Is it possible to set page restrictions for system admins?

[Chris K]

Dear Community,

Is there a way to restrict systemadmins from viewing a confluence page in Data Center?

I found some content that there should be a possibility to restrict systemadmins from viewing pages (https://community.atlassian.com/t5/Confluence-questions/Can-confluence-system-admins-view-restricted-pages-if-its-not/qaq-p/593940#U2390490), but I can't agree on that for our system.

As a system admin, I am able to see all pages, even with restrictions. We are currently searching for a solution to restrict pages, even for system admins.

Do you have any ideas?

Greetings

Chris

[Mirek]

Hi @Chris K 

Making a page restriction to a page still make sense since this page it not showing in the search for super admins (you need to have a direct link)

But I suggest checking if you use confluence-administrators group..

This is a special group that gives highest possible permissions including access to all spaces including those with restrictions.. You might consider removing users from that group and see if that helps.

So overall there is also a big difference between Confluence Administrator, System Administrator and a member of a confluence-administrator group.

More information you can find in below documentation

https://confluence.atlassian.com/doc/global-permissions-overview-138709.html#GlobalPermissionsOverview-Confluence-administratorssupergroup

https://confluence.atlassian.com/confkb/confluence-admin-permission-levels-explained-604209420.html

[Evgenii]

Hi, @Chris K 

It's possible, but pointless, because System Admin can always remove restrictions.

To check, that restrictions can be set - try to set restrictions on page, that only you can see and edit it, and ask your colleague to check, can he see it or not.

[Chris K]

Hi @Evgenii

Thank you for your reply. I checked and my colleague (who is also admin) sees the page I restricted without even the need of changing the page restriction.

Restricting a page may seem pointless, but it would still be great to restrict pages for admins, because we have use cases, where they aren't supposed to see confidential sources (at first sight). If a page is restricted we eliminate the case, that confidential information is opened by mistake. For everything else, the admins need to be trusted.

In Jira, we solved this via issue security level, there it works just fine.

Greetings Chris