Is there a way to restrict permissions to a user per individual job in jenkins

Question

I have a list of Jenkin jobs and i want a user (say user1) to have read permission on few jobs and all (full) permissions on other jobs.Is there a way i can restrict the permissions as per this in jenkins?

Answer 1

Yes, you can configure user permissions per individual jobs.
Jenkins allows you to give different permissions to a user across different jobs,using "Project-based Matrix Authorization strategy".
Follow the steps to do this, 

•  From the jenkins dashboard,click on Manage Jenkins.

•  under Manage jenkins->Configure Global Security->select Enable security.

•  Under the Authorization section, select the "Project-based Matrix Authorization Strategy"

•  Add the particular user and assign the appropriate permissions.

• And then to assign Job specific permissions :

  • Go to the job (say job1) for which you need to assign permissions.

  • Click Configure->under the general tab->Enable Project-based Security.

  •  Add the particular user (say user1) and assign the required permissions.

This is useful when specific jobs shouldn't be accessed by certain users.

Comments

This doesn't really stop users/developers viewing the other jobs, Is there any way that allow user user just to view and build a particular job

---

Hi,

I am not sure it will work or not. But you can try once.

•  install the Authorize Project plugin.
• Go to manage jenkins->configure global security->access control for builds->Run as user who triggered->save
• Create one job
• Go to configuration-> build environment->bind one user who can run the job.

Now that particular user can only handle that job.

Answer 2

Hi,

Project-based Matrix Authorization Strategy is an authorization method using which we can define which user or group can do what actions on which job. This gives us fine-grained control over user/group permissions per project.