JIRA Admin user unable to login to Portal

Summary.

If JIRA Service Desk is using another JIRA as a User Server and the user is only set as "Only" JIRA Administrator in Global Permission, they won't be able to login with a message:

You do not have a permission to log in. If you think this is incorrect, please contact your JIRA administrators.

Steps to Reproduce:

1. Install JIRA Service Desk instance and Create a Service Desk Project.
2. Install another instance of JIRA Software and configure the "User Server" function.
   • Allowing connections to JIRA for user management
3. Integrate JIRA Service Desk with JIRA Software following the article above.
4. In JIRA Software instance, create a dummy user that has "only jira-administrator" group.
5. In JIRA Service Desk, sync JIRA Software directory and set the following:
   • Global Permission for JIRA System Admin and JIRA Admin is set to 'jira-administrator' (by default)
   • Remove 'jira-administrator' from any Application Access.
6. Access JIRA Service Desk Project Settings and set the Customer Permission to be available for anyone (3rd option)
7. Open a new browser and access the portal.
8. Login as a user with JIRA Software with JIRA Admin permission only.

Expected Result:

• The portal is open to the public where the portal will be available for anyone hence, login will be successful.

Actual Result:

This error will come up and the user won't be able to log in:

You do not have a permission to log in. If you think this is incorrect, please contact your JIRA administrators.

Notes:

1. If you include the user to another group and the group is set to the project "Service Desk Customer" Role, the user will be able to log in but no portal will be available for the user.
2. This could be only replicated once, removing the user from the group and adding it again later would not be able to replicate the issue again.
3. Similar issue can happen when the restricting the Portal only from the Customer List (Option 1)

Workaround:

• Remove the user from the JIRA Admin and JIRA System Admin group or remove the group from that permission.