nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How do we restrict users to specific spaces?

Erwin Manuel

What we want to achieve is for a specific group to only access selected spaces.

I created a GroupA and added UserA to it. Even if I gave 'space' permission in SpaceA to GroupA, UserA still could not access the SpaceA.

But when I added GroupA to global permission, UserA can then read all of Confluence which we do not want.

I also looked into the option of restricting other spaces but this is also not available, I only found restrict page which is not feasible for us to implement because obviously there are lot's of pages.

How do we go about this? Thanks.

Accepted answers

All comments

Thomas Schlegel

Hi Erwin,

what do you mean by global permission and space permission ?

User A needs the global permission to login to confluence (usually group "confluence-users") and the local space permission to read / write / ... pages in the space.

Best regards

Thomas

howard tiersky

Hi Erwin! Let me try to restate your question and see if I understand it correctly.

Your confluence is currently set up so that most or all of the spaces are open to everyone who has access to confluence (global permissions) is that right?

You now want to have a new group of users only have access to a certain space but not any of the other spaces is that right?

Ok so first of all, Group A as you describe it has to have "Can use" global permission checked. if you dont do that they cant access confluence, so dont uncheck that.

second, most likely you have a "default" group called confluence-users that all your confluence users are added to by default to give them access to all the spaces, and most likley all your spaces are set up right now so that the group called confluence-users has access to them (which is why all your "general" users have access to all your spaces).

The most straightforward way to solve your problem is to simply *remove* the users in group A that you dont want to have access to all those other spaces from the confluence-users group. This will "take away" their space-by-space access to all those spaces you dont want them in.

But since they are inheriting their "can use" access to confluence from their membership in this group, this first step will also take away all their access to confluence (including Space A) so we have to fix that.

So next you need to go to the global permissions tab and explicitly list Group A in the groups list there and give them "can use" access.

Then check to be sure that Space A explicitly lists Group A as having permissions (under Space admin) and I beleive this will give you what you want.

As you add new users for Group A you just need to be careful to be sure they arent added to confluence-users b/c that is prob your default.

Others can double check my answer here to be sure I havent missed/mis-stated anything.

Let me know if this answers your question and more importantly if it works for you

howard tiersky

i like your avatar

Erwin Manuel

Hi,

Thanks to all the replies! the main issue was we were allowing Anonymous access to confluence, once I removed that, I had no issue giving out specific access to specific spaces.

krussell101

Howard: Your directions are exactly what I needed. Thank you!!

Karla

Mike Hutchinson2

Perfect. Just the solution I needed.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

permission