Jira Service Desk Permission (On-Prem) Access Requirements

Why do we need access to your Jira ServiceDesk?

The bot will directly perform actions in your Jira Service Desk project to create, update, and query information about tickets.

Production Environment

In your Production Jira environment, the following accounts are needed (set to America/Danmarkshavn timezone):

  • A dedicated service account for the bot in Jira to read/update tickets and read users/KB articles.
    • In the Atlassian Admin page, assign the jira-servicedesk-users role
    • In the Jira Service Desk Project Settings, assign the Service Desk Team role
  • One agent account (for testing & end-to-end validation) with Service Desk Team role
  • One user account (for testing & end-to-end validation) with Service Desk Customers role

Along with the service account, please provide an XML export of your Jira Service Desk workflow. See instructions here on how to export your workflow: https://support.atlassian.com/jira-cloud-administration/docs/import-and-export-issue-workflows/

What is this account used for:

The Moveworks service interacts with your Jira platform so that the bot can:

  • monitor tickets for autonomous resolution
  • reach out to an employee when a Jira ticket needs the employee's attention
  • create tickets to log issues the bot has resolved autonomously
  • create tickets for issues that require an agent's attention
  • read the Jira user roster so that the bot can log and assign issues appropriately
  • read Jira forms from your portal to it can serve them to end users when applicable

Testing Environment

For testing, please clone the production project to a separate test project in the same production Jira environment, utilizing the same workflows and ticket types. (Note: tickets from the production project do not need to be cloned to the test project). Also, provide the above accounts same level of access to this project as they have in the production project. This project will be used for testing purposes and during the IT Testing phase, before switching over to production and rolling out the bot to all users.

What is this account used for:

  • The account in your test Jira project is used by Moveworks to validate integration changes before they are deployed to production

Accessing Your On-Premise Jira Service Desk

If your Jira instance cannot be accessed directly via API there are 2 options available to make it available for access via the Moveworks platform.

  1. Moveworks Agent
    This is a lightweight appliance Moveworks would install on your VMs behind the firewall, therefore with this option no firewall changes are needed to integrate with Atlassian Server.
  2. IP Whitelisting
    Apply a firewall exception for the Moveworks IP ranges. (Please reach out to your Moveworks Customer Success team for the IPs).

Note: If you are already using the Moveworks Agent for another integration, you will need to use the same agent to connect to Jira.

Appendix - Required Jira Settings

States

Moveworks categorizes your states into the following buckets. If there is no corresponding state, your Moveworks team may recommend an additional state.

  • New / Reopened
  • In Progress
  • Waiting for User
  • Resolved / Closed

Transitions

Moveworks requires the following workflow transitions to function as expected:

  • All → Resolved (or similar state)
  • All → In Progress (or similar state)
  • All → Re-Opened (or similar state)

Example of All → Resolved transition:

Setting Fields Upon Resolution

Moveworks requires the Assignee field to be on the Resolved screen, so it can be set as the Assignee when an issue is resolved by the bot. Any other fields that must be set upon Resolution should also be present on this screen, so Moveworks can set the appropriate value. This is required even if the transition is restricted to API access only.

Restricting Transitions (optional)

Transitions may be locked down to API-only use so agents can continue to follow their existing workflows without confusion:

Enhancing Bot Transitions (optional)

Bot-specific transitions also allow JIRA admins to control static values. Here are some common use cases:

  1. Set Resolution to Done

  2. Reopen set assignee to Unassigned

  3. Navigate to Workflows, select the transition, and click Post Functions from the pop-up.

  4. Select the Post Functions tab and click Add post function

  5. Select Update Issue Field

  6. Select the appropriate Issue Field and Field Value

  7. Additional values will require additional Post Functions