Getting started

1. Add a rule

1. Go to Settings → Apps → Comment Defaults (Jira admins).
2. Click Add a rule. Choose the projects (or all), issue types (or all) and, optionally, author groups.
3. Choose who should see new comments: a project role (for example Developers) or a group.
4. Turn on Dry run first if you want to see what would happen without changing anything.
5. Save, and switch the safety net on.

2. Check setup

Jira only lets an account restrict a comment to a role it belongs to, and editing other people's comments needs the Edit all comments permission. Click Check setup: for every project a rule touches it shows both, and Add the app to this role fixes the role membership in one click (Jira may ask you to allow access the first time).

3. Write restricted comments from the start

On any issue, open the Restricted comment tab under Activity. Pick who can see it (the rule's choice is preselected) and post. The comment is created restricted, so it is never visible to anyone else, not even for a second.

4. Read the log

The Log tab lists every comment the app restricted, would have restricted (dry run) or couldn't restrict, with the reason. Export it as CSV for audits.