Limit KB Articles to Specific Customer Groups in JSM Cloud

Platform Notice: Cloud Only - This article only applies to Atlassian apps on the cloud platform.

Summary

Learn how JSM project settings affect article visibility and the limitations on restricting access to specific customers.

This article offers a workaround solution using Confluence to restrict access to KB articles in JSM. It will only work seamlessly if your help center is accessed exclusively by users from specific known domains.

Solution

Before you jump in

These steps can only be followed if you have org admin privileges.

Portal-only customer accounts, also known as External accounts, don't have access to restricted articles through the portal. They should be assigned to users who require minimal access.

ℹ️ The 'JSM Customer' role does not consume license seats, regardless of whether the user is Internal (Atlassian Account) or External (portal-only)

Ensuring customers who require access have Atlassian accounts

  1. For existing customers who will require access to the restricted content, you may migrate your portal-only customers to an Atlassian account.

    1. Under Products, access your site administration area (https://<sitename>.atlassian.net/admin).

    2. On the left sidebar, click Jira Service Management or Portal customers.

    3. Find the user and click ••• > Migrate to Atlassian account.

  2. For new users, change access settings for your customers to ensure Atlassian Accounts are created for any users who require access to restricted content.

    1. In Jira, go to Settings > Products > Customer access.

    2. Enable the use of approved domains to grant customers access to the help center with Atlassian accounts (Internal).

    3. Portal-only accounts (External) can be created for new customers who won't need access to the restricted KBs.

    4. In the site user management area (https://<sitename>.atlassian.net/admin), go to Products > Site access settings.

    5. Add your domains and assign product access accordingly. For domains that users will require access to restricted KB content, ensure they are added to the list granting Customer Access in JSM.

    6. "Any domains" is a catch-all rule that will apply to any non-listed domain. If JSM Customer Access is granted to it, then all users will be considered eligible for Atlassian Accounts, according to step 2b. Users from a managed domain in Atlassian may sign up if granted customer access.

  3. You may want to create a group (or more) to nest customers to facilitate restricting access in Confluence.

Restricting spaces/article access in Confluence

  1. Access the article through Confluence.

  2. Click the lock icon (or ellipses button > restriction).

  3. Set: Only specific people can view or edit.

  4. Add specific users or groups, granting view permission.

  5. Apply.

Updated on May 2, 2025

Still need help?

The Atlassian Community is here for you.