If you don't create the groups "confluence-administrators" and "confluence-users" in the jira instance before establishing jira as the user manager and having confluence authenticate through jira, you get a "Not Permitted" error. Uncertain if establishing the groups AFTER hooking confluence up to jira fixes things, but I do know that if you create the groups before hand (and assign users to those groups), it will work.