Any option to deny confluence-administrators to directly access a specific space?

Question

Hi,

We have a one general management space which shall only be accessible by a very small group. Members of the group confluence-administrators should not be able to read the content by default, at least not without leaving a trail in the audit log that they temporarily gave them self a certain permission. Has anybody a tip for suitable configuration?

Thanks!

Tuelle · Answer

Dear Shannon, thanks for the tip with the new group. We will check if this would fulfill our requirements.

Best regards

Tuelle

Shannon S · Answer

Hi Tuelle,

The confluence-administrators group is a special super users group and will allow them to automatically bypass all permissions set.

Have a look at Global Permissions Overview > Comparing the System Administrator permission with the Confluence Administrator permission for more details.

A recommendation would be to set Confluence Administrator permission instead of adding users to the confluence-administrators group.

From the above article:

If you don't want your admins to be able to see all spaces and restricted pages, you can create a new group, and grant that group the Confluence administrator and system administrator global permissions.

I hope that helps but let me know if you have any questions!

Regards,

Shannon