Supplementary information
1. Space permissions
1.1 Space Permissions Overview
Every Confluence space has its own set of permissions which determine what people can do in the space.
Space permissions are set by the space administrator. The user who created the space is automatically a space administrator, and other users can also be granted Space Admin permission.
1.2. How to edit space permissions?
To change permissions for a space, choose Space tools > Permissions from the bottom of the sidebar, then choose Edit Permissions to change permission settings.
1.3. Permissions summary
The following permissions can be assigned in a space:
Category | Permission |
---|---|
All | View gives you permission to access the content in this space, and see it in the space directory and other places like the dashboard. Delete own gives you permission to delete any pages, blogs, attachments and comments you've created in this space (regardless of whether other users have subsequently edited the content). |
Pages | Add page gives you permission to create new pages and edit existing pages in this space (assuming the page is not restricted for editing). Delete page gives you permission to delete any page in the space. |
Blog | Add blog gives you permission to create new blog posts and edit existing blog posts in this space (assuming the blog post is not restricted for editing). Delete page gives you permission to delete any blog post in the space. Delete permission is also required to move a page or blog to a different space. |
Attachments | Add attachment gives you permission to upload (attach) files to pages and blog posts in this space, and to edit attached files using the Companion app. Delete attachment gives you permission to remove attached files from pages or blog posts in the space. People with only Add page or blog permissions can still insert existing attached files in the editor, and remove files from the editor, so they're not displayed on the page or blog post. They can't however upload a new file, a new version of an existing file, edit an existing file using the Companion app, or delete the attached file itself. |
Comments | Add comments gives you permission to add comments to a page, blog post or attached file. Delete comments gives you permission to delete any comment on a page, blog post or attached file. |
Restrictions | Add restrictions gives you permission to apply page-level restrictions to a page or blog post. You can restrict a page for viewing, or just for editing. Delete restrictions gives you permission to remove restrictions from any page or blog post. |
Delete mail gives you permission to delete mail items that have been archived in this space. This is not a commonly used feature. | |
Space | Export space gives you permission to export all the contents of the space to PDF, HTML or XML. This is different to single page exports - anyone who can view a page can also export it. Admin gives you permission to access all space administration tools, including things like permissions, templates, look and feel, and the ability to delete the whole space. |
Here's how it looks on the Permissions screen:
2. Page restrictions
2.1. Who can view my Confluence pages?
Conluence pages are open for viewing or editing by default
To check who can view a page:
- Go to . > People who can view
- A list of all the people who can view the page will appear.
- Start typing a name to filter the list.
2.2. What are the standard restrictions types?
The restrictions icon at the top of the page gives you a clue that the page has restrictions:
Viewing this page is not restricted. Everyone can see this page (but editing may be restricted). | |
The page is restricted. Click the icon to see the list of who can view and edit this page. | |
The page is inheriting restrictions from another page. Click the icon then choose Inherited Restrictions to see a list of pages this page is inheriting restrictions from. |
2.3. How to restrict access to Confluence pages?
Page restrictions can be applied to published or unpublished pages and blog posts (drafts).
Don't forget, every page in Confluence lives within a space, and space permissions allow the space admin to revoke permission to view content for the whole space. Even the ability to apply restrictions to pages is controlled by the 'restrict pages' space permission.
To restrict who can view or edit a page or blog post:
- Choose the Restrictions icon at the top of the page.
- Choose whether you just want to limit only who can Edit, or who can View and / or Edit.
- Enter users or groups then click Add to add them to the list.
If you chose Viewing and Editing restricted you can further specify for each person or group whether they can edit or just view the page. - Apply the restrictions.
You can add as many users and/or groups as you need. You can apply page restrictions to published and unpublished (draft) pages.
In this example, some users and groups can view only, others can also edit, plus there are inherited restrictions that might impact who can view the page.
- Speed it up: apply the same restriction to multiple people and groups.
- Watch out: restrictions on other pages can affect this one.
- Be specific: choose exactly what each group or person can do.
3. How do permissions and restrictions interact?
The diagram below shows the points at which someone could be prevented from viewing a page.
- Site - they don't have permission to log in to Confluence.
- Space - they don't have permission to view the space.
- Parent page - the current page has a view restriction preventing them from viewing.
- Child page - the current page is inheriting a view restriction from another page higher up in the page hierarchy, preventing them from viewing.