How to give access to only one space to a user in confluence wiki

[badana_teja]

Hi Team,

We have nearly 12 spaces in confluence wiki, but 1 space is different than others. So how to give access to a user for that only one space and he should not able to see other 11 spaces. Remaining people can able to see 11 spaces and should not able to see that 1 specific space. I tried created one group for that specific space and added to that space permissions. but user unable to login wiki. So I added this group in global permissions then user able to login wiki but he is also able to see entire site. Could you please assist how to make these permission changes ? For your information, we are using wiki server version.

Thanks,

B.S.Teja 

[JP _AC Bielefeld Leader_]

Hi,

first, handle access to your server (regardless of the spaces) with different groups than the spaces access.

Server access:

Group name: confluence_users - Global right: access server

Put all users with access to the server in this group.

There will be other server access groups with eg. admin rights etc, but this is out of scope here

Space access:

Group name: space_abc_access

Put all users with access to space ABC in this group.

Group name: space_xyz_access

Put user with access to space XYZ in this group.

Space ABC: Add group space_abc_access as group with the appropriate rights to space ABC

Space XYZ: Add group space_xyz_access as group with the appropriate rights to space XYZ

Make sure that the server access group (confluence_useres) is NOT added as a group in the space permissions.

Add admin users (System/Confluence admin) as single users to the spaces, if you like.

That should do.

Best

JP

[Steve Thornhill]

The first level of access that you need is the ability to log onto Confluence, and you will most likely find that this is the confluence-users group and everyone will generally be in this group.

To restrict the space access you will need to remove the confluence-users group from all spaces, then apply the new group for that user to their space, followed by a more general group for the remaining spaces.

So, confluence-users will allow anyone in that group to log onto the system

But the defined groups will then permit access to the spaces where they are applied to the permissions.

[badana_teja]

Hi,

Yes, I've revoked confluence users group access to that specific space, and applied the new group for that user to their space, but still that user is able to see all the remaining spaces. Is this working correct ? Please tell me.

Thanks,

B.S.Teja

[JP _AC Bielefeld Leader_]

Revoke the confuence users group from ALL spaces as explained above in two posts & use dedicated space access groups for each space. As long as THE USER is still member of the confluence user group & this group is used for granting access to Confluence AND ALL SPACES THE USER will see all spaces.

Best

JP

[Steve Thornhill]

Thanks JP

[badana_teja]

Hi JP,

I understand, what I've done is below, but not getting expected output. Please correct me if I'm wrong.

1. Revoked confluence users group access to that specific person

2. Added him into newly created group

3. Added newly created for specific space.

4. User unable to login for 1,2,3 steps.

5. Added newly created group in global permissions.

6. User able to login wiki and able to see all other spaces also.

7. Expected output is that specific person should able to login wiki and should able to see only that specific space, not even one space from remaining.

Regards,

B.S.Teja

[Steve Thornhill]

Leave that user in confluence users. This group is assigned to the global permission allowing everyone to log in.

Create 2 groups, one for that user, another for everyone else.

Assign the 1st group to permissions of the space for that one user, remove confluence user group permission

Assign the 2nd group to all other spaces, remove confluence user group permission

[badana_teja]

So understood that otherthan confluence users, we need to create two groups ? Am I correct ?

But in that case, we have already added hundreds of users in confluence users group and that group is mapped to several space permissions. Now what would be the solution.

[badana_teja]

Also, I see there is a default space permission is there in permissions section. There confluence-users group is selected.

[Steve Thornhill]

Yes, 2 groups will allow for you to manage the spaces.

And confluence users will be defined for access by default in the space creation. You can update this, so going forward new spaces will also be restricted until opened up to groups.

[JP _AC Bielefeld Leader_]

@Steve Thornhill Thanks, made my day...