For Jira Service Management Cloud with Assets

Show every portal customer the assets assigned to them.

Customer Assets for JSM Portal adds a My assets view to your Help Center. Customers see the Assets objects assigned to them and can report an issue against a specific asset — without Assets permissions and without a Jira or Assets licence.

  • Built on Atlassian Forge
  • No API token, nothing to connect
  • No data egress
  • Runs on Atlassian eligible
  • 26 languages
The My assets window in the Jira Service Management Help Center: a searchable table of the customer's assigned assets with ID, name, type and coloured status lozenges, and a Report an issue action on each row.

Why it matters

Your customers use assets every day. Your portal cannot show them.

Assets knows who owns which laptop, phone or service. Portal customers have no Assets permissions of their own, so that knowledge stays out of reach exactly where they ask for help.

Without the app

  • Customers cannot look up which assets are registered to them.
  • Requests arrive without a reliable asset reference, so the first reply is often a question.
  • Agents link the affected asset by hand before work can start.

With Customer Assets for JSM Portal

  • A My assets entry in the Help Center user menu lists the objects assigned to the signed-in customer.
  • Report an issue opens the native JSM request form with the asset reference already in summary and description.
  • Optionally, the app sets the asset in the request’s Assets field right after creation.
  • Your administrators decide what is shown, to whom, and which service desks receive reports.

Features

Self-service for customers. Full control for administrators.

Everything instance-specific — schemas, attributes, columns, projects, audience — is configured on the settings page. Nothing is hard-coded.

For portal customers

My assets in the user menu

One entry in the Help Center user menu opens a window with the Assets objects assigned to the signed-in customer. No Assets or Jira licence and no Assets permissions required.

Find the right asset quickly

Search across all shown columns. Sortable columns and paging at 10 rows per page. URL and e-mail values become links.

Status at a glance

Status lozenges take their colour from the Assets status category, so they read the same in every language and for every status name.

Report an issue per asset

Opens the native JSM request form with summary and description prefilled. With several service desks configured, customers choose one — and are only offered those they can raise requests in.

Guidance on the request form

A short hint at the top of the form explains that the Assets field is filled automatically. It appears only on forms opened from an asset row.

Feels native to the portal

Follows the customer’s Jira theme, light or dark, and is available in 26 languages with English as the fallback.

For administrators

Nothing to connect

The app reads Assets as the app, with Forge app authentication — no service account, no e-mail, no API token. Status tiles show whether the app can read Assets; if it cannot, the settings page says why (no Assets workspace, app update not yet approved, or Assets temporarily unreachable).

Display & synchronisation

Choose object schemas (or all), the owner attribute (default Owner), an optional AQL override and the visible columns in order — column changes need no re-sync. Hourly sync plus Sync now, with the last result on screen.

Report incidents, per project

One row per JSM project: request type and optional Assets object field. Optional summary and description templates with {asset}, {assetKey}, {assetName} and {assetType}.

Automatic Assets field

Off by default. When enabled, the app writes the asset into the project’s chosen Assets field right after the request is created — only for requests it originated and only with an asset from the reporter’s own list.

Access by organisation

Restrict the feature to members of selected JSM organisations, or offer it to every portal customer (default). An impact preview shows who would gain or lose access.

Configuration audit trail

The last 50 configuration changes: when, who and what. Entries record counts only — never AQL text.

Also on the settings page: quick help with links to every chapter of the manual, and a choice between the Jira theme (default, follows each administrator’s Jira theme) and the app’s dark appearance.

How it works

Prepared in the background. Instant in the portal.

The portal never queries Assets when a customer opens it. A background sync reads Assets as the app, prepares each customer’s list in advance and stores it in Forge storage inside your Atlassian site; the portal reads only that list.

Sync architecture of Customer Assets for JSM Portal Everything runs inside Atlassian Cloud, on your own site. An hourly schedule or Sync now starts the sync consumer, which reads the customer's own Assets REST API as the app, with Forge app authentication and read-only scopes, and writes a per-customer list into Forge storage. No credentials are stored and no external endpoint is called. When a portal customer opens My assets, the portal resolver returns only that customer's list from Forge storage. Administrators configure the app on the settings page; Administer Jira is re-checked on the server. ATLASSIAN CLOUD — YOUR SITE Portal customer no Assets or Jira licence My assets window Help Center user menu Custom UI FORGE APP — YOUR INSTALLATION Hourly · Sync now Portal resolver caller’s own list only Sync consumer queue job, up to 600 s Forge storage per-customer cache · configuration · no secrets Admin settings Administer Jira re-checked on the server Assets REST API your own workspace read as the app Jira administrator settings page read-only 1 2 3 4 5 A
Every component in the diagram runs on Atlassian infrastructure, inside your site. There is no vendor server, no external endpoint, no stored credential and no public web trigger.
  1. The hourly schedule — or Sync now on the settings page — queues a sync job.
  2. The sync consumer reads your own Assets REST API as the app: Forge app authentication, read-only. No service account, no API token, no external endpoint.
  3. It writes each customer’s list into Forge storage: a delta check every hour, a full reconciliation at least daily and on every Sync now.
  4. A portal customer opens My assets from the Help Center user menu.
  5. The resolver returns only that customer’s pre-computed list, keyed by the account id from the Forge context. No Assets call at view time.
  6. Administrators configure display, incident reporting and access; the settings page lists the object schemas and samples the columns as the app, too. Administer Jira is re-verified on the server for every settings action.

Fast at view time

The portal reads pre-computed data. Opening My assets does not wait for an Assets query.

Fresh on a schedule

Data is as current as the last sync: hourly, or on demand when an administrator clicks Sync now.

No public endpoint

The app has no web trigger. On-demand sync is started only from the settings page, by a Jira administrator.

Incident reporting

From asset to request in one click.

When incident reporting is enabled, every asset row offers Report an issue. Customers land in the native JSM request form — your request types, your fields, your workflow.

  1. Pick the asset

    The customer clicks Report an issue on the affected row in My assets.

  2. Choose the service desk

    With one configured project the form opens directly. With several, the customer picks the service desk — from those they can actually raise requests in.

  3. Submit the native form

    Summary and description are prefilled with the asset reference, from your templates if you defined them. A hint explains that the Assets field is filled automatically.

  4. Asset linked on creation

    Optional: right after the request is created, the app writes the asset into the project’s chosen Assets object field.

Why the Assets field is set after creation

Jira Service Management cannot prefill Assets object fields from a link. The app therefore sets the field just after the request is created — and only within strict bounds: requests carrying the app’s own marker, the configured request types, and an asset from the reporter’s own cached list. On any ambiguity it refuses to write.

Screenshots

See it in your portal and on your settings page.

Rendered from the real user interface with demo data.

Security & privacy

Your data stays on Atlassian infrastructure.

The app reads your Assets data as the app, read-only, and stores it only in Forge storage of your installation. It holds no credentials, calls no external endpoint, and vi2va has no access to the stored data.

  • No credentialsNo service account, no e-mail, no API token. Assets is read with Forge app authentication.
  • No data egressNo external endpoint is declared. Every call goes to your own site’s Jira, JSM and Assets APIs.
  • Data residency follows your siteApp data lives in Forge storage, in your site’s data residency location, and moves with the site.
  • Runs on Atlassian eligibleForge reports the app as eligible for the programme. Atlassian shows the badge on the listing once the listed version qualifies.
  • No vendor servers, no sub-processorsNo third party is involved. Data never leaves Atlassian infrastructure.
  • Server-side authorisationAdminister Jira is re-verified for every settings action; customers only ever receive their own list.
  • Fail-closed audienceIf organisation membership is unknown or stale, nothing is shown.
  • Defined clean-upData of deleted Atlassian accounts is purged at least daily. On uninstall, Forge removes all app storage under its data lifecycle.

Read the full security and privacy overview

Languages

Available in 26 languages.

The portal view and the settings page are localised. Unsupported locales fall back to English (US).

  • Chinese (Simplified) zh-CN
  • Chinese (Traditional) zh-TW
  • Czech cs-CZ
  • Danish da-DK
  • Dutch nl-NL
  • English (UK) en-GB
  • English (US) en-US
  • Estonian et-EE
  • Finnish fi-FI
  • French fr-FR
  • German de-DE
  • Hungarian hu-HU
  • Icelandic is-IS
  • Italian it-IT
  • Japanese ja-JP
  • Korean ko-KR
  • Norwegian no-NO
  • Polish pl-PL
  • Portuguese (Brazil) pt-BR
  • Portuguese (Portugal) pt-PT
  • Romanian ro-RO
  • Russian ru-RU
  • Slovak sk-SK
  • Spanish es-ES
  • Swedish sv-SE
  • Turkish tr-TR

FAQ

Frequently asked questions

Do portal customers need an Assets or Jira licence?

No. Customers see their assigned assets without an Assets or Jira licence and without Assets permissions of their own. The app reads the data as the app, with Forge app authentication, and serves each customer only their own list.

Do we need a service account or an API token?

No. The app reads Assets as the app, using Forge app authentication and two read-only Assets scopes. Setup is: install the app, approve its permissions, and choose what to show on the settings page. If Assets cannot be read — the site has no Assets workspace, the app update has not been approved yet, or Assets is temporarily unreachable — the settings page says so. When you upgrade from an earlier version that used a service-account API token, an administrator approves the app update and its new permissions in Manage apps; the token stored by the earlier version is then deleted automatically.

Which assets does a customer see?

The objects whose configured owner attribute (default Owner) points to that customer, within the object schemas you selected, or the result of your optional AQL override. Administrators choose which columns are shown and in which order; the customer’s browser receives only those columns plus key, name, type and status category.

Can one customer see another customer’s assets?

No. The portal resolver returns only the list stored for the signed-in account, identified from the Forge context on the server. No identifier sent from the browser is trusted for this decision.

How current is the data?

As current as the last sync. The app checks for changes every hour and runs a full reconciliation at least once a day. Administrators can start a full sync at any time with Sync now.

Can we limit who sees My assets?

Yes. Restrict the feature to members of selected JSM organisations; by default every portal customer can use it. The restriction is fail-closed: while membership cannot be determined or is older than 24 hours, customers see nothing.

Does any data leave Atlassian?

No. The app declares no external endpoint at all: every call goes through Forge to your own site’s Jira, JSM and Assets APIs, and results are stored only in Forge storage. There are no vendor servers, no third parties and no sub-processors. One thing to know: Forge shares the app’s logs with vi2va by default (a site admin can turn this off; retained for 30 days). The logs contain counts, error codes and issue and asset keys — never account ids, e-mail addresses or attribute values, and the app has no credentials that could be logged. See Security & privacy.

Where is our data stored?

In Forge storage of your installation. Atlassian documents Forge storage as data-residency-enabled: because the app stores everything there and declares no external endpoint or remote, its data follows your site’s data residency location (for example EU, Germany, US or Australia when the site is pinned there) and moves with the site when an administrator migrates it. Details are on the security page.

Is the app “Runs on Atlassian”?

It is eligible. The app has no data egress, no remote and stores its data only in Forge storage, and Forge reports it as eligible for the Runs on Atlassian programme. Atlassian shows the badge on the Marketplace listing once the listed version qualifies. Details are on the security page.

Why is the Assets field on the request filled after creation?

Jira Service Management cannot prefill Assets object fields from a link. If you enable the option, the app sets the field right after the request is created, for requests it originated only.

Which service desks are offered when a customer reports an issue?

The projects your administrator configured, filtered by the customer’s own desk access. Unlicensed portal accounts cannot make that access lookup, so they are offered all configured projects.

What happens when we uninstall the app?

Forge soft-deletes all app storage. Under Atlassian’s data lifecycle it can be relinked on request for 21 days and is then deleted.

Which deployment options are supported?

Atlassian Cloud only. The app is built on Atlassian Forge for Jira Service Management with Assets and is licensed through the Atlassian Marketplace.

How is the app priced?

The app is a paid app, licensed and billed through your Atlassian account via the Atlassian Marketplace; Atlassian is the merchant of record. It is free on sites with up to 10 users. From 11 users it is priced per user, and the Marketplace listing shows the price for your tier. The terms are the standard Atlassian Marketplace end user agreement; there is no separate contract.

More answers in the documentation FAQ.

Give your customers a view of their assets.

Install Customer Assets for JSM Portal from the Atlassian Marketplace, approve its permissions, and choose what to show. There is nothing to connect.