Need to restrict confluence space access to company email addresses only

[Harvinder Singh]

We have certain confluence spaces that are shared with client as well and have access restrictions. However, there are certain spaces on which we want default access of company people only(excluding external users like client).

I was thinking of creating a group that has all company users mentioned in it and in turn provide access to that group only for specific space. However, issue comes when a new company user is created and I will have to manually include that credential as a part of that group(excluding external users). Can't it be done as default that only company person automatically gets included in that group and not the external users.

e.g. learning and Training space access we want restrictions to company people only

[Daniel Eads]

Hey Harvinder!

If you're on Server and using an LDAP directory for your company, then good news! We support this with an option in the User Directory called Default Group Memberships. In the Directory configuration for your company's LDAP, you'll just add an additional group you want to auto-add (confluence-users should be in there already). Check out our documentation if you want to read up more on that option.

For the rest of the setup, it would go just as you described. Add that other group to the spaces you want your internal folks to have access to.

However, if you're on Confluence Cloud, then unfortunately there's no option like this right now. There's one open feature request I could find for default groups: JRACLOUD-42820. There's also work being done on LDAP integration for Cloud which would help out if the LDAP connection brought in group memberships (you could use a group local to your LDAP for access).

Cheers,
Daniel