Uploaded image for project: 'Jira Service Management Cloud'
  1. Jira Service Management Cloud
  2. JSDCLOUD-9396

Create Customer API should require only Service desk administrator permission and not Jira Administrator Global permission

    • 9
    • 20
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Problem

      An agent can add a customer to the project from UI with only Service Desk Team role and creating customer account for that user at User Management is handled by the application. But in the case of API, the permission needed is Jira Administrator Global permission to create the customer and Service desk administrator permission to add the customer to a service desk project.
      The Jira Service Desk Cloud REST API - Create Customer
      The Jira Service Desk Cloud REST API - Add Customer

      Why This Is Important

      Giving Global level permission to create a portal-only customer (which is essentially adding a customer to the project) is not appropriate. Creating a portal only customer should require only Service desk administrator permission or adding the customer to the project through API should handle the create customer part.

            [JSDCLOUD-9396] Create Customer API should require only Service desk administrator permission and not Jira Administrator Global permission

              Unassigned Unassigned
              b94c62b8b0c5 MGM
              Votes:
              36 Vote for this issue
              Watchers:
              29 Start watching this issue

                Created:
                Updated: