How to manage several groups with authorization differents ?

[Francoise DUCLOS]

Hello, I have a site of 500 users. I need to open it to people outside of the company. What is the best pratice ? Create several spaces and put "all confidential" in one, and others parties spread in two or three spaces following the people who want to access to ? (But it may require a copygroup?)

Or create severals groups and give access to several pages to theses groups?

I have a lack of experience on this kind os task

Thnkas for you help

[Diego]

Hello @Francoise DUCLOS !

As I understand, you need some clarity on how to manage permissions within your Confluence Site.To be clear, this is heavily dependent on what you need to share and how complex are your company rules.

However, my advice would be to look into providing Public Access to the content you need to make available for people outside your company. Confluence provides ways to do so, you can check more about it here:

• [Confluence Server] Setting up public access
• [Confluence Server] Make a Space Public

There are some details about Public Access that I believe are worth mentioning:

1. Everything made Public can be seen by anyone
2. Nothing that is not explicitly set as Public will not be available for anonymous access
3. If content is set to be public and has no other group or user with access permissions, only anonymous (not authenticated) users will be able to see that content

It also seems that you need more granular control over the content within your instance. With this in mind, I can give you some documentation on Permissions and Restrictions.

Permissions are applied at Instance or Space level, you can check more about them here:

• [Confluence Server] Global Permissions Overview
• [Confluence Server] Space Permissions Overview

For pages we can use Restrictions to increase the granularity in access. You can check more details about Restrictions here:

• [Confluence Server] Page Restrictions

For general guidance on good practices on Permissions, you can check here:

• [Confluence Server] Permissions Best Practices

I hope this helps! Let me hear from you.

[Francoise DUCLOS]

Thanks Diego for this quick summary of authorzations .

In fact, Confluence is settled y the DSI , They organize it with three groups: one for reading, one for reading and writing and one for space administration. I had organize my space for six months. People are used to SharePoint and use to have "private" groups. I wonder, how to incorporate a new groupe without too much complication ?

manage sheets restrictions could be a hard job, following the number of users you may have

People mouvements is also important in my department, 

I have somme questions :

- is it possible to have groups which inherite from another group (in order to minimize the changes impacts)

- if I have two spaces which communicate together with the same access group,  is it possible to inherited the changes in the first space to the second one?

Best regards

[Diego]

Hello again! Thanks for keeping the thread alive.

As of Confluence Server version 3.5, Groups can be nested within each other. Here is the report about it and the documentation:

• [Confluence Server] Support nested groups
• [Confluence Server] Configuring User Directories
• [Confluence Server] Managing Nested Groups

Currently, Spaces have each their own set of permissions. They can not be inherited from another Space. If you deny or grant a set of permissions inside Space A, it will not carry to Space B, even if the group or user is present in both Spaces.

I hope this helps!