User group inheritance

[sc]

Dear all,

I am actually study confluence admin and groups of users permission.
When you create a user which belongs to 2 different groups ( Dev, Tec)

When I define that those 2 groups Dev and Tec have access to a given Space.
I define it so that TEC group get less permission than Dev group.

When I login in with the user belonging to those groups and access the Space, how permission gets apply? Does it take all time by default the permission for groups which are more restrictive and ignore the others ?

Or does permission are build based on the 2 groups the user belong ?

Thanks for clarification

[Stephen Sifers · Accepted solution]

Hello,

Managing groups within Confluence can become tangled if you’re unaware of how the permission structure will work when implemented. With this said, if a user is a member of two groups then the more powerful permission group will win. Here is how it is broken down:

Overlapping group and user permissions

When a user is assigned more than one permission, the more powerful permission will prevail.

• A user may be assigned a permission specifically to their username. They may also be assigned a permission by belonging to a group, or even several groups.
• The user will then be able to perform all functions assigned to them.
• So if a user is allowed to do something over and above what the group can do, the user will be able to do it. And if the group is allowed to do something over and above the specific permissions granted to the user, the user will still be able to do it.
• If anonymous users are allowed to do something over and above what the user or group can do, the user will be able to do it, (even while logged in).

Source documentation: Confluence Groups

Additionally, if you’re wanting to learn more about permissions within Confluence I would suggest reviewing the following articles:

• Permissions and restrictions
• Managing Nested Groups
• Confluence permissions architecture

I hope this information and the resources prove helpful for clarifying how permissions will be applied to users.

Regards,
Stephen Sifers