how to limit confluence cloud space admin adding individual users

[Ethan Vaughan]

Infosec wants a method of limiting the ability that space admins have to add individual users to their space.

[Jehan Bhathena]

Hi @Ethan Vaughan ,

with the Infosec team in perspective, would recommend you revoke the "Admin" permission for all Individual users and any group other than site-admins.

Suggestion: Would recommend centralizing the admin permissions to someone from your team, and take requests via some ticketing system to track the change requests.

[Ethan Vaughan]

Not a terrible idea. Currently we have a process thru SNow to add/remove users to the 3 unique groups assigned to each space, (Admin_*spacekey*).

We run all access thru this style. The issue is that admins are inherently able to bypass that by assigning individuals; which is the entire solution I'm looking for.

Not going to centralize access control like that because we're talking about hundred plus spaces.