, external auditors, or stakeholders) need to monitor pipeline runs and review build logs for compliance or troubleshooting purposes. However, for security and confidentiality reasons, we do not want to grant these users access to the repository’s source code or settings.
Requested Feature:
Please introduce a new permission level (e.g., "Pipelines Viewer" or "Pipelines-Only Access") that allows users or groups to:
- View the Pipelines page, including build history, logs, and artifacts
- Receive pipeline notifications (optional)
- Without access to repository source code, pull requests, or repository settings
Benefits:
- Improved security and compliance by limiting code exposure
- Enables broader collaboration with non-developer stakeholders
- Aligns with least-privilege access best practices
Current Workarounds:
The only current workaround is to grant Read access, which also exposes the repository’s code—this is not acceptable for all use cases.