Space Permissions

Please keep in mind that users must be given access to Confluence before you can add them to your space(s). To request access for a user, please email us at confluence-admin@columbia.edu with the user's UNI, Full Name, and email address, as well as any groups you need to add them to. Your groups should typically be formatted as such: SPACEKEY-groupname. For more information, please see the section on Group Permissions below.


Permissions and Groups


Each space in Confluence has its own set of permissions, which can be granted and revoked by a space administrator. The user that requests a space is automatically made an administrator of that space, and they can add other space admins if they want to by adding the Space Admin permission to another user or group.

If you're a Space Admin, you can assign permissions for the space to individual users, groups, or anonymous users. To change permissions for a space, choose Space tools > Permissions from the bottom of the sidebar, then choose Edit Permissions to change permission settings.

This page is about Space Permissions. Space Permissions apply to the space as a whole. Confluence also lets you set Page Restrictions, which allow you to subtract permissions from a specific page or page tree. Please keep in mind that you will not be able to grant permissions to a single page via Page Restrictions which only allow you to remove existing permissions granted at the space level.

Group Permissions

A popular way to manage permissions for your spaces is to create groups using the Users & Groups plugin, assign specific permissions to each of those groups, and then add users to those groups to pass the permissions on to them. You can think of these groups as specific access roles for your space. By default, we create three groups for each space: SPACEKEY-admins, SPACEKEY-editors, and SPACEKEY-readonly, where "SPACEKEY" is replaced by your spacekey. You can adjust the specific permissions of these three groups in the Space tools > Permissions page. 

Group Management

You can add or remove groups from your space by going to Space tools > Users & Groups. For example, you might have a space where you only have 10 users and all 10 need the same admin access. In that case, you can delete all groups except for SPACEKEY-admins and simply add these users to that group.

To add users to a group or remove users from a group, simply go to Space tools > Users & Groups, select the group you want to manage, and add or remove users from the list that appears. 

Please note that you will not be able to add users to your group until they have a Confluence account created by the Academic Services team. If you are unsure whether a user has access to Confluence, you can attempt to add them to your group. If you get an error that the user is not found, you can email us at confluence-admins@columbia.edu with the user's UNI, Full Name, and email address as well as the group(s) they should be added to.

Search Confluence Documentation


On this page:

Permissions Summary

The following permissions can be assigned for each space:

PermissionApplies to
ViewThis lets a user view all the content in your space.
AddThis lets a user add and edit pagesblogscomments and attachments.
RestrictThis lets a user restrict others from viewing or editing a page.

Delete own

This lets a user delete any pagesblogs and attachments they originally created (regardless of whether other users have subsequently edited the content).
DeleteThis can be used to let a user delete pagescommentsattachments and imported mail items from Mail Archives
ExportThis lets a user export the whole space. This is different to page exports - anyone who can view a page can also export it.
AdminThis lets a user administer the space, including the ability to pass on admin permissions to other users.


See Files for more information on the space permissions required to upload and delete attached files.

Space permissions are additive

Space permissions are additive. If a user is granted permissions as an individual or as a member of one or more groups, Confluence will combine these permissions together. 

Example:

Sasha is a member of the confluence-users group and the developers group. The confluence-users group has 'export' permission, but does not have 'restrict' permission. The developers group has 'restrict' permission but does not have 'export' permission.

By being a member of these two groups, Sasha can restrict and export content. The permissions do not conflict, they combine to determine what Sasha is allowed to do in this space.