nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Getting "You are not permitted to perform this operation." for every user account

Objectivity

For everyone that tries to log into our Confluence system, they are getting You are not permitted to perform this operation. message...even the local admin account. We are using LDAP authentication, but local account is the same. Our system did get rebooted which brought up this issue. We are running on a CentOS VM.

Accepted answers

All comments

JamieA

Sounds like the users are not members of the group confluence-users. This could happen if you recently upgraded and something went screwy converting your ldap config to user directories.

What version of confluence do you have?

Dale Edney

Do users need to be members of the group 'confluence-users' or can they access a space if they are just a member of one of the groups that has permission to view the space?

I have a situation at the moment where a user isn't a member of 'confluence-users' but is a member of one of the gorups that has permission to view a given space, but when they try to log in they get the error message 'You are not permitted to perform this operation'.

Thanks in advance for your help.

Nic Brough -Adaptavist-

They need to have the global "can use" permission as well as any space related permissions. The default setup is to allow "confluence-users" that right, so you usually find that the answer to your question is "yes, they need to be in confluence-users"

The "can use" permission boils down to "can log in" really, although it's not quite that simple behind the scenes. Have a look at Admin -> Global permissions (same area as the other user maintenance functions)

You've got options - add their group to the global "can use" permission, allow anonymous access, set up another group (or set of groups) to allow "can use" on a more structured way and so-on.

Dale Edney

Thanks Nic. That helped!

Dale Edney

Thanks Nic, that helped!

Francis Vidal

This happened to me when I enabled "Synchronise Group Memberships" from the LDAP server. Users who logged in suddenly disappeared from the confluence-users group.

Camille_kwy92k

Thanks Nic this was what worked for me, confluence-users did not have "can use" allowed.

calvin.dike

General Configuration > Global Permissions > Add the confluence-users and give 'can use' permission. If you migrated to another confluence then check the group AD group that has all the users being migrated and assign 'can use' permission. Assigning Personal Space and Create Space permissions are up to you.