Best practices for Customer Service portal open to the internet
Asked by Mariano Edvardsson:

Can you give me advice on how you manage such access?

We're sharing our JSM Server instance with our customer project (the rest all internal projects).

Of course the internal projects we don't want them to have a portal (or at least not anyone have access to them), but the Customer Portal should allow people to login (if user created by opening an issue via ticket) or signup.

How do I manage this? My JSM instance only has \`jira-administrators\` and \`jira-servicedesk-users\` groups by default.

Should I create a \`jira-servicedesk-customers\` group or should I manage this with roles?

I'm all ears!


Answers:
author: Joseph Chung Yin
body: [@Mariano Edvardsson](/t5/user/viewprofilepage/user-id/4480807) -

I agreed with what [@Walter Buggenhout](/t5/user/viewprofilepage/user-id/783225) suggested. However, if you still want the portal and JSM style of issue tracking, then what you can do is to change your internal JSM project(s) Customer Permissions (Project settings \>\> Customer Permissions) for Channel Access from Open to Restricted

![2024-09-22_14-08-58.png](https://community.atlassian.com/t5/image/serverpage/image-id/348615iDDAE01CAE1BB5CF5/image-size/large?v=v2&px=999 "2024-09-22_14-08-58.png")

When this option is selected, then your project admins/agents can control each project's access for "Service Desk Customers" role by manually adding the users to this role.

This essentially will only make the project visible in the portal UI where only the authorized users can access the project(s) and submit his/her issues via the portal UI. Don't forget that those users are treated as customers and will not be able to access the issues via the project UI. Lastly, this setup is done at each individual project's level.

Hope this also helps.

Best, Joseph Chung Yin

comments: author: Mariano Edvardsson
body: Hello [@Joseph Chung Yin](/t5/user/viewprofilepage/user-id/396739) ! I don't have that option on the Project's Customer permissions:

![Screen Shot 2024-09-22 at 20.55.13.png](https://community.atlassian.com/t5/image/serverpage/image-id/348622i26DC98DEF4CCEFC2/image-size/large?v=v2&px=999 "Screen Shot 2024-09-22 at 20.55.13.png")


author: Joseph Chung Yin
body: [@Mariano Edvardsson](/t5/user/viewprofilepage/user-id/4480807) -

I missed your call out for JSM Data Center/Server... If this was the case, then you will need to change the option on for "Customers who are added to this service project" for your project.

Hope this helps.

Best, Joseph


author: Mariano Edvardsson
body: Thank you!


author: Walter Buggenhout
body: Hi [@Mariano Edvardsson](/t5/user/viewprofilepage/user-id/4480807),

Here's a couple of links to Atlassian documentation on how set up access to JSM on data center. The links are from version 10.0, but near the top right corner you can select the version that you currently have on your instance:

* [Managing access to your service project](https://confluence.atlassian.com/servicemanagementserver/managing-access-to-your-service-project-939926273.html) (essentials on how to manage access to your service desk project)
* [Setting up server project users](https://confluence.atlassian.com/servicemanagementserver/setting-up-service-project-users-939926312.html) (relevant for managing users and groups)
* [Configuring the customer portal](https://confluence.atlassian.com/servicemanagementserver/configuring-the-customer-portal-939926277.html) (has some tips about access and sharing the portal with your customers)

If you have *internal projects* that you don't want to have a portal, it makes much more sense to use Jira Software for those instead of Jira Service Management. These are built for tracking internal work, don't have a portal feature and have a cheaper license for your internal users than the agent license for JSM.

Hope this helps!

comments: author: Mariano Edvardsson
body: Hello [@Walter Buggenhout](/t5/user/viewprofilepage/user-id/783225) ! Thanks for your input!

But does Jira Software adapt to a full blown IT OPS team? I'm mostly interested in Change Management ticket types and queues that show like this:

![Screen Shot 2024-09-22 at 17.20.17.png](https://community.atlassian.com/t5/image/serverpage/image-id/348613i67EEA2B9E5988E06/image-dimensions/204x466?v=v2 "Screen Shot 2024-09-22 at 17.20.17.png")

As well as the agentless asset tracking, etc etc.


Tags: jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-service-management-server

server