Is it possible to limit a Forge app's data access scope to specific Jira projects?

I’ve tried reading other questions around this topic, but I’m still not 100% clear on the status of this so would be great to get a clarification.

Our case is: customers install our app on their Jira to provide us data (issues) from their projects that we sync to our own system. Bigger enterprises have many projects, and they only want to share data from some projects with us, due to security concerns.

Is there a way in Forge to achieve this? Note that this is about having API access to the data, so custom UI configurations to select synced projects that happen after the installation are not enough. We cannot have any access to the data from the projects that the customer does not want us to have.

I’ve understood that there is the separate Atlassian Guard product, where the customer can setup rules to limit our app’s access. Is that the only way of achieving this, or is there some other native way in the Forge platform?

Thank you for any help with this :folded_hands:

2 Likes

I believe what your customer is looking for is App Access Rules: Block third-party app access | Atlassian Support

The customer does this, not the app.

1 Like