confluence-administrators vs. "regular" administrators?

Question

I have an employee who is our resident "confluence power user". I'd like for him to be able to do everything on the site except see every page on the site. For instance, there are other employees financial information/performance reviews/etc. and he shouldn't have access to this. What is the best way to handle that.

Is there something like a "confluence-administrator-lite"?

Ryan Carpenter_ubp5b5 · Answer

Scratch this. I have posted a new response with more accurate information.

Ryan Carpenter_ubp5b5 · Answer

Yes. In the Confluence settings, go to Global Permissions and create the confluence-admins-lite group, and give the group Confluence Administrator permission but not System Administrator permission.

Users in the confluence-admins-lite group will have access to the Confluence admin panel, but will not be able to edit the System Administrators group and will not be able to edit their own groups to become a System Administrator.

Users in confluence-admins-lite will be able to edit their own groups, and the System Administrators group will appear as an option. However, selecting a group with system administrator permission and attempting to save produces the following error message (in Confluence Server 7.3.2).

You can now control page access through page permissions. Make sure to consider any additional precautions needed to make sure that sensitive content will remain in the restricted space and that unrestricted pages containing sensitive content will not get created. And of course, test everything thoroughly before implementing any of these suggestions. Results may vary. I could be wrong. There may be something else important to consider.

More information:

* Confluence Admin Permissions Explained
* Global Permissions Overview

Ryan Carpenter_ubp5b5 · Answer

Pardon me. You can make a group of your own, separate from the confluence-administrators group, that has "Confluence Administrator" privileges and not "System Administrator" privileges. The permissions of your confluence-admins-lite group will look the same as the confluence-administrators but there may be some special functionality of the predefined group. I am not sure about this, so you will need to test the lite group and/or get more information from Atlassian or someone who can give a definitive answer.