Assign View-Only Access to all organizational users

[Rabih Safadi]

Our confluence cloud user access and provisioning is managed by Atlassian Access.  Currently, only our corporate users are given a license while our field users do not have a license.

Is it possible to issue organization-wide view access to all field users to a specific space WITHOUT enabling anonymous/public access and WITHOUT issuing a license to every single user?

[Daniel Eads]

Hi @Rabih Safadi ,

If I understand correctly, you're looking to have some non-licensed people read Confluence pages while disallowing other non-licensed people from viewing them.

One potential way to do this would be to use the IP allowlisting mechanism included with Confluence Premium and restricting access to IP blocks within your office range. This would require the users to be coming from known IP addresses, such as through a corporate VPN where *.atlassian.net is one of the tunneled routes.

From there, you could enable anonymous access. Users not on your network or coming over your corporate VPN would be given an access denied message, even if they were attempting to view pages/spaces with anonymous access enabled.

Cheers,
Daniel | Atlassian Support

[Rabih Safadi]

Thanks @Daniel Eads this is an excellent solution for corporate networks.

Unfortunately our several-hundred stores are not networked with VPN so the IP addresses would amount to well over the 100 limit of the IP whitelist feature.

I don't suppose there is a way to whitelist based on whether the user is logged into an instance of Office365/Azure AD linked to a specific domain/tenant? (again, without adding them all to Atlassian Access and paying the license fee)

[Daniel Eads]

No, unfortunately managing permissions on a per-user basis like this requires a product license.