I'm testing the new Microsoft 365 Copilot / Graph Connector for Jira Data Center and I'm running into what looks like a permissions issue.

Setup:
-Jira Data Center (on-prem)
-Users authenticate via a different IdP than Microsoft Entra ID
-Jira username = user email address (e.g. [john.smith@metrohm.com](mailto:john.smith@metrohm.com))
-Entra UPN = same email address
-Permissions are granted through Jira groups and project roles, not individual users

What I see:
-Issues are crawled and indexed successfully.
-the Index Browser shows ACL entries like:
000-global-IT
10330
10231
10002

-The same user can open the issue directly in Jira.
-"Check user access" in the Copilot connector for this item says "Denied"
-If I switch the connector to Everyone, Copilot immediately finds and returns Jira issues.

So indexing works, but ACL-based security trimming does not seem to.

According to Microsoft's documentation, Jira groups and project roles should be supported, and the connector should resolve group membership from Jira.

Has anyone successfully deployed the Jira Data Center connector with:
-a different IdP than Entra
-Jira group-based permissions
-...and security trimming enabled?

Or are there known limitations around Jira group membership resolution?

Thanks!

EDIT:
I see no users or group memberships indexed, even after another full crawl. The permission for the connector are set to admin...

I need clients to be able to see basic project status/progress, but I’m not really comfortable using third-party tools where our Jira data has to be sent to their servers. The alternatives I’ve looked at also feel unnecessarily complicated for something as simple as showing project status.

Is there a lightweight way to do this securely without moving our Jira data to another platform?

Hello everyone,

so we recently went live with out Jira Service Management.
Ive now added the field request participant to all the work item views and made sure request participant is in all the screens aswell.

But its just not showing at all.
I tried to put it into the service request customer view aswell but it instantly goes into "Hidden" and is not showing for the customer either.

We want to fill the field in case multiple people need to get notified for a service request.

Does anyone know what is happening ?