Our Confluence instance has always been open to all logged-in users. We have several hundred spaces that were created before I took over as admin. We've now gotten a request to lock down all spaces to third-party contractors, and only allow them access to a small handful of spaces.
Is there any way, short of going through each existing space individually and replacing the confluence-users group with a custom employees-only group, to update the permissions on most of the spaces to exclude a specific user group?