Hide the content for administrator.

[Tomasz Bryła]

Hi,

I need to hide some content for confluence administrator. I know that when user is in group "Confluence Administrator" then he can see any space and page. But in my company we store very sensitive data on Confluence and someon of them Adminisrato shouldn't see. 

Is any resolution for this problem? 

[Nic Brough -Adaptavist-]

Actually, admins cannot automatically see all pages.  They can be removed from the space permissions, and they won't see the space like any other user who can't.

But as soon as they go into Admin mode, they'll be able to see the space and its settings, and hence add themselves into the space if they want.

This is not a "problem", it's a very simple case of you having to trust your admins.  If you don't trust them with data in the Confluence they look after, then you have to move that data to another system they don't admin.  This is not a Confluence problem, it's a human information access problem you have with any system.

[Bill Bailey]

Yes, admins have to operate under the honor system to not reset permissions for spaces/pages they do not have rights to (unless asked to do so).

[JP _AC Bielefeld Leader_]

Hi

you still get an audit log logging all admin activities related to security. So the admin might be able to gain access to a space / page he shouldn't see, but this will be logged.

And, by the way, there is content an admin cannot get access to unless he know the exact title: Create a blog post, restrict it to yourself and not the admin(s) & publish it. Then switch to an admin account & try to find the blog post... It's shown nowhere. For pages you can use the page tree in the space tools, but for blog posts... 

Best

JP

[Nic Brough -Adaptavist-]

Hmm.  But if I go into the space as an admin, I can see it on "restricted pages", and unlock it (Confluence 5 though for this test - did you check 6?)

[JP _AC Bielefeld Leader_]

Nic,

you see restricted pages yes, but no restricted blog posts...

I tried... There is an issue open on that topic because it's an auditing issue on our site.

[Grigory Salnikov]

Hi!

You can use "Page restriction" functionality to hide the pages from administrators. But, nevertheless, they still will be able to change that restriction and add themselves to viewers or even editors. You see, the role of an administrator assumes they are able to gain access to any content in the system.