At the moment, any users with the Browser Project permission in JIRA will be able to Create or Associate using the Cloud Connector. Customers require certain permissions to be added into the Cloud Connector to limit the usage to only certain users.
Adrien Low
We will base on Edit Issue permission to 1) show/hide Create/Associate/Push/Pull/Unlink in the overview panel and 2) Provide an error message in the Search page in JIRA, if user associates an object with a JIRA issue they can't edit.
Yes, it's true, I've received tickets requesting something similar.
Cheers
Many migraton customers are requesting for this.