Map AD Groups to Spaces

[James Bal]

Hi,

We are currently moving to a production version of Confluence.  Our evaluation version is configured and integrated with AD which authenticates our users.  Currently we create groups, then add individual users, then grant permissions to Spaces using these groups.

We would like to map AD groups so that membership of an AD group would automatically allow access to one or more spaces.  For example, all members of the Finance AD group would be able to access those Spaces we have given the Finance AD group permission to view.  This way once we have configured our space permissions we can then manage Space access via AD instead of Confluence.

Is this possible?

[Ed Selig]

This works well.  We currently have it setup so that all the users in the main AD group has access to view, and each teams AD sub group has full permissions to their space.  Keep in mind that if you give a group view permissions to a space and another full permissions to the same space, if the user is in both groups they will have they will have full permissions.

Also you can use restrictions to restrict access with AD groups to specific pages.

[James Bal]

Thanks Ed, but how is this done?  When I try to add an AD group to a space it isn't accepted, it doesn't recognise the AD groups.  How does the mapping work?

Apologies if this is basic stuff, I'm new to Confluence.

[Thomas Starup]

Hi @James Bal  - did you ever figure this out ?

I seem to have the same problem four years later.

Thomas

[repi]

Is this possible?

Yes, it works like this:
You can also mix users and groups from the AD with users and grpups from the internal directory.