Creating pages within confluence with API tokens

Raymond Correa July 12, 2024

Trying to create a page in confluence with the API using an access token I created for my user. Tried the access token and the a base64 version including my email address in front, both result in a 403 "Current user not permitted to use Confluence" . Do I need some permission in addition to the token created to make confluence updates via the API? See attached curl for additional details.

Is it possible to grant a user limited access to use API to edit/create/delete a page within 1 single confluence space

 

 

  "statusCode": 403,     "data": {         "authorized": false,         "valid": true,         "errors": [],         "successful": false     },     "message": "com.atlassian.confluence.api.service.exceptions.PermissionException: Could not create content with type page

1 answer

0 votes
Mykenna Cepek
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 13, 2024

Personal Access Tokens (PATs) are different between Jira and Confluence. So if you are trying to use a Jira PAT to authenticate to Confluence, it will not work (and vice versa). Ensure you are using a Confluence PAT to authenticate to the Confluence API.

Do I need some permission in addition to the token created to make confluence updates via the API? See attached curl for additional details.

Absolutely. The PAT used to authenticate to the Confluence API is in the context of the user who owns the PAT. If that user doesn't have permissions to access the target Space in Confluence, for example, the API will deny access. So ensure the user associated with the Confluence PAT has access to the target Space and page hierarchy.

Is it possible to grant a user limited access to use API to edit/create/delete a page within 1 single confluence space

The API is open to all who can authenticate. However, normal Confluence user access controls are used to implement additional limitations. There's nothing special about using the API. If the user associated with the PAT cannot access a Space or Page, then they will be denied access both in their browser and via API calls.

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
TAGS
AUG Leaders

Atlassian Community Events